{"schema_version":1,"title":"JHipster vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 9 vulnerabilities in JHipster: 0 in the last 7 days and 2 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-107375, was published on 8 October 2026. Nothing in the last four weeks, down from 2 vulnerabilities in the four before.","url":"https://junglewise.ai/threats/vendors/jhipster","json_url":"https://junglewise.ai/threats/vendors/jhipster.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/jhipster","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","thin":false,"counts":{"high":2,"all_time":9,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":2,"last_365_days":2},"latest":[{"cve":"CVE-2026-107375","cvss":8.8,"slug":"cve-2026-107375-jhipster-sql-injection-in-the-parameter-of-jhipster-generated","title":"JHipster SQL injection in sort parameter of generated reactive applications","severity":"high","exploited":false,"published_at":"2026-10-08T17:40:37+00:00","url":"https://junglewise.ai/threats/cve-2026-107375-jhipster-sql-injection-in-the-parameter-of-jhipster-generated"},{"cve":"CVE-2026-107303","cvss":7.6,"slug":"cve-2026-107303-jhipster-generated-applications-allow-stored-xss-via","title":"JHipster generated applications stored XSS via unrestricted Blob content type","severity":"high","exploited":false,"published_at":"2026-10-08T17:40:29+00:00","url":"https://junglewise.ai/threats/cve-2026-107303-jhipster-generated-applications-allow-stored-xss-via"},{"cve":"CVE-2025-43712","cvss":3.1,"epss":0.0026,"slug":"cve-2025-43712-jhipster-privilege-escalation-via-response-manipulation","title":"JHipster privilege escalation via response manipulation","severity":"low","exploited":false,"published_at":"2025-07-25T15:30:53+00:00","url":"https://junglewise.ai/threats/cve-2025-43712-jhipster-privilege-escalation-via-response-manipulation"},{"cve":"CVE-2025-31119","cvss":3.1,"epss":0.0053,"slug":"cve-2025-31119-generator-jhipster-entity-audit-unsafe-reflection-in-javers-audit","title":"generator-jhipster-entity-audit unsafe reflection in Javers audit","severity":"low","exploited":false,"published_at":"2025-04-04T14:06:35+00:00","url":"https://junglewise.ai/threats/cve-2025-31119-generator-jhipster-entity-audit-unsafe-reflection-in-javers-audit"},{"cve":"CVE-2015-20110","cvss":3.1,"epss":0.0059,"slug":"cve-2015-20110-jhipster-generator-jhipster-timing-attack-in-token-validation","title":"JHipster generator-jhipster timing attack in token validation","severity":"low","exploited":false,"published_at":"2023-10-31T03:31:22+00:00","url":"https://junglewise.ai/threats/cve-2015-20110-jhipster-generator-jhipster-timing-attack-in-token-validation"},{"cve":"CVE-2022-24815","cvss":3.1,"epss":0.0138,"slug":"cve-2022-24815-jhipster-sql-injection-in-reactive-sql-backend-entity","title":"JHipster SQL injection in reactive SQL backend entity repositories","severity":"low","exploited":false,"published_at":"2022-04-07T15:18:05+00:00","url":"https://junglewise.ai/threats/cve-2022-24815-jhipster-sql-injection-in-reactive-sql-backend-entity"},{"cve":"CVE-2020-4072","cvss":3.1,"epss":0.0121,"slug":"cve-2020-4072-jhipster-kotlin-generator-log-forging-in-password-reset","title":"JHipster Kotlin generator log forging in password reset","severity":"low","exploited":false,"published_at":"2020-06-25T20:02:51+00:00","url":"https://junglewise.ai/threats/cve-2020-4072-jhipster-kotlin-generator-log-forging-in-password-reset"},{"cvss":3.1,"slug":"jhipster-generator-http-repository-configuration-in-generated-code-0c7c6095","title":"JHipster generator HTTP repository configuration in generated code","severity":"low","exploited":false,"published_at":"2019-09-23T18:31:05+00:00","url":"https://junglewise.ai/threats/jhipster-generator-http-repository-configuration-in-generated-code-0c7c6095"},{"cve":"CVE-2019-16303","cvss":3.1,"epss":0.0367,"slug":"cve-2019-16303-jhipster-kotlin-insecure-randomness-in-password-generation","title":"Critical severity vulnerability that affects