j
jhipster
Security Risk Profile
78
/100
highSecurity Risk Score
Comprehensive risk assessment based on 26 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from October 21, 2013 to present
26
Total CVEs
6
Critical+High
0
Exploited
0
Unpatched
Threat Assessment
Avg CVSS
7.9
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
0
Critical/High
Risk Level
78/100
high
🆕 1Fresh (<7d)📈 1 in Last 30 Days
Severity Distribution
Critical
1High
5Medium
1Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
1Age Distribution
Common Weaknesses (CWE)
1
SQL Injection
2
2
Weak RNG
1
Most Affected Products
1. JHipster JHipster23
2. npm/generator-jhipster3
3. JHipster generator-jhipster-entity-audit1
4. npm/generator-jhipster-entity-audit1
5. JHipster Generator-jhipster Node.js1
Recent Vulnerabilities
See more →CVE-2026-107375
CVSS 8.8high
JHipster: SQL Injection in the Parameter of JHipster-Generated Reactive (WebFlux + R2DBC) Applicationssort
Oct 8, 2026
EOL-jhipster-9
unknown
Mar 11, 2026
CVE-2025-43712
CVSS 8.0high
Jul 25, 2025
CVE-2025-31119
CVSS 7.7EPSS 0%high
CWE-470 in generator-jhipster-entity-audit when having Javers selected as Entity Audit Framework
Apr 3, 2025
latest-version-jhipster-8
unknown
Nov 2, 2023
EOL-jhipster-8
unknown
Nov 2, 2023
CVE-2015-20110
CVSS 7.5high
Oct 31, 2023
CVE-2022-24815
CVSS 8.1high
SQL Injection when creating an application with Reactive SQL backend
Apr 11, 2022
EOL-jhipster-7
unknown
Mar 21, 2021
latest-version-jhipster-7
unknown
Mar 21, 2021
Monitor jhipster in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.