npm generator-jhipster

Name: npm generator-jhipster
Brand: npm

productUS

pkg:npm/generator-jhipster

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

unpatched

by severity

1critical2high0medium0low

updated 2026-10-28

vulnerabilities (6)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2019-16303US	critical9.8	3.67% (90th)	—	6.3.0	2019-09-14	< 6.3.0
CVE-2022-24815US	high8.1	1.38% (72nd)	—	7.8.1	2022-04-11	7.0.0 → 7.8.1
CVE-2015-20110US	high7.5	0.59% (48th)	—	2.23.0	2023-10-31	< 2.23.0
CVE-2026-107375US	—	0.34% (27th)	—	9.4.0	2026-10-08	7.0.0 → 9.4.0
CVE-2025-43712US	—	0.30% (22nd)	—	8.9.0	2025-07-25	< 8.9.0
CVE-2026-107303US	—	0.26% (18th)	—	9.4.0	2026-10-08	< 9.4.0

The flaw types (CWEs) most of these CVEs share.

CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2 CVEs
CWE-208Observable Timing Discrepancy1 CVEs
CWE-284Improper Access Control1 CVEs
CWE-307Improper Restriction of Excessive Authentication Attempts1 CVEs
CWE-338Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)1 CVEs
CWE-451User Interface (UI) Misrepresentation of Critical Information1 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.