PraisonAI information leakage vulnerability

PraisonAI is a low-code multi-agent collaboration framework developed by Mervin Praison. Versions of PraisonAI prior to 4.5.115 contained an information leakage vulnerability. This vulnerability stemmed from a lack of authentication in the event flow server, which could lead to information leaks...

com.vaadin:collaboration-engine (4.0.0), com.vaadin:com.vaadin.gradle.plugin (22.0.0) +109 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (9.0.0)

com.vaadin:flow-server MAVEN version 9.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.vaadin:collaboration-engine 4.0.0 - com.vaadin:com.vaadin.gradle.plugin 22.0.0 - com.vaadin:flow 9.0.0 -...

com.vaadin:com.vaadin.gradle.plugin (>=22.0.26, <=22.0.27), com.vaadin:flow (9.0.24) +100 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (9.0.24)

com.vaadin:flow-server MAVEN version 9.0.24 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.vaadin:com.vaadin.gradle.plugin =22.0.26, =22.0.27 - com.vaadin:flow 9.0.24 - com.vaadin:flow-client 9.0.24 -...

com.vaadin:com.vaadin.gradle.plugin (22.1.6), com.vaadin:flow (9.1.10) +103 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (9.1.10)

com.vaadin:flow-server MAVEN version 9.1.10 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.vaadin:com.vaadin.gradle.plugin 22.1.6 - com.vaadin:flow 9.1.10 - com.vaadin:flow-client 9.1.10 -...

com.vaadin:com.vaadin.gradle.plugin (22.2.2), com.vaadin:flow (9.2.3) +100 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (9.2.3)

com.vaadin:flow-server MAVEN version 9.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.vaadin:com.vaadin.gradle.plugin 22.2.2 - com.vaadin:flow 9.2.3 - com.vaadin:flow-client 9.2.3 -...

com.alibaba.rsocket:alibaba-broker-server (>=1.1.3, <=1.1.4), com.github.mcollovati.vertx:vaadin-flow-sockjs (>=23.1.0, <=23.4.1) +276 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (>=23.0.0, <=23.6.6)

com.vaadin:flow-server MAVEN version =23.0.0, =1.1.3, =23.1.0, =23.1.0, =23.4.0-alpha1, =23.4.0-alpha1, =1.0.0-alpha1, =1.0.0-alpha1, =1.0.0-alpha1, =1.0.0-alpha1, =2.3.0, =2.3.0, =2.3.0, =2.3.0, =5.7.0, =5.7.0, =5.7.1 and more Source cves: CVE-2026-2742 Source advisory:...

com.alibaba.rsocket:alibaba-broker-server (>=1.1.3, <=1.1.4), com.github.mcollovati.vertx:vaadin-flow-sockjs (>=23.1.0, <=23.4.1) +276 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (>=23.0.0, <=23.6.6)

com.vaadin:flow-server MAVEN version =23.0.0, =1.1.3, =23.1.0, =23.1.0, =23.4.0-alpha1, =23.4.0-alpha1, =1.0.0-alpha1, =1.0.0-alpha1, =1.0.0-alpha1, =1.0.0-alpha1, =2.3.0, =2.3.0, =2.3.0, =2.3.0, =5.7.0, =5.7.0, =5.7.1 and more Source cves: CVE-2026-2742 Source advisory:...

com.vaadin:appsec-kit-starter (2.0.0), com.vaadin:flow (2.9.10) +93 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.9.10)

com.vaadin:flow-server MAVEN version 2.9.10 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.vaadin:appsec-kit-starter 2.0.0 - com.vaadin:flow 2.9.10 - com.vaadin:flow-client 2.9.10 -...

com.github.fluorumlabs:code-quality-test (1.0.0), com.vaadin:com.vaadin.gradle.plugin (0.17.0.0) +90 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (4.0.0)

com.vaadin:flow-server MAVEN version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.github.fluorumlabs:code-quality-test 1.0.0 - com.vaadin:com.vaadin.gradle.plugin 0.17.0.0 - com.vaadin:flow 4.0...

com.github.mcollovati.vertx:vaadin-flow-sockjs (17.0.0), com.github.mcollovati.vertx:vertx-vaadin-flow (17.0.0) +18 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (4.0.1)

com.vaadin:flow-server MAVEN version 4.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.github.mcollovati.vertx:vaadin-flow-sockjs 17.0.0 - com.github.mcollovati.vertx:vertx-vaadin-flow 17.0.0 -...

