FL
Product
flow
13
CVEs
0
On KEV
7.8
Max CVSS
1
New 30D
Severity mix
Critical 0High 5Medium 4Low 4
Watch
Add flow to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-36319 | 6.5 | Apr 23 | Insecure configuration of default ObjectMapper in com.vaadin:flow-server versions 3.0.0 through 3.0.5 (Vaadin 15.0.0 through 15.0.4) may expose sensitive data if the application… Affected: 3.0.0 before 3.0.6 |
| CVE-2019-25027 | 6.1 | Apr 23 | Missing output sanitization in default RouteNotFoundError view in com.vaadin:flow-server versions 1.0.0 through 1.0.10 (Vaadin 10.0.0 through 10.0.13), and 1.1.0 through 1.4.2… Affected: 1.0.0 before 1.0.11; 1.1.0 before 1.4.3 |
| CVE-2021-31412 | 5.3 | Jun 24 | Improper sanitization of path in default RouteNotFoundError view in com.vaadin:flow-server versions 1.0.0 through 1.0.14 (Vaadin 10.0.0 through 10.0.18), 1.1.0 prior to 2.0.0… Affected: 1.0.0 through 1.0.14; 1.1.0 through 1.4.0; 2.0.0 through 2.6.1; 3.0.0 through 5.0.0; 6.0.0 through 6.0.9 |
| CVE-2018-25007 | 4.3 | Apr 23 | Missing check in UIDL request handler in com.vaadin:flow-server versions 1.0.0 through 1.0.5 (Vaadin 10.0.0 through 10.0.7, and 11.0.0 through 11.0.2) allows attacker to update… Affected: 1.0.0 before 1.0.6 |
Showing 4