Medium
CVE-2026-2742
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 23
Reset filters
Medium
CVE-2023-25499
Vaadin vulnerable to possible information disclosure in non visible components.
Low
CVE-2023-25500
Vaadin vulnerable to possible information disclosure of class and method names in RPC response
Medium
ghsa-fr26-qjc8-mvjx
Possible route enumeration in production mode via RouteNotFoundError view in Vaadin 10, 11-14, and 15-19
Low
CVE-2021-33604
Reflected cross-site scripting in development mode handler in Vaadin 14, 15-19
Medium
CVE-2021-31412
Possible route enumeration in production mode via RouteNotFoundError view in Vaadin 10, 11-14, and 15-19
Low
ghsa-8vfw-v2jv-9hwc
Reflected cross-site scripting in development mode handler in Vaadin
High
CVE-2021-31411
Insecure temporary directory usage in frontend build functionality of Vaadin 14 and 15-19
Medium
ghsa-c57f-4vp2-jqhm
Insecure temporary directory usage in frontend build functionality of Vaadin 14 and 15-19
Low
CVE-2018-25007
Unauthorized client-side property update in UIDL request handler in Vaadin 10 and 11
Medium
CVE-2019-25027
Reflected cross-site scripting in default RouteNotFoundError view in Vaadin 10 and 11-13
Low
CVE-2020-36319
Potential sensitive data exposure in applications using Vaadin 15
Medium
CVE-2020-36321
Directory traversal in development mode handler in Vaadin 14 and 15-17
Medium
CVE-2021-31404
Timing side channel vulnerability in UIDL request handler in Vaadin 10, 11-14, and 15-18
High
CVE-2021-31407
OSGi applications using Vaadin 12-14 and 19 vulnerable to server classes and resources exposure
Medium
CVE-2021-31406
Timing side channel vulnerability in endpoint request handler in Vaadin 15-19
Low
ghsa-3h5r-928v-mxhh
Unauthorized client-side property update in UIDL request handler in Vaadin 10 and 11
Medium
ghsa-jqj4-r483-4gvr
Reflected cross-site scripting in default RouteNotFoundError view in Vaadin 10 and 11-13
Low
ghsa-76f4-fw33-6j2v
Potential sensitive data exposure in applications using Vaadin 15
Medium
ghsa-82mf-mmh7-hxp5
Directory traversal in development mode handler in Vaadin 14 and 15-17
Medium
ghsa-c6c4-7x48-4cqp
Timing side channel vulnerability in UIDL request handler in Vaadin 10, 11-14, and 15-18
Medium
ghsa-9h6g-6mxg-vvp4
Timing side channel vulnerability in endpoint request handler in Vaadin 15-19
High
ghsa-j9wr-49vq-rm5g
Server classes and resources exposure in OSGi applications using Vaadin 12-14 and 19
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.