at.released.igdbclient:igdbclient-core-android (0.8), at.released.igdbclient:igdbclient-core-jvm (0.8) +21 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime-jvm (5.3.0)

com.squareup.wire:wire-runtime-jvm MAVEN version 5.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime-jvm and may be impacted: - at.released.igdbclient:igdbclient-core-android 0.8 -...

com.squareup.wire:com.squareup.wire.gradle.plugin (>=7.0.0-alpha01, <=7.0.0-alpha02), com.squareup.wire:wire-compiler (>=7.0.0-alpha01, <=7.0.0-alpha02) +11 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime-jvm (>=7.0.0-alpha01, <=7.0.0-alpha02)

com.squareup.wire:wire-runtime-jvm MAVEN version =7.0.0-alpha01, =7.0.0-alpha01, =7.0.0-alpha01, =7.0.0-alpha01, =7.0.0-alpha01, =7.0.0-alpha01, =7.0.0-alpha01, =7.0.0-alpha01, =7.0.0-alpha01, =7.0.0-alpha01, =7.0.0-alpha01, =7.0.0-alpha01, =7.0.0-alpha01, =7.0.0-alpha01, =7.0.0-alpha02 Source...

com.squareup.wire:com.squareup.wire.gradle.plugin (4.5.5), com.squareup.wire:wire-compiler (4.5.5) +12 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime-jvm (4.5.5)

com.squareup.wire:wire-runtime-jvm MAVEN version 4.5.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime-jvm and may be impacted: - com.squareup.wire:com.squareup.wire.gradle.plugin 4.5.5 - com.squareup.wire:wire-compiler...

com.squareup.wire:com.squareup.wire.gradle.plugin (5.0.0-alpha03), com.squareup.wire:wire-compiler (5.0.0-alpha03) +11 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime-jvm (5.0.0-alpha03)

com.squareup.wire:wire-runtime-jvm MAVEN version 5.0.0-alpha03 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime-jvm and may be impacted: - com.squareup.wire:com.squareup.wire.gradle.plugin 5.0.0-alpha03 -...

com.vaadin.flow:com.vaadin.flow.gradle.plugin (>=24.8.0.alpha10, <=24.9.16), com.vaadin.hilla:com.vaadin.hilla.gradle.plugin (>=24.4.0, <=24.9.15) +9 more potentially affected by CVE-2026-7860 via com.vaadin:flow-gradle-plugin (>=24.0.0, <=24.9.16)

com.vaadin:flow-gradle-plugin MAVEN version =24.0.0, =24.8.0.alpha10, =24.4.0, =24.0.0, =24.4.0, =24.4.21, =24.4.0, =24.0.0, =2.1.0.alpha1, =2.1.0.alpha1, =2.0.0-m2, =2.0.0-m2, =2.8.1 Source cves: CVE-2026-7860 Source advisory: GHSA-J8MX-J73W-9MXW...

com.vaadin.flow:com.vaadin.flow.gradle.plugin (>=24.10.0, <=24.10.3), com.vaadin.hilla:com.vaadin.hilla.gradle.plugin (>=24.10.0, <=24.10.3) +4 more potentially affected by CVE-2026-7860 via com.vaadin:flow-gradle-plugin (>=24.10.0, <=24.10.3)

com.vaadin:flow-gradle-plugin MAVEN version =24.10.0, =24.10.0, =24.10.0, =24.10.0, =24.10.0, =24.10.0, =24.10.0, =24.10.3 Source cves: CVE-2026-7860 Source advisory: OSV:GHSA-J8MX-J73W-9MXW...

com.vaadin.flow:com.vaadin.flow.gradle.plugin (>=25.1.0, <=25.1.4), com.vaadin.hilla:com.vaadin.hilla.gradle.plugin (>=25.1.0, <=25.1.3) +4 more potentially affected by CVE-2026-7860 via com.vaadin:flow-gradle-plugin (>=25.1.0, <=25.1.4)

com.vaadin:flow-gradle-plugin MAVEN version =25.1.0, =25.1.0, =25.1.0, =25.1.0, =25.1.0, =25.1.0, =25.1.0, =25.1.4 Source cves: CVE-2026-7860 Source advisory: GHSA-J8MX-J73W-9MXW...

