{"action":"Upgrade generator-jhipster to 9.4.0 or later.","affected":[{"fixed":"9.4.0","introduced":"7.0.0"}],"component":"generator-jhipster","cve_ids":["CVE-2026-107375"],"ecosystem":"npm","epss":0.00433,"exploited":false,"fixed_versions":["9.4.0"],"ghsa_id":"GHSA-r223-96jv-q533","id":"tcs_01M5KG7JDME6KPE5QRRZQGFK0R","modified_at":"2026-10-08T18:00:09.697394064Z","published_at":"2026-10-08T17:40:37Z","references":["https://osv.dev/vulnerability/GHSA-r223-96jv-q533","https://github.com/jhipster/generator-jhipster/security/advisories/GHSA-r223-96jv-q533","https://github.com/jhipster/generator-jhipster/commit/f6f1579581da8db0d1b8bd28dd473b56951c83af","https://github.com/jhipster/generator-jhipster","https://github.com/jhipster/generator-jhipster/releases/tag/v9.4.0"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-r223-96jv-q533","url":"https://osv.dev/vulnerability/GHSA-r223-96jv-q533"}],"summary":"JHipster: SQL Injection in the Parameter of JHipster-Generated Reactive (WebFlux + R2DBC) Applicationssort"}