VA
Product
vaadin
29
CVEs
0
On KEV
8.4
Max CVSS
4
New 30D
Severity mix
Critical 0High 9Medium 14Low 5
Watch
Add vaadin to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-107588 New | 8.4 | Oct 21 | Multiple Vulnerabilities in the Highcharts Library Bundled with Vaadin Charts Affected: 22.0.0 before 23.6.16; 24.0.0 before 24.4.24; 24.5.0 before 24.7.16; 24.8.0 before 24.9.23; 24.10.0 before 24.10.11; 25.0.0 through 25.0.13; +3 more |
| CVE-2021-31411 | 7.8 | May 5 | Insecure temporary directory usage in frontend build functionality of com.vaadin:flow-server versions 2.0.9 through 2.5.2 (Vaadin 14.0.3 through Vaadin 14.5.2), 3.0 prior to 6.0… Affected: 14.0.3 before 14.5.3; 15.0.0 before 19.0.5 |
| CVE-2022-29567 | 7.5 | May 24 | The default configuration of a TreeGrid component uses Object::toString as a key on the client-side and server communication in Vaadin 14.8.5 through 14.8.9, 22.0.6 through… Affected: 14.8.5 through 14.8.9; 22.0.6 through 22.0.15; 23.0.1 through 23.0.8; 23.0.0; 23.0.0; 23.0.0; +6 more |
| CVE-2021-31409 | 7.5 | May 6 | Unsafe validation RegEx in EmailValidator component in com.vaadin:vaadin-compatibility-server versions 8.0.0 through 8.12.4 (Vaadin versions 8.0.0 through 8.12.4) allows attackers… Affected: 8.0.0 through 8.12.4 |
| CVE-2021-31407 | 7.5 | Apr 23 | Vulnerability in OSGi integration in com.vaadin:flow-server versions 1.2.0 through 2.4.7 (Vaadin 12.0.0 through 14.4.9), and 6.0.0 through 6.0.1 (Vaadin 19.0.0) allows attacker to… Affected: 12.0.0 before 14.4.10; 19.0.0 |
| CVE-2021-31405 | 7.5 | Apr 23 | Unsafe validation RegEx in EmailField component in com.vaadin:vaadin-text-field-flow versions 2.0.4 through 2.3.2 (Vaadin 14.0.6 through 14.4.3), and 3.0.0 through 4.0.2 (Vaadin… Affected: 14.0.6 before 14.4.4; 15.0.0 before 17.0.11 |
| CVE-2020-36321 | 7.5 | Apr 23 | Improper URL validation in development mode handler in com.vaadin:flow-server versions 2.0.0 through 2.4.1 (Vaadin 14.0.0 through 14.4.2), and 3.0 prior to 5.0 (Vaadin 15 prior to… Affected: 14.0.0 before 14.4.3; 15.0.0 before 18.0.0 |
| CVE-2020-36320 | 7.5 | Apr 23 | Unsafe validation RegEx in EmailValidator class in com.vaadin:vaadin-server versions 7.0.0 through 7.7.21 (Vaadin 7.0.0 through 7.7.21) allows attackers to cause uncontrolled… Affected: 7.0.0 before 7.7.22 |
| CVE-2021-31408 | 7.1 | Apr 23 | Authentication.logout() helper in com.vaadin:flow-client versions 5.0.0 prior to 6.0.0 (Vaadin 18), and 6.0.0 through 6.0.4 (Vaadin 19.0.0 through 19.0.3) uses incorrect HTTP… Affected: 19.0.0 before 19.0.4; 18.0.0 |
Showing 9