com.github.mdre:chartlib (>=0.3.1, <=0.5.2), com.github.mdre:stickynotes (>=0.5.1, <=0.5.2) +92 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.3.0)

com.vaadin:flow-server MAVEN version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.github.mdre:chartlib =0.3.1, =0.5.1, =2.0.0, =3.0.0 - com.vaadin:com.vaadin.gradle.plugin 0.8.0 - com.vaadin:fl...

com.alibaba.rsocket:alibaba-broker-server (1.0.0.m3), com.holon-platform.artisan:holon-artisan-demo (>=2.2.0, <=2.2.2) +34 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.3.1)

com.vaadin:flow-server MAVEN version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.alibaba.rsocket:alibaba-broker-server 1.0.0.m3 - com.holon-platform.artisan:holon-artisan-demo =2.2.0, =2.2.0,...

com.mantledillusion.essentials:vaadin-flow-filter-bar (2.0.0), com.mantledillusion.essentials:vaadin-flow-graph-pane (>=1.0.0, <=2.0.1) +84 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.4.3)

com.vaadin:flow-server MAVEN version 2.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.mantledillusion.essentials:vaadin-flow-filter-bar 2.0.0 - com.mantledillusion.essentials:vaadin-flow-graph-pane...

com.alibaba.rsocket:alibaba-broker-server (1.0.0), com.dorkbox.gradlevaadin:com.dorkbox.gradlevaadin.gradle.plugin (>=14.0, <=14.1.4) +46 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.4.6)

com.vaadin:flow-server MAVEN version 2.4.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.alibaba.rsocket:alibaba-broker-server 1.0.0 - com.dorkbox.gradlevaadin:com.dorkbox.gradlevaadin.gradle.plugin...

com.mantledillusion.vaadin:cotton (>=2.1.0.beta2, <=2.3.4), com.vaadin:flow (2.5.4) +90 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.5.4)

com.vaadin:flow-server MAVEN version 2.5.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.mantledillusion.vaadin:cotton =2.1.0.beta2, =2.3.4 - com.vaadin:flow 2.5.4 - com.vaadin:flow-client 2.5.4 -...

com.github.mcollovati.vertx:vaadin-flow-sockjs (>=14.4.0, <=14.5.0), com.github.mcollovati.vertx:vertx-vaadin-flow (>=14.4.0, <=14.5.0) +100 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.6.0)

com.vaadin:flow-server MAVEN version 2.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.github.mcollovati.vertx:vaadin-flow-sockjs =14.4.0, =14.4.0, =0.6.0-snapshot, =0.14.6.0 - com.vaadin:flow 2.6.0...

com.mantledillusion.metrics:trail-metrics-support-vaadin-14 (>=2.0.0.beta2, <=2.0.0), com.vaadin:flow (2.6.1) +91 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.6.1)

com.vaadin:flow-server MAVEN version 2.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.mantledillusion.metrics:trail-metrics-support-vaadin-14 =2.0.0.beta2, =2.0.0 - com.vaadin:flow 2.6.1 -...

com.dorkbox.gradlevaadin:com.dorkbox.gradlevaadin.gradle.plugin (>=14.7, <=14.7.2), com.vaadin:flow (2.7.1) +96 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.7.1)

com.vaadin:flow-server MAVEN version 2.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.dorkbox.gradlevaadin:com.dorkbox.gradlevaadin.gradle.plugin =14.7, =14.7.2 - com.vaadin:flow 2.7.1 -...

com.github.mcollovati.vertx:vaadin-flow-sockjs (14.6.0), com.github.mcollovati.vertx:vertx-vaadin-flow (14.6.0) +96 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.7.11)

com.vaadin:flow-server MAVEN version 2.7.11 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.github.mcollovati.vertx:vaadin-flow-sockjs 14.6.0 - com.github.mcollovati.vertx:vertx-vaadin-flow 14.6.0 -...

com.mantledillusion.metrics:trail-metrics-support-vaadin-14 (>=2.1.0, <=2.6.0), com.vaadin:flow (2.7.12) +92 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.7.12)

com.vaadin:flow-server MAVEN version 2.7.12 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.mantledillusion.metrics:trail-metrics-support-vaadin-14 =2.1.0, =2.6.0 - com.vaadin:flow 2.7.12 -...

