Update README.md

Author: JLLeitschuh

README.md

@@ -21,3 +21,21 @@ vulnerabilities.
 
 This project has been used to generate PRs that automatically fix a security vulnerability in Maven POM files that
 are using HTTP instead of HTTPS to resolve dependencies.
+
+**Pull Requests Generated: 1,596**
+
+## Project 2: CVE-2019-16303 - JHipster Vulnerability Fix - Use CSPRNG in RandomUtil
+
+In 2019, I discovered a vulnerability in the [JHipster](https://www.jhipster.tech/) code generator where it was
+generating vulnerable implementations of a class called `RandomUtil.java`.
+  
+Using one password reset token from these apps combined with the POC below, an attacker can determine all future password
+reset tokens to be generated by these vulnerable servers.
+This would allow an attacker to pick and choose what account they would like to takeover by sending account password reset requests for targeted accounts.
+
+[POC code](http://web.archive.org/web/20191126104359/https://medium.com/@alex91ar/the-java-soothsayer-a-practical-application-for-insecure-randomness-c67b0cd148cd) has existed since March 3rd, 2018 for taking one RNG value generated by `RandomStringUtils` and reversing it to generate all of the past/future RNG values.
+
+The fix was generated for each vulnerable file, preserving the original style of the file, by the [Rewrite project](https://github.com/openrewrite/rewrite).
+See the specific code for this fix [here](https://github.com/moderneinc/jhipster-cwe-338).
+
+**Pull Requests Generated: 3,880**