generator-jhipster (npm) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the npm package generator-jhipster, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (3)

• CVE-2019-16303 — CVSS 9.8 (critical): A class generated by the Generator in JHipster before 6.3.0 and JHipster Kotlin through 1.1.0 produces code that uses an insecure source of…
• CVE-2022-24815 — CVSS 8.1 (high): JHipster is a development platform to quickly generate, develop, & deploy modern web applications & microservice architectures. SQL…
• CVE-2015-20110 — CVSS 7.5 (high): JHipster generator-jhipster before 2.23.0 allows a timing attack against validateToken due to a string comparison that stops at the first…