com.vaadin:flow-server vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2026-2742Mediumcom.vaadin:flow-server: Vaadin Vulnerable to Authentication Bypass When Accessing the /VAADIN Endpoint Without a Trailing SlashCVE-2023-25499Mediumcom.vaadin:vaadin: Vaadin vulnerable to possible information disclosure in non visible components.CVE-2023-25500Lowcom.vaadin:flow-server: Vaadin vulnerable to possible information disclosure of class and method names in RPC responseGHSA-FR26-QJC8-MVJXMediumcom.vaadin:flow-server: Possible route enumeration in production mode via RouteNotFoundError view in Vaadin 10, 11-14, and 15-19GHSA-8VFW-V2JV-9HWCLowcom.vaadin:flow-server: Reflected cross-site scripting in development mode handler in VaadinGHSA-C57F-4VP2-JQHMMediumcom.vaadin:flow-server: Insecure temporary directory usage in frontend build functionality of Vaadin 14 and 15-19CVE-2018-25007Lowcom.vaadin:flow-server: Unauthorized client-side property update in UIDL request handler in Vaadin 10 and 11CVE-2019-25027Mediumcom.vaadin:flow-server: Reflected cross-site scripting in default RouteNotFoundError view in Vaadin 10 and 11-13CVE-2020-36319Lowcom.vaadin:flow-server: Potential sensitive data exposure in applications using Vaadin 15CVE-2020-36321Mediumcom.vaadin:flow-server: Directory traversal in development mode handler in Vaadin 14 and 15-17CVE-2021-31404Mediumcom.vaadin:flow-server: Timing side channel vulnerability in UIDL request handler in Vaadin 10, 11-14, and 15-18CVE-2021-31407Highcom.vaadin:flow-server: OSGi applications using Vaadin 12-14 and 19 vulnerable to server classes and resources exposureCVE-2021-31406Mediumcom.vaadin:flow-server: Timing side channel vulnerability in endpoint request handler in Vaadin 15-19

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo