com.vaadin:vaadin-server vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2025-15022Mediumcom.vaadin:vaadin-server: Vaadin vulnerable to Cross-site Scripting CVE-2025-9467Mediumcom.vaadin:vaadin-server: Vaadin Framework possible file bypass via upload validation on the server-side GHSA-J23J-Q57M-63V3Mediumcom.vaadin:vaadin-server: Denial of service in DataCommunicator class in Vaadin 8 CVE-2021-33609Mediumcom.vaadin:vaadin-server: Denial of service in DataCommunicator class in Vaadin 8 CVE-2021-31403Mediumcom.vaadin:vaadin-bom: Timing side channel vulnerability in UIDL request handler in Vaadin 7 and 8 CVE-2019-25028Mediumcom.vaadin:vaadin-bom: Stored cross-site scripting in Grid component in Vaadin 7 and 8 CVE-2020-36320Highcom.vaadin:vaadin-bom: Regular expression denial of service (ReDoS) in EmailValidator class in Vaadin 7

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo