{"action":"Upgrade generator-jhipster-entity-audit to 5.9.1 or later.","affected":[{"fixed":"5.9.1","introduced":"0"}],"component":"generator-jhipster-entity-audit","cve_ids":["CVE-2025-31119"],"ecosystem":"npm","epss":0.00537,"exploited":false,"fixed_versions":["5.9.1"],"ghsa_id":"GHSA-7rmp-3g9f-cvq8","id":"tcs_01M5KFAVTDTJTR320PVQ4NA8XN","modified_at":"2025-04-04T14:57:08.770747Z","published_at":"2025-04-04T14:06:35Z","references":["https://osv.dev/vulnerability/GHSA-7rmp-3g9f-cvq8","https://github.com/jhipster/generator-jhipster-entity-audit/security/advisories/GHSA-7rmp-3g9f-cvq8","https://nvd.nist.gov/vuln/detail/CVE-2025-31119","https://github.com/jhipster/generator-jhipster-entity-audit","https://github.com/jhipster/generator-jhipster-entity-audit/blob/e21e83135d10c77d92203c89cb0b0063914e8fe0/generators/spring-boot-javers/templates/src/main/java/_package_/web/rest/JaversEntityAuditResource.java.ejs#L88"],"severity":{"label":"high","score":7.6},"sources":[{"source":"osv","source_id":"GHSA-7rmp-3g9f-cvq8","url":"https://osv.dev/vulnerability/GHSA-7rmp-3g9f-cvq8"}],"summary":"generator-jhipster-entity-audit vulnerable to Unsafe Reflection when having Javers selected as Entity Audit Framework"}