generator-jhipster","severity":"low","exploited":false,"published_at":"2019-09-13T21:33:25+00:00","url":"https://junglewise.ai/threats/cve-2019-16303-jhipster-kotlin-insecure-randomness-in-password-generation"}],"vendor":{"hub":true,"name":"JHipster","slug":"jhipster","description":"Open-source application generator for creating Spring Boot and Angular/React web applications.","url":"https://junglewise.ai/threats/vendors/jhipster"},"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":2},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"most_severe":[{"cve":"CVE-2026-107375","cvss":8.8,"slug":"cve-2026-107375-jhipster-sql-injection-in-the-parameter-of-jhipster-generated","title":"JHipster SQL injection in sort parameter of generated reactive applications","severity":"high","exploited":false,"published_at":"2026-10-08T17:40:37+00:00","url":"https://junglewise.ai/threats/cve-2026-107375-jhipster-sql-injection-in-the-parameter-of-jhipster-generated"},{"cve":"CVE-2026-107303","cvss":7.6,"slug":"cve-2026-107303-jhipster-generated-applications-allow-stored-xss-via","title":"JHipster generated applications stored XSS via unrestricted Blob content type","severity":"high","exploited":false,"published_at":"2026-10-08T17:40:29+00:00","url":"https://junglewise.ai/threats/cve-2026-107303-jhipster-generated-applications-allow-stored-xss-via"},{"cve":"CVE-2019-16303","cvss":3.1,"epss":0.0367,"slug":"cve-2019-16303-jhipster-kotlin-insecure-randomness-in-password-generation","title":"Critical severity vulnerability that affects generator-jhipster","severity":"low","exploited":false,"published_at":"2019-09-13T21:33:25+00:00","url":"https://junglewise.ai/threats/cve-2019-16303-jhipster-kotlin-insecure-randomness-in-password-generation"},{"cve":"CVE-2022-24815","cvss":3.1,"epss":0.0138,"slug":"cve-2022-24815-jhipster-sql-injection-in-reactive-sql-backend-entity","title":"JHipster SQL injection in reactive SQL backend entity repositories","severity":"low","exploited":false,"published_at":"2022-04-07T15:18:05+00:00","url":"https://junglewise.ai/threats/cve-2022-24815-jhipster-sql-injection-in-reactive-sql-backend-entity"},{"cve":"CVE-2020-4072","cvss":3.1,"epss":0.0121,"slug":"cve-2020-4072-jhipster-kotlin-generator-log-forging-in-password-reset","title":"JHipster Kotlin generator log forging in password reset","severity":"low","exploited":false,"published_at":"2020-06-25T20:02:51+00:00","url":"https://junglewise.ai/threats/cve-2020-4072-jhipster-kotlin-generator-log-forging-in-password-reset"},{"cve":"CVE-2015-20110","cvss":3.1,"epss":0.0059,"slug":"cve-2015-20110-jhipster-generator-jhipster-timing-attack-in-token-validation","title":"JHipster generator-jhipster timing attack in token validation","severity":"low","exploited":false,"published_at":"2023-10-31T03:31:22+00:00","url":"https://junglewise.ai/threats/cve-2015-20110-jhipster-generator-jhipster-timing-attack-in-token-validation"},{"cve":"CVE-2025-31119","cvss":3.1,"epss":0.0053,"slug":"cve-2025-31119-generator-jhipster-entity-audit-unsafe-reflection-in-javers-audit","title":"generator-jhipster-entity-audit unsafe reflection in Javers audit","severity":"low","exploited":false,"published_at":"2025-04-04T14:06:35+00:00","url":"https://junglewise.ai/threats/cve-2025-31119-generator-jhipster-entity-audit-unsafe-reflection-in-javers-audit"},{"cve":"CVE-2025-43712","cvss":3.1,"epss":0.0026,"slug":"cve-2025-43712-jhipster-privilege-escalation-via-response-manipulation","title":"JHipster privilege escalation via response manipulation","severity":"low","exploited":false,"published_at":"2025-07-25T15:30:53+00:00","url":"https://junglewise.ai/threats/cve-2025-43712-jhipster-privilege-escalation-via-response-manipulation"},{"cvss":3.1,"slug":"jhipster-generator-http-repository-configuration-in-generated-code-0c7c6095","title":"JHipster generator HTTP repository configuration in generated code","severity":"low","exploited":false,"published_at":"2019-09-23T18:31:05+00:00","url":"https://junglewise.ai/threats/jhipster-generator-http-repository-configuration-in-generated-code-0c7c6095"}],"generated_at":"2026-11-09T03:07:00.176479+00:00","technologies":[]}