All products

com.vaadin:vaadin-server

Maven · Package
7 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Vaadin vulnerable to Cross-site ScriptingCVE-2025-15022 · GHSA-7WWV-79XW-RVVG com.vaadin:vaadin-servercom.vaadin:vaadin-spreadsheet-flow Maven Medium Fix reported
Vaadin Framework possible file bypass via upload validation on the server-sideCVE-2025-9467 · GHSA-9GFH-4FWJ-W3RJ com.vaadin:vaadin-server Maven Medium Fix reported
Denial of service in DataCommunicator class in Vaadin 8GHSA-J23J-Q57M-63V3 com.vaadin:vaadin-server Maven Medium Fix reported
Regular expression denial of service (ReDoS) in EmailValidator class in Vaadin 7CVE-2020-36320 · GHSA-42J4-733X-5VCF com.vaadin:vaadin-bomcom.vaadin:vaadin-server Maven High Fix reported
Denial of service in DataCommunicator class in Vaadin 8CVE-2021-33609 · GHSA-QCGX-CRRX-38V5 com.vaadin:vaadin-server Maven Medium Fix reported
Timing side channel vulnerability in UIDL request handler in Vaadin 7 and 8CVE-2021-31403 · GHSA-75XC-QVXH-27F8 com.vaadin:vaadin-bomcom.vaadin:vaadin-server Maven Medium Fix reported
Stored cross-site scripting in Grid component in Vaadin 7 and 8CVE-2019-25028 · GHSA-Q74R-4XW3-PPX9 com.vaadin:vaadin-bomcom.vaadin:vaadin-server Maven Medium Fix reported