com.mantledillusion.essentials:vaadin-flow-filter-bar (2.0.0), com.mantledillusion.essentials:vaadin-flow-graph-pane (>=1.0.0, <=2.0.1) +84 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.4.3)

com.vaadin:flow-server MAVEN version 2.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.mantledillusion.essentials:vaadin-flow-filter-bar 2.0.0 - com.mantledillusion.essentials:vaadin-flow-graph-pane...

com.alibaba.rsocket:alibaba-broker-server (1.0.0), com.dorkbox.gradlevaadin:com.dorkbox.gradlevaadin.gradle.plugin (>=14.0, <=14.1.4) +46 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.4.6)

com.vaadin:flow-server MAVEN version 2.4.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.alibaba.rsocket:alibaba-broker-server 1.0.0 - com.dorkbox.gradlevaadin:com.dorkbox.gradlevaadin.gradle.plugin...

com.github.mcollovati.vertx:vaadin-flow-sockjs (>=14.4.0, <=14.5.0), com.github.mcollovati.vertx:vertx-vaadin-flow (>=14.4.0, <=14.5.0) +100 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.6.0)

com.vaadin:flow-server MAVEN version 2.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.github.mcollovati.vertx:vaadin-flow-sockjs =14.4.0, =14.4.0, =0.6.0-snapshot, =0.14.6.0 - com.vaadin:flow 2.6.0...

com.mantledillusion.metrics:trail-metrics-support-vaadin-14 (>=2.0.0.beta2, <=2.0.0), com.vaadin:flow (2.6.1) +91 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.6.1)

com.vaadin:flow-server MAVEN version 2.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.mantledillusion.metrics:trail-metrics-support-vaadin-14 =2.0.0.beta2, =2.0.0 - com.vaadin:flow 2.6.1 -...

com.dorkbox.gradlevaadin:com.dorkbox.gradlevaadin.gradle.plugin (>=14.7, <=14.7.2), com.vaadin:flow (2.7.1) +96 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.7.1)

com.vaadin:flow-server MAVEN version 2.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.dorkbox.gradlevaadin:com.dorkbox.gradlevaadin.gradle.plugin =14.7, =14.7.2 - com.vaadin:flow 2.7.1 -...

com.github.mcollovati.vertx:vaadin-flow-sockjs (14.6.0), com.github.mcollovati.vertx:vertx-vaadin-flow (14.6.0) +96 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.7.11)

com.vaadin:flow-server MAVEN version 2.7.11 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.github.mcollovati.vertx:vaadin-flow-sockjs 14.6.0 - com.github.mcollovati.vertx:vertx-vaadin-flow 14.6.0 -...

com.mantledillusion.metrics:trail-metrics-support-vaadin-14 (>=2.1.0, <=2.6.0), com.vaadin:flow (2.7.12) +92 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.7.12)

com.vaadin:flow-server MAVEN version 2.7.12 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.mantledillusion.metrics:trail-metrics-support-vaadin-14 =2.1.0, =2.6.0 - com.vaadin:flow 2.7.12 -...

com.dorkbox.gradlevaadin:com.dorkbox.gradlevaadin.gradle.plugin (14.8), com.dorkbox:gradlevaadin (14.8) +96 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.7.23)

com.vaadin:flow-server MAVEN version 2.7.23 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.dorkbox.gradlevaadin:com.dorkbox.gradlevaadin.gradle.plugin 14.8 - com.dorkbox:gradlevaadin 14.8 -...

com.dorkbox.gradlevaadin:com.dorkbox.gradlevaadin.gradle.plugin (>=14.9, <=14.9.4a), com.dorkbox:gradlevaadin (>=14.9, <=14.9.4a) +93 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.8.3)

com.vaadin:flow-server MAVEN version 2.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.dorkbox.gradlevaadin:com.dorkbox.gradlevaadin.gradle.plugin =14.9, =14.9, =14.9.4a - com.vaadin:flow 2.8.3 -...

com.flowingcode.vaadin.addons:twincolgrid (>=2.9.3, <=2.9.4), com.vaadin:flow (2.8.6) +92 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.8.6)

com.vaadin:flow-server MAVEN version 2.8.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.flowingcode.vaadin.addons:twincolgrid =2.9.3, =2.9.4 - com.vaadin:flow 2.8.6 - com.vaadin:flow-client 2.8.6 -...