com.vaadin:com.vaadin.gradle.plugin (21.0.1), com.vaadin:flow (8.0.1) +100 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (8.0.1)

com.vaadin:flow-server MAVEN version 8.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.vaadin:com.vaadin.gradle.plugin 21.0.1 - com.vaadin:flow 8.0.1 - com.vaadin:flow-client 8.0.1 -...

com.vaadin:com.vaadin.gradle.plugin (21.0.2), com.vaadin:flow (8.0.2) +101 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (8.0.2)

com.vaadin:flow-server MAVEN version 8.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.vaadin:com.vaadin.gradle.plugin 21.0.2 - com.vaadin:flow 8.0.2 - com.vaadin:flow-client 8.0.2 -...

com.holon-platform.vaadin:holon-starter-vaadin-flow (5.2.0-rc2), com.holon-platform.vaadin:holon-starter-vaadin-flow-undertow (5.2.0-rc2) +33 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (1.1.0)

com.vaadin:flow-server MAVEN version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.holon-platform.vaadin:holon-starter-vaadin-flow 5.2.0-rc2 -...

com.github.mcollovati.vertx:vaadin-flow-sockjs (12.0.0), com.github.mcollovati.vertx:vertx-vaadin-flow (12.0.0) +28 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (1.2.5)

com.vaadin:flow-server MAVEN version 1.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.github.mcollovati.vertx:vaadin-flow-sockjs 12.0.0 - com.github.mcollovati.vertx:vertx-vaadin-flow 12.0.0 -...

com.github.mvysny.kaributesting:karibu-testing-v10 (>=1.1.5, <=1.1.6), com.holon-platform.artisan:holon-artisan-demo (>=1.0.2, <=1.0.9) +46 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (1.4.3)

com.vaadin:flow-server MAVEN version 1.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.github.mvysny.kaributesting:karibu-testing-v10 =1.1.5, =1.0.2, =1.0.2, =1.0.2, =1.0.2, =5.2.6, =5.2.6, =5.2.6,...

com.holon-platform.artisan:holon-artisan-demo (>=1.1.2, <=1.1.5), com.holon-platform.artisan:holon-artisan-vaadin-flow-app-layout (>=1.1.2, <=1.1.5) +28 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (1.4.6)

com.vaadin:flow-server MAVEN version 1.4.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.holon-platform.artisan:holon-artisan-demo =1.1.2, =1.1.2, =1.1.2, =1.1.2, =5.2.12, =5.2.12, =5.2.12, =5.2.12,...

com.github.mcollovati.vertx:vaadin-flow-sockjs (>=14.0.0, <=14.0.13), com.github.mcollovati.vertx:vertx-vaadin-flow (>=14.0.0, <=14.0.13) +81 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.0.11)

com.vaadin:flow-server MAVEN version 2.0.11 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.github.mcollovati.vertx:vaadin-flow-sockjs =14.0.0, =14.0.0, =14.0.13 - com.vaadin:flow 2.0.11 -...

com.github.mdre:bubbledialog (1.0.0), com.github.mdre:flowquickpopup (1.0.0) +23 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.0.15)

com.vaadin:flow-server MAVEN version 2.0.15 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.github.mdre:bubbledialog 1.0.0 - com.github.mdre:flowquickpopup 1.0.0 -...

com.alibaba.rsocket:alibaba-broker-server (1.0.0.m2), com.mantledillusion.essentials:vaadin-flow-filter-bar (>=1.0.0, <=1.2.0) +29 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.1.9)

com.vaadin:flow-server MAVEN version 2.1.9 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.alibaba.rsocket:alibaba-broker-server 1.0.0.m2 - com.mantledillusion.essentials:vaadin-flow-filter-bar =1.0.0,...

com.github.martinprause.cytoscape:cytoscape-addon (>=0.0.1, <=0.0.2), com.github.mcollovati.vertx:vaadin-flow-sockjs (>=14.2.1, <=14.2.2) +38 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.2.0)

com.vaadin:flow-server MAVEN version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.github.martinprause.cytoscape:cytoscape-addon =0.0.1, =14.2.1, =14.2.1, =14.2.2 -...