Security
فارسی
All products

com.vaadin:flow-server

Maven · Package
13 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Vaadin Vulnerable to Authentication Bypass When Accessing the /VAADIN Endpoint Without a Trailing SlashCVE-2026-2742 · GHSA-RJGH-WGC7-M37J com.vaadin:flow-servercom.vaadin:vaadin MavenRed Hat Medium Fix reported
Reflected cross-site scripting in development mode handler in VaadinGHSA-8VFW-V2JV-9HWC com.vaadin:flow-server Maven Low Fix reported
Insecure temporary directory usage in frontend build functionality of Vaadin 14 and 15-19GHSA-C57F-4VP2-JQHM com.vaadin:flow-server Maven Medium Fix reported
Possible route enumeration in production mode via RouteNotFoundError view in Vaadin 10, 11-14, and 15-19GHSA-FR26-QJC8-MVJX com.vaadin:flow-server Maven Medium Fix reported
Vaadin vulnerable to possible information disclosure of class and method names in RPC responseCVE-2023-25500 · GHSA-CH48-9R3Q-PV7X com.vaadin:flow-servercom.vaadin:vaadin Maven Low Fix reported
Vaadin vulnerable to possible information disclosure in non visible components.CVE-2023-25499 · GHSA-5F9V-MV5G-JH5Q com.vaadin:flow-servercom.vaadin:vaadin Maven Medium Fix reported
Timing side channel vulnerability in UIDL request handler in Vaadin 10, 11-14, and 15-18CVE-2021-31404 · GHSA-XWG3-QRCG-W9X6 com.vaadin:flow-server Maven Medium Fix reported
Timing side channel vulnerability in endpoint request handler in Vaadin 15-19CVE-2021-31406 · GHSA-P7JQ-V8JP-J424 com.vaadin:flow-server Maven Medium Fix reported
OSGi applications using Vaadin 12-14 and 19 vulnerable to server classes and resources exposureCVE-2021-31407 · GHSA-25XC-JWFQ-39JW com.vaadin:flow-server Maven High Fix reported
Directory traversal in development mode handler in Vaadin 14 and 15-17CVE-2020-36321 · GHSA-49R2-73M6-PP8F com.vaadin:flow-server Maven Medium Fix reported
Potential sensitive data exposure in applications using Vaadin 15CVE-2020-36319 · GHSA-RJWW-2X8V-M9V9 com.vaadin:flow-server Maven Low Fix reported
Reflected cross-site scripting in default RouteNotFoundError view in Vaadin 10 and 11-13CVE-2019-25027 · GHSA-RP4X-WXQV-CF9M com.vaadin:flow-server Maven Medium Fix reported
Unauthorized client-side property update in UIDL request handler in Vaadin 10 and 11CVE-2018-25007 · GHSA-JMX8-355M-8VWH com.vaadin:flow-server Maven Low Fix reported