generator-jhipster vulnerable to login check Regular Expression Denial of Service
Impact For applications using JWT or session-based authentication not OIDC, users can input a login string which can cause a denial of service, as parsing it will be too complex. Here is an example: https://gist.github.com/atomfrede/311f8a9c6eb74c5c5226af0481155207 The vulnerable expression was...