VA
Product
@vaadin/component-base
1
CVEs
0
On KEV
6.3
Max CVSS
1
New 30D
Severity mix
Critical 0High 0Medium 1Low 0
Watch
Add @vaadin/component-base to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-91860 | 6.3 | Sep 30 | Prototype Pollution in Vaadin Charts and Component Base via Unfiltered Deep Merge Affected: 24.7.0 before 24.9.18; 24.10.0 before 24.10.5; 25.0.0 before 25.1.12; 25.2.0 before 25.2.9 |
Showing 1