SCA: security update for generator-jhipster (GHSA-r223-96jv-q533)

high Tenable Cloud Security Plugin ID 473865

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

- JHipster is a development platform to quickly generate, develop, and deploy modern web applications and
microservice architectures. From 7.0.0 until 9.4.0, reactive applications generated with Spring WebFlux,
Spring Data R2DBC, and a SQL database pass the attacker-controlled sort request parameter from paginated
entity-list endpoints into createOrderByFields in generators/spring-boot/generators/data-
relational/templates/src/main/java/package/repository/EntityManager_reactive.java.ejs. The generated code
renders these properties into the SQL ORDER BY clause without validation or quoting, and the R2DBC simple
query protocol can execute additional statements separated by semicolons. A normal authenticated user can
consequently read sensitive tables, modify or delete data, or drop tables, while non-reactive JPA
applications and NoSQL backends are outside this root cause. This issue is fixed in 9.4.0.
(CVE-2026-107375)

Solution

Update the generator-jhipster library and its related packages to version 9.4.0 or later.

Plugin Details

Severity: High

ID: 473865

Version: Revision 1.2

Type: Local

Family: SCA Checks

Published: 10/8/2026

Updated: 10/9/2026

Risk Information

VPR

Risk Factor: Medium

Score: 4.9

Percentile: 58.38

Vendor

Vendor Severity: High

CVSS v2

Risk Factor: High

Base Score: 9

Temporal Score: 6.7

Vector: CVSS2#AV:N/AC:L/Au:S/C:C/I:C/A:C

CVSS Score Source: CVE-2026-107375

CVSS v3

Risk Factor: High

Base Score: 8.8

Temporal Score: 7.7

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Patch Publication Date: 10/8/2026

Vulnerability Publication Date: 10/8/2026

Reference Information

CVE: CVE-2026-107375

cwe: CWE-89

Detections

Analytics