- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 4 · 3 high
- Weekly downloads
- 54.5K
- Dependents
- 112
- Registry
- npm
Advisories 4
- CVE-2026-107375High 8.8
JHipster: SQL Injection in the Parameter of JHipster-Generated Reactive (WebFlux + R2DBC) Applicationssort
Affected: from 7.0.0, fixed in 9.4.0.
- CVE-2026-107303High 7.6
JHipster: Generated Applications Allow Stored XSS via Unrestricted Blob ContentType Opened as Same-Origin Blob
Affected: fixed in 9.4.0.
- CVE-2015-20110Unrated
JHipster generator-jhipster before 2.23.0 allows a timing attack against validateToken due to a string comparison that stops at the first…
Affected: fixed in 2.23.0.
- CVE-2022-24815High 8.1
SQL Injection when creating an application with Reactive SQL backend
Affected: from 7.0.0, fixed in 7.8.1.