130 matches found
CVE-2026-107375
JHipster is a development platform to quickly generate, develop, and deploy modern web applications and microservice architectures. From 7.0.0 until 9.4.0, reactive applications generated with Spring WebFlux, Spring Data R2DBC, and a SQL database pass the attacker-controlled sort request paramete...
CVE-2026-107303
JHipster is a development platform to quickly generate, develop, and deploy modern web applications and microservice architectures. Prior to generator-jhipster 9.4.0 and react-jhipster 1.1.0, generated applications can persist attacker-controlled Blob data and companion ContentType values, return...
@joaopaulomfe/generator-jhipster-agile-kip (>=0.1.0, <=0.1.1), dsi-nodejs-generator (3.0.0) +72 more potentially affected by CVE-2026-107375 via generator-jhipster (>=7.0.0, <=9.2.0)
generator-jhipster NPM version =7.0.0, =0.1.0, =0.0.11, =2.0.17, =0.0.0, =0.0.1, =0.0.78 and more Source cves: CVE-2026-107375 Source advisory: OSV:GHSA-R223-96JV-Q533...
@joaopaulomfe/generator-jhipster-agile-kip (>=0.1.0, <=0.1.1), dsi-nodejs-generator (3.0.0) +72 more potentially affected by CVE-2026-107375 via generator-jhipster (>=7.0.0, <=9.2.0)
generator-jhipster NPM version =7.0.0, =0.1.0, =0.0.11, =2.0.17, =0.0.0, =0.0.1, =0.0.78 and more Source cves: CVE-2026-107375 Source advisory: GHSA-R223-96JV-Q533...
NPM: JHipster: SQL Injection in the Parameter of JHipster-Generated Reactive (WebFlux + R2DBC) Applicationssort
NPM: JHipster: SQL Injection in the Parameter of JHipster-Generated Reactive WebFlux + R2DBC Applicationssort vulnerability discovered by ? in WordPress Npm generator-jhipster versions = 7.0.0, 9.4.0...
GHSA-R223-96JV-Q533 JHipster: SQL Injection in the Parameter of JHipster-Generated Reactive (WebFlux + R2DBC) Applicationssort
SQL Injection in the sort Parameter of JHipster-Generated Reactive WebFlux + R2DBC Applications - Product: jhipster/generator-jhipster npm package generator-jhipster - Affected versions: v7.0.0 through v9.2.0 - Component: generated reactive-application code, template EntityManagerreactive.java.ej...
JHipster: SQL Injection in the Parameter of JHipster-Generated Reactive (WebFlux + R2DBC) Applicationssort
SQL Injection in the sort Parameter of JHipster-Generated Reactive WebFlux + R2DBC Applications - Product: jhipster/generator-jhipster npm package generator-jhipster - Affected versions: v7.0.0 through v9.2.0 - Component: generated reactive-application code, template EntityManagerreactive.java.ej...
JHipster: Generated Applications Allow Stored XSS via Unrestricted Blob ContentType Opened as Same-Origin Blob
Summary Applications generated by generator-jhipster v9.2.0 can persist user-controlled Blob ContentType values and later use those values as the MIME type for client-side Blob objects. The shared generated openFile helper creates an object URL from the Blob and opens it in a new window. For...
generator-jhipster-ai-postgresql (>=2.0.17, <=2.0.31), generator-jhipster-cassandra (>=1.0.15, <=1.0.28) +14 more potentially affected by CVE-2026-107303 via generator-jhipster (>=9.0.0-beta.3, <=9.2.0)
generator-jhipster NPM version =9.0.0-beta.3, =2.0.17, =1.0.15, =2.1.2, =6.0.0, =4.0.0, =1.0.2, =1.0.0, =0.1.0, =1.0.0, =1.0.0, =1.0.0, =2.0.1 and more Source cves: CVE-2026-107303 Source advisory: OSV:GHSA-9FFP-22J7-56R2...
