com.vaadin:flow (4.0.6), com.vaadin:flow-client (4.0.6) +9 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (4.0.6)

com.vaadin:flow-server MAVEN version 4.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.vaadin:flow 4.0.6 - com.vaadin:flow-client 4.0.6 - com.vaadin:flow-component-demo-helpers 4.0.6 -...

com.vaadin:flow (5.0.1), com.vaadin:flow-client (5.0.1) +89 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (5.0.1)

com.vaadin:flow-server MAVEN version 5.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.vaadin:flow 5.0.1 - com.vaadin:flow-client 5.0.1 - com.vaadin:flow-component-demo-helpers 5.0.1 -...

com.faendir.vaadin:jfreechart-flow (1.1.6), com.github.mcollovati.vertx:vaadin-flow-sockjs (0.2.0) +69 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (1.0.5)

com.vaadin:flow-server MAVEN version 1.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.faendir.vaadin:jfreechart-flow 1.1.6 - com.github.mcollovati.vertx:vaadin-flow-sockjs 0.2.0 -...

com.vaadin:flow (1.0.9), com.vaadin:flow-client (1.0.9) +14 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (1.0.9)

com.vaadin:flow-server MAVEN version 1.0.9 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.vaadin:flow 1.0.9 - com.vaadin:flow-client 1.0.9 - com.vaadin:flow-code-generator 1.0.9 -...

com.vaadin:flow (2.3.2), com.vaadin:flow-client (2.3.2) +15 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.3.2)

com.vaadin:flow-server MAVEN version 2.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.vaadin:flow 2.3.2 - com.vaadin:flow-client 2.3.2 - com.vaadin:flow-component-demo-helpers 2.3.2 -...

com.vaadin:flow (2.7.3), com.vaadin:flow-client (2.7.3) +92 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.7.3)

com.vaadin:flow-server MAVEN version 2.7.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.vaadin:flow 2.7.3 - com.vaadin:flow-client 2.7.3 - com.vaadin:flow-component-demo-helpers 2.7.3 -...

com.vaadin:flow (2.7.10), com.vaadin:flow-client (2.7.10) +12 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.7.10)

com.vaadin:flow-server MAVEN version 2.7.10 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.vaadin:flow 2.7.10 - com.vaadin:flow-client 2.7.10 - com.vaadin:flow-component-demo-helpers 2.7.10 -...

com.flowingcode.vaadin.addons:twincolgrid (>=2.9.3, <=2.9.4), com.vaadin:flow (2.8.6) +92 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.8.6)

com.vaadin:flow-server MAVEN version 2.8.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.flowingcode.vaadin.addons:twincolgrid =2.9.3, =2.9.4 - com.vaadin:flow 2.8.6 - com.vaadin:flow-client 2.8.6 -...

com.vaadin:flow (2.8.9), com.vaadin:flow-client (2.8.9) +15 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.8.9)

com.vaadin:flow-server MAVEN version 2.8.9 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.vaadin:flow 2.8.9 - com.vaadin:flow-client 2.8.9 - com.vaadin:flow-component-demo-helpers 2.8.9 -...

com.vaadin:flow (2.9.1), com.vaadin:flow-client (2.9.1) +12 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.9.1)

com.vaadin:flow-server MAVEN version 2.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.vaadin:flow 2.9.1 - com.vaadin:flow-client 2.9.1 - com.vaadin:flow-component-demo-helpers 2.9.1 -...

com.vaadin:flow (2.11.5), com.vaadin:flow-client (2.11.5) +91 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.11.5)

com.vaadin:flow-server MAVEN version 2.11.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.vaadin:flow 2.11.5 - com.vaadin:flow-client 2.11.5 - com.vaadin:flow-component-demo-helpers 2.11.5 -...

com.vaadin:flow (2.13.3), com.vaadin:flow-client (2.13.3) +12 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.13.3)

com.vaadin:flow-server MAVEN version 2.13.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.vaadin:flow 2.13.3 - com.vaadin:flow-client 2.13.3 - com.vaadin:flow-component-demo-helpers 2.13.3 -...

com.vaadin:flow (3.0.5), com.vaadin:flow-client (3.0.5) +14 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (3.0.5)

com.vaadin:flow-server MAVEN version 3.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.vaadin:flow 3.0.5 - com.vaadin:flow-client 3.0.5 - com.vaadin:flow-component-demo-helpers 3.0.5 -...

com.github.mcollovati.vertx:vaadin-flow-sockjs (15.0.0), com.github.mcollovati.vertx:vertx-vaadin-flow (15.0.0) +16 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (3.0.6)

com.vaadin:flow-server MAVEN version 3.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.github.mcollovati.vertx:vaadin-flow-sockjs 15.0.0 - com.github.mcollovati.vertx:vertx-vaadin-flow 15.0.0 -...

com.github.mcollovati.vertx:vaadin-flow-sockjs (>=14.1.2, <=14.1.3), com.github.mcollovati.vertx:vertx-vaadin-flow (>=14.1.2, <=14.1.3) +21 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.1.7)

com.vaadin:flow-server MAVEN version 2.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.github.mcollovati.vertx:vaadin-flow-sockjs =14.1.2, =14.1.2, =14.1.22, =14.1.24 and more Source cves:...

com.vaadin:com.vaadin.gradle.plugin (>=22.0.12, <=22.0.13), com.vaadin:flow (9.0.11) +101 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (9.0.11)

com.vaadin:flow-server MAVEN version 9.0.11 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.vaadin:com.vaadin.gradle.plugin =22.0.12, =22.0.13 - com.vaadin:flow 9.0.11 - com.vaadin:flow-client 9.0.11 -...

com.vaadin:com.vaadin.gradle.plugin (22.0.1), com.vaadin:flow (9.0.1) +101 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (9.0.1)

com.vaadin:flow-server MAVEN version 9.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.vaadin:com.vaadin.gradle.plugin 22.0.1 - com.vaadin:flow 9.0.1 - com.vaadin:flow-client 9.0.1 -...

com.vaadin:flow (2.11.3), com.vaadin:flow-client (2.11.3) +12 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.11.3)

com.vaadin:flow-server MAVEN version 2.11.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.vaadin:flow 2.11.3 - com.vaadin:flow-client 2.11.3 - com.vaadin:flow-component-demo-helpers 2.11.3 -...

com.vaadin:flow (3.1.2), com.vaadin:flow-client (3.1.2) +14 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (3.1.2)

com.vaadin:flow-server MAVEN version 3.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.vaadin:flow 3.1.2 - com.vaadin:flow-client 3.1.2 - com.vaadin:flow-component-demo-helpers 3.1.2 -...

Security Bulletin: IBM Maximo Application Suite uses os/exec 1.24.3; 1.24.4, ansible-9.4.0, github.com/eclipse/paho.mqtt.golang v1.3.5 and archive/tar 1.24.2; 1.24.4 which is vulnerable to CVE-2025-47906,CVE-2025-14010,CVE-2025-10543 and CVE-2025-58183

Summary IBM Maximo Application Suite uses os/exec 1.24.3; 1.24.4, ansible-9.4.0, github.com/eclipse/paho.mqtt.golang v1.3.5 and archive/tar 1.24.2; 1.24.4 which is vulnerable to CVE-2025-47906,CVE-2025-14010,CVE-2025-10543 and CVE-2025-58183. This bulletin contains information regarding the...