VA
Product
vaadin-core
by vaadin · last CVE Sep 30, 2026
1
CVEs
0
On KEV
6.3
Max CVSS
1
New 30D
Severity mix
Critical 0High 0Medium 1Low 0
Watch

Add vaadin-core to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-91860
6.3
0%
Sep 30
Prototype Pollution in Vaadin Charts and Component Base via Unfiltered Deep Merge
Affected: 24.7.0 before 24.9.21; 24.10.0 before 24.10.10; 25.0.0 before 25.1.12; 25.2.0 before 25.2.7
Showing 1