GHSA-9FFP-22J7-56R2 JHipster: Generated Applications Allow Stored XSS via Unrestricted Blob ContentType Opened as Same-Origin Blob
Summary Applications generated by generator-jhipster v9.2.0 can persist user-controlled Blob ContentType values and later use those values as the MIME type for client-side Blob objects. The shared generated openFile helper creates an object URL from the Blob and opens it in a new window. For...
generator-jhipster-ai-postgresql (>=2.0.17, <=2.0.31), generator-jhipster-cassandra (>=1.0.15, <=1.0.28) +14 more potentially affected by CVE-2026-107303 via generator-jhipster (>=9.0.0-beta.3, <=9.2.0)
generator-jhipster NPM version =9.0.0-beta.3, =2.0.17, =1.0.15, =2.1.2, =6.0.0, =4.0.0, =1.0.2, =1.0.0, =0.1.0, =1.0.0, =1.0.0, =1.0.0, =2.0.1 and more Source cves: CVE-2026-107303 Source advisory: GHSA-9FFP-22J7-56R2...
NPM: JHipster: Generated Applications Allow Stored XSS via Unrestricted Blob ContentType Opened as Same-Origin Blob
NPM: JHipster: Generated Applications Allow Stored XSS via Unrestricted Blob ContentType Opened as Same-Origin Blob vulnerability discovered by ? in WordPress Npm react-jhipster versions = 1.0.3...
NPM: JHipster: Generated Applications Allow Stored XSS via Unrestricted Blob ContentType Opened as Same-Origin Blob
NPM: JHipster: Generated Applications Allow Stored XSS via Unrestricted Blob ContentType Opened as Same-Origin Blob vulnerability discovered by ? in WordPress Npm generator-jhipster versions 9.4.0...
CVE-2026-107375 JHipster: SQL Injection in the Parameter of JHipster-Generated Reactive (WebFlux + R2DBC) Applicationssort
JHipster is a development platform to quickly generate, develop, and deploy modern web applications and microservice architectures. From 7.0.0 until 9.4.0, reactive applications generated with Spring WebFlux, Spring Data R2DBC, and a SQL database pass the attacker-controlled sort request paramete...
EUVD-2026-95130
JHipster is a development platform to quickly generate, develop, and deploy modern web applications and microservice architectures. From 7.0.0 until 9.4.0, reactive applications generated with Spring WebFlux, Spring Data R2DBC, and a SQL database pass the attacker-controlled sort request paramete...
CVE-2026-107375
JHipster is a development platform to quickly generate, develop, and deploy modern web applications and microservice architectures. From 7.0.0 until 9.4.0, reactive applications generated with Spring WebFlux, Spring Data R2DBC, and a SQL database pass the attacker-controlled sort request paramete...
CVE-2026-107375 JHipster: SQL Injection in the Parameter of JHipster-Generated Reactive (WebFlux + R2DBC) Applicationssort
JHipster is a development platform to quickly generate, develop, and deploy modern web applications and microservice architectures. From 7.0.0 until 9.4.0, reactive applications generated with Spring WebFlux, Spring Data R2DBC, and a SQL database pass the attacker-controlled sort request paramete...
generator-jhipster-ai-postgresql (>=2.0.17, <=2.0.31), generator-jhipster-cassandra (>=1.0.15, <=1.0.28) +14 more potentially affected by CVE-2026-107375 via generator-jhipster (>=9.0.0, <=9.2.0)
generator-jhipster NPM version =9.0.0, =2.0.17, =1.0.15, =2.1.2, =6.1.0, =4.0.0, =1.0.2, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.1 and more Source cves: CVE-2026-107375 Source advisory: MEND:CVE-2026-107375...
CVE-2026-107375
Applications generated using JHipster (versions 7.0.0 through 9.4.0) are vulnerable to SQL Injection when using Spring WebFlux , Spring Data R2DBC , and a SQL database. The vulnerability exists because the sort request parameter from paginated entity-list endpoints is passed into the createOrderB...
CVE-2026-107375 JHipster: SQL Injection in the Parameter of JHipster-Generated Reactive (WebFlux + R2DBC) Applicationssort
JHipster is a development platform to quickly generate, develop, and deploy modern web applications and microservice architectures. From 7.0.0 until 9.4.0, reactive applications generated with Spring WebFlux, Spring Data R2DBC, and a SQL database pass the attacker-controlled sort request paramete...