FL
Product
flow
13
CVEs
0
On KEV
7.8
Max CVSS
1
New 30D
Severity mix
Critical 0High 5Medium 4Low 4
Watch
Add flow to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-31411 | 7.8 | May 5 | Insecure temporary directory usage in frontend build functionality of com.vaadin:flow-server versions 2.0.9 through 2.5.2 (Vaadin 14.0.3 through Vaadin 14.5.2), 3.0 prior to 6.0… Affected: 2.0.9 before 2.5.3; 3.0.0 through 5.0.0; 6.0.0 through 6.0.6 |
| CVE-2021-31407 | 7.5 | Apr 23 | Vulnerability in OSGi integration in com.vaadin:flow-server versions 1.2.0 through 2.4.7 (Vaadin 12.0.0 through 14.4.9), and 6.0.0 through 6.0.1 (Vaadin 19.0.0) allows attacker to… Affected: 1.2.0 before 2.4.8; 6.0.0 before 6.0.2 |
| CVE-2021-31405 | 7.5 | Apr 23 | Unsafe validation RegEx in EmailField component in com.vaadin:vaadin-text-field-flow versions 2.0.4 through 2.3.2 (Vaadin 14.0.6 through 14.4.3), and 3.0.0 through 4.0.2 (Vaadin… Affected: 2.0.4 before 2.3.3; 3.0.0 before 4.0.3 |
| CVE-2020-36321 | 7.5 | Apr 23 | Improper URL validation in development mode handler in com.vaadin:flow-server versions 2.0.0 through 2.4.1 (Vaadin 14.0.0 through 14.4.2), and 3.0 prior to 5.0 (Vaadin 15 prior to… Affected: 2.0.0 before 2.4.2; 3.0.0 before 5.0.0 |
| CVE-2021-31408 | 7.1 | Apr 23 | Authentication.logout() helper in com.vaadin:flow-client versions 5.0.0 prior to 6.0.0 (Vaadin 18), and 6.0.0 through 6.0.4 (Vaadin 19.0.0 through 19.0.3) uses incorrect HTTP… Affected: 5.0.0 before 6.0.0; 6.0.0 before 6.0.5 |
Showing 5