com.flowingcode.vaadin.addons:error-window-vaadin (>=3.7.0, <=4.0.0), com.vaadin:flow (2.8.7) +92 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.8.7)

com.vaadin:flow-server MAVEN version 2.8.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.flowingcode.vaadin.addons:error-window-vaadin =3.7.0, =4.0.0 - com.vaadin:flow 2.8.7 - com.vaadin:flow-client...

com.dorkbox.gradlevaadin:com.dorkbox.gradlevaadin.gradle.plugin (>=14.9.4a1, <=14.10.1), com.dorkbox:gradlevaadin (>=14.9.4a1, <=14.10.1) +93 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.9.2)

com.vaadin:flow-server MAVEN version 2.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.dorkbox.gradlevaadin:com.dorkbox.gradlevaadin.gradle.plugin =14.9.4a1, =14.9.4a1, =14.10.1 - com.vaadin:flow...

com.vaadin:com.vaadin.gradle.plugin (0.14.10.4), com.vaadin:flow (2.9.5) +95 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.9.5)

com.vaadin:flow-server MAVEN version 2.9.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.vaadin:com.vaadin.gradle.plugin 0.14.10.4 - com.vaadin:flow 2.9.5 - com.vaadin:flow-client 2.9.5 -...

com.alibaba.rsocket:alibaba-broker-server (1.0.1), com.vaadin:flow (6.0.3) +91 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (6.0.3)

com.vaadin:flow-server MAVEN version 6.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.alibaba.rsocket:alibaba-broker-server 1.0.1 - com.vaadin:flow 6.0.3 - com.vaadin:flow-client 6.0.3 -...

com.github.mcollovati.vertx:vaadin-flow-sockjs (20.0.0), com.github.mcollovati.vertx:vertx-vaadin-flow (20.0.0) +99 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (7.0.2)

com.vaadin:flow-server MAVEN version 7.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.github.mcollovati.vertx:vaadin-flow-sockjs 20.0.0 - com.github.mcollovati.vertx:vertx-vaadin-flow 20.0.0 -...

com.github.mcollovati.vertx:vaadin-flow-sockjs (>=14.1.2, <=14.1.3), com.github.mcollovati.vertx:vertx-vaadin-flow (>=14.1.2, <=14.1.3) +21 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.1.7)

com.vaadin:flow-server MAVEN version 2.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.github.mcollovati.vertx:vaadin-flow-sockjs =14.1.2, =14.1.2, =14.1.22, =14.1.24 and more Source cves:...

com.alibaba.rsocket:alibaba-broker-server (1.0.0.m1), com.github.mdre:bubbledialog (>=1.0.2, <=1.0.4.1) +28 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.1.6)

com.vaadin:flow-server MAVEN version 2.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.alibaba.rsocket:alibaba-broker-server 1.0.0.m1 - com.github.mdre:bubbledialog =1.0.2, =1.0.2, =1.0.3, =0.0.3,...

com.oliveryasuna.vaadin:flow-commons-parent (1), com.oliveryasuna.vaadin:fluent-flow-parent (1) +109 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.6.7)

com.vaadin:flow-server MAVEN version 2.6.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.oliveryasuna.vaadin:flow-commons-parent 1 - com.oliveryasuna.vaadin:fluent-flow-parent 1 -...

com.github.mcollovati.vertx:vaadin-flow-sockjs (21.0.0), com.github.mcollovati.vertx:vertx-vaadin-flow (21.0.0) +101 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (8.0.0)

com.vaadin:flow-server MAVEN version 8.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.github.mcollovati.vertx:vaadin-flow-sockjs 21.0.0 - com.github.mcollovati.vertx:vertx-vaadin-flow 21.0.0 -...

com.vaadin:collaboration-engine (4.0.0), com.vaadin:com.vaadin.gradle.plugin (22.0.0) +109 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (9.0.0)

com.vaadin:flow-server MAVEN version 9.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.vaadin:collaboration-engine 4.0.0 - com.vaadin:com.vaadin.gradle.plugin 22.0.0 - com.vaadin:flow 9.0.0 -...