Vaadin vulnerabilities
36 CVEs and advisories name Vaadin as an affected vendor, newest first. Follow it as a feed.
- CVE-2020-36321Directory traversal in development mode handler in Vaadin 14 and 15-17
- CVE-2020-36320Regular expression Denial of Service (ReDoS) in EmailValidator class in Vaadin 7
- CVE-2020-36319Potential sensitive data exposure in applications using Vaadin 15
- CVE-2019-25028Stored cross-site scripting in Grid component in Vaadin 7 and 8
- CVE-2019-25027Reflected cross-site scripting in default RouteNotFoundError view in Vaadin 10 and 11-13
- CVE-2018-25007Unauthorized client-side property update in UIDL request handler in Vaadin 10 and 11