Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

com.vaadin:vaadin-core

1 known vulnerability (1 low), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
1 · 1 low
Registry
Maven Central

Advisories 1

  • Push Endpoint Returns Permissive CORS Headers

    Affected: from 14.14.0, fixed in 14.14.8; from 23.6.0, fixed in 23.6.17; from 24.4.0, fixed in 24.4.26; from 24.5.0, through 24.5.15; from 24.6.0, through 24.6.13; from 24.7.0, fixed in 24.7.17; from 24.8.0, through 24.8.17; from 24.9.0, fixed in 24.9.24; from 24.10.0, fixed in 24.10.12; from 25.0.0, through 25.0.13; from 25.1.0, through 25.1.13; from 25.2.0, fixed in 25.2.11; from 25.3.0, fixed in 25.3.3.