com.dorkbox.gradlevaadin:com.dorkbox.gradlevaadin.gradle.plugin (14.8), com.dorkbox:gradlevaadin (14.8) +96 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.7.23)

com.vaadin:flow-server MAVEN version 2.7.23 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.dorkbox.gradlevaadin:com.dorkbox.gradlevaadin.gradle.plugin 14.8 - com.dorkbox:gradlevaadin 14.8 -...

com.dorkbox.gradlevaadin:com.dorkbox.gradlevaadin.gradle.plugin (>=14.9, <=14.9.4a), com.dorkbox:gradlevaadin (>=14.9, <=14.9.4a) +93 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.8.3)

com.vaadin:flow-server MAVEN version 2.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.dorkbox.gradlevaadin:com.dorkbox.gradlevaadin.gradle.plugin =14.9, =14.9, =14.9.4a - com.vaadin:flow 2.8.3 -...

com.flowingcode.vaadin.addons:twincolgrid (>=2.9.3, <=2.9.4), com.vaadin:flow (2.8.6) +92 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.8.6)

com.vaadin:flow-server MAVEN version 2.8.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.flowingcode.vaadin.addons:twincolgrid =2.9.3, =2.9.4 - com.vaadin:flow 2.8.6 - com.vaadin:flow-client 2.8.6 -...

com.flowingcode.vaadin.addons:error-window-vaadin (>=3.7.0, <=4.0.0), com.vaadin:flow (2.8.7) +92 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.8.7)

com.vaadin:flow-server MAVEN version 2.8.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.flowingcode.vaadin.addons:error-window-vaadin =3.7.0, =4.0.0 - com.vaadin:flow 2.8.7 - com.vaadin:flow-client...

com.dorkbox.gradlevaadin:com.dorkbox.gradlevaadin.gradle.plugin (>=14.9.4a1, <=14.10.1), com.dorkbox:gradlevaadin (>=14.9.4a1, <=14.10.1) +93 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.9.2)

com.vaadin:flow-server MAVEN version 2.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.dorkbox.gradlevaadin:com.dorkbox.gradlevaadin.gradle.plugin =14.9.4a1, =14.9.4a1, =14.10.1 - com.vaadin:flow...

com.vaadin:com.vaadin.gradle.plugin (0.14.10.4), com.vaadin:flow (2.9.5) +95 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.9.5)

com.vaadin:flow-server MAVEN version 2.9.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.vaadin:com.vaadin.gradle.plugin 0.14.10.4 - com.vaadin:flow 2.9.5 - com.vaadin:flow-client 2.9.5 -...

com.flowingcode.vaadin.test:testbench-rpc (>=1.4.0, <=1.5.0), com.vaadin:appsec-kit-starter (2.0.1) +96 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.10.5)

com.vaadin:flow-server MAVEN version 2.10.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.flowingcode.vaadin.test:testbench-rpc =1.4.0, =14.11.11, =14.11.13 and more Source cves: CVE-2026-2742 Source...

com.github.mcollovati.vertx:vaadin-flow-sockjs (>=18.0.0, <=18.1.2), com.github.mcollovati.vertx:vertx-vaadin-flow (>=18.0.0, <=18.1.2) +95 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (5.0.2)

com.vaadin:flow-server MAVEN version 5.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.github.mcollovati.vertx:vaadin-flow-sockjs =18.0.0, =18.0.0, =18.0.2, =18.0.2, =18.0.5 and more Source cves:...

com.alibaba.rsocket:alibaba-broker-server (1.0.1), com.vaadin:flow (6.0.3) +91 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (6.0.3)

com.vaadin:flow-server MAVEN version 6.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.alibaba.rsocket:alibaba-broker-server 1.0.1 - com.vaadin:flow 6.0.3 - com.vaadin:flow-client 6.0.3 -...

com.github.mcollovati.vertx:vaadin-flow-sockjs (20.0.0), com.github.mcollovati.vertx:vertx-vaadin-flow (20.0.0) +99 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (7.0.2)

com.vaadin:flow-server MAVEN version 7.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.github.mcollovati.vertx:vaadin-flow-sockjs 20.0.0 - com.github.mcollovati.vertx:vertx-vaadin-flow 20.0.0 -...