com.vaadin:vaadin-bom vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2021-33611Mediumcom.vaadin:vaadin-bom: Reflected cross-site scripting in vaadin-menu-bar webjar resources in Vaadin 14 GHSA-JFMF-W293-8XR8Highcom.vaadin:vaadin-bom: Regular expression Denial of Service (ReDoS) in EmailValidator class in V7 compatibility module in Vaadin 8 GHSA-HW7R-QRHP-5PFFMediumcom.vaadin:vaadin-bom: Unauthorized property update in CheckboxGroup component in Vaadin 12-14 and 15-20 CVE-2021-33604Lowcom.vaadin:vaadin-bom: Reflected cross-site scripting in development mode handler in Vaadin 14, 15-19 CVE-2021-31412Mediumcom.vaadin:vaadin-bom: Possible route enumeration in production mode via RouteNotFoundError view in Vaadin 10, 11-14, and 15-19 CVE-2021-31411Highcom.vaadin:vaadin-bom: Insecure temporary directory usage in frontend build functionality of Vaadin 14 and 15-19 CVE-2021-31408Mediumcom.vaadin:vaadin-bom: Server session is not invalidated when logout() helper method of Authentication module is used in Vaadin 18-19 CVE-2021-31403Mediumcom.vaadin:vaadin-bom: Timing side channel vulnerability in UIDL request handler in Vaadin 7 and 8 CVE-2019-25028Mediumcom.vaadin:vaadin-bom: Stored cross-site scripting in Grid component in Vaadin 7 and 8 CVE-2020-36320Highcom.vaadin:vaadin-bom: Regular expression denial of service (ReDoS) in EmailValidator class in Vaadin 7 GHSA-3H5R-928V-MXHHLowcom.vaadin:vaadin-bom: Unauthorized client-side property update in UIDL request handler in Vaadin 10 and 11 GHSA-JQJ4-R483-4GVRMediumcom.vaadin:vaadin-bom: Reflected cross-site scripting in default RouteNotFoundError view in Vaadin 10 and 11-13 GHSA-76F4-FW33-6J2VLowcom.vaadin:vaadin-bom: Potential sensitive data exposure in applications using Vaadin 15 GHSA-82MF-MMH7-HXP5Mediumcom.vaadin:vaadin-bom: Directory traversal in development mode handler in Vaadin 14 and 15-17 GHSA-C6C4-7X48-4CQPMediumcom.vaadin:vaadin-bom: Timing side channel vulnerability in UIDL request handler in Vaadin 10, 11-14, and 15-18 CVE-2021-31405Highcom.vaadin:vaadin-bom: Regular expression denial of service (ReDoS) in EmailField component in Vaadin 14 and 15-17 GHSA-9H6G-6MXG-VVP4Mediumcom.vaadin:vaadin-bom: Timing side channel vulnerability in endpoint request handler in Vaadin 15-19 GHSA-J9WR-49VQ-RM5GHighcom.vaadin:vaadin-bom: Server classes and resources exposure in OSGi applications using Vaadin 12-14 and 19

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo