Security
فارسی
All products

com.vaadin:vaadin-bom

Maven · Package
18 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Unauthorized client-side property update in UIDL request handler in Vaadin 10 and 11GHSA-3H5R-928V-MXHH com.vaadin:vaadin-bom Maven Low Fix reported
Regular expression Denial of Service (ReDoS) in EmailValidator class in V7 compatibility module in Vaadin 8GHSA-JFMF-W293-8XR8 com.vaadin:vaadin-bom Maven High Fix reported
Unauthorized property update in CheckboxGroup component in Vaadin 12-14 and 15-20GHSA-HW7R-QRHP-5PFF com.vaadin:vaadin-bom Maven Medium Fix reported
Server classes and resources exposure in OSGi applications using Vaadin 12-14 and 19GHSA-J9WR-49VQ-RM5G com.vaadin:vaadin-bom Maven High Fix reported
Timing side channel vulnerability in endpoint request handler in Vaadin 15-19GHSA-9H6G-6MXG-VVP4 com.vaadin:vaadin-bom Maven Medium Fix reported
Directory traversal in development mode handler in Vaadin 14 and 15-17GHSA-82MF-MMH7-HXP5 com.vaadin:vaadin-bom Maven Medium Fix reported
Reflected cross-site scripting in default RouteNotFoundError view in Vaadin 10 and 11-13GHSA-JQJ4-R483-4GVR com.vaadin:vaadin-bom Maven Medium Fix reported
Timing side channel vulnerability in UIDL request handler in Vaadin 10, 11-14, and 15-18GHSA-C6C4-7X48-4CQP com.vaadin:vaadin-bom Maven Medium Fix reported
Potential sensitive data exposure in applications using Vaadin 15GHSA-76F4-FW33-6J2V com.vaadin:vaadin-bom Maven Low Fix reported
Regular expression denial of service (ReDoS) in EmailValidator class in Vaadin 7CVE-2020-36320 · GHSA-42J4-733X-5VCF com.vaadin:vaadin-bomcom.vaadin:vaadin-server Maven High Fix reported
Reflected cross-site scripting in development mode handler in Vaadin 14, 15-19CVE-2021-33604 · GHSA-C99R-67X4-WHJ6 com.vaadin:vaadin-bom Maven Low Fix reported
Reflected cross-site scripting in vaadin-menu-bar webjar resources in Vaadin 14CVE-2021-33611 · GHSA-93C4-VF86-3RJ7 com.vaadin:vaadin-bomorg.webjars.bowergithub.vaadin:vaadin-menu-bar Maven Medium Fix reported
Server session is not invalidated when logout() helper method of Authentication module is used in Vaadin 18-19CVE-2021-31408 · GHSA-MR8H-J9CV-4M8H com.vaadin:vaadin-bom Maven Medium Fix reported
Timing side channel vulnerability in UIDL request handler in Vaadin 7 and 8CVE-2021-31403 · GHSA-75XC-QVXH-27F8 com.vaadin:vaadin-bomcom.vaadin:vaadin-server Maven Medium Fix reported
Insecure temporary directory usage in frontend build functionality of Vaadin 14 and 15-19CVE-2021-31411 · GHSA-P826-8VHQ-H439 com.vaadin:vaadin-bom Maven High Fix reported
Regular expression denial of service (ReDoS) in EmailField component in Vaadin 14 and 15-17CVE-2021-31405 · GHSA-2WQP-JMCC-MC77 com.vaadin:vaadin-bom Maven High Fix reported
Possible route enumeration in production mode via RouteNotFoundError view in Vaadin 10, 11-14, and 15-19CVE-2021-31412 · GHSA-QRG9-F472-QWFM com.vaadin:vaadin-bom Maven Medium Fix reported
Stored cross-site scripting in Grid component in Vaadin 7 and 8CVE-2019-25028 · GHSA-Q74R-4XW3-PPX9 com.vaadin:vaadin-bomcom.vaadin:vaadin-server Maven Medium Fix reported