com.vaadin.flow:com.vaadin.flow.gradle.plugin (>=24.8.0.alpha10, <=24.9.17), com.vaadin.hilla:com.vaadin.hilla.gradle.plugin (>=24.4.0, <=24.9.16) +9 more potentially affected by CVE-2026-7860 via com.vaadin:flow-gradle-plugin (>=24.0.0, <=24.9.17)

com.vaadin:flow-gradle-plugin MAVEN version =24.0.0, =24.8.0.alpha10, =24.4.0, =24.0.0, =24.4.0, =24.4.21, =24.4.0, =24.0.0, =2.1.0.alpha1, =2.1.0.alpha1, =2.0.0-m2, =2.0.0-m2, =2.8.1 Source cves: CVE-2026-7860 Source advisory: OSV:GHSA-J8MX-J73W-9MXW...

com.vaadin.flow:com.vaadin.flow.gradle.plugin (>=24.10.0, <=24.10.3), com.vaadin.hilla:com.vaadin.hilla.gradle.plugin (>=24.10.0, <=24.10.3) +4 more potentially affected by CVE-2026-7860 via com.vaadin:flow-gradle-plugin (>=24.10.0, <=24.10.3)

com.vaadin:flow-gradle-plugin MAVEN version =24.10.0, =24.10.0, =24.10.0, =24.10.0, =24.10.0, =24.10.0, =24.10.0, =24.10.3 Source cves: CVE-2026-7860 Source advisory: GHSA-J8MX-J73W-9MXW...

com.vaadin.flow:com.vaadin.flow.gradle.plugin (>=25.0.0, <=25.0.11), com.vaadin.hilla:com.vaadin.hilla.gradle.plugin (>=25.0.0, <=25.0.10) +4 more potentially affected by CVE-2026-7860 via com.vaadin:flow-gradle-plugin (>=25.0.0, <=25.0.11)

com.vaadin:flow-gradle-plugin MAVEN version =25.0.0, =25.0.0, =25.0.0, =25.0.0, =25.0.0, =25.0.0, =25.0.0, =25.0.10 Source cves: CVE-2026-7860 Source advisory: OSV:GHSA-J8MX-J73W-9MXW...

com.vaadin.flow:com.vaadin.flow.gradle.plugin (>=25.1.0, <=25.1.4), com.vaadin.hilla:com.vaadin.hilla.gradle.plugin (>=25.1.0, <=25.1.3) +4 more potentially affected by CVE-2026-7860 via com.vaadin:flow-gradle-plugin (>=25.1.0, <=25.1.4)

com.vaadin:flow-gradle-plugin MAVEN version =25.1.0, =25.1.0, =25.1.0, =25.1.0, =25.1.0, =25.1.0, =25.1.0, =25.1.4 Source cves: CVE-2026-7860 Source advisory: OSV:GHSA-J8MX-J73W-9MXW...

GHSA-J8MX-J73W-9MXW Vaadin Build Plugins is Affected by a Possible Information Disclosure Vulnerability

A possible information disclosure vulnerability exists in the Vaadin Maven plugin and Vaadin Gradle plugin that exposes the full set of environment variables in build logs whenever the frontend build process exits with a non-zero status. Because the build environment may contain credentials...

com.vaadin.flow:com.vaadin.flow.gradle.plugin (>=25.0.0, <=25.0.10), com.vaadin.hilla:com.vaadin.hilla.gradle.plugin (>=25.0.0, <=25.0.9) +4 more potentially affected by CVE-2026-7860 via com.vaadin:flow-gradle-plugin (>=25.0.0, <=25.0.10)

com.vaadin:flow-gradle-plugin MAVEN version =25.0.0, =25.0.0, =25.0.0, =25.0.0, =25.0.0, =25.0.0, =25.0.0, =25.0.9 Source cves: CVE-2026-7860 Source advisory: GHSA-J8MX-J73W-9MXW...

Vaadin Build Plugins is Affected by a Possible Information Disclosure Vulnerability

A possible information disclosure vulnerability exists in the Vaadin Maven plugin and Vaadin Gradle plugin that exposes the full set of environment variables in build logs whenever the frontend build process exits with a non-zero status. Because the build environment may contain credentials...

CVE-2026-7860

A possible information disclosure vulnerability exists in the Vaadin Maven plugin and Vaadin Gradle plugin that exposes the full set of environment variables in build logs whenever the frontend build process exits with a non-zero status. Because the build environment may contain credentials...

com.vaadin.flow:com.vaadin.flow.gradle.plugin (>=25.0.0, <=25.1.4), com.vaadin.hilla:com.vaadin.hilla.gradle.plugin (>=25.0.0, <=25.1.3) +5 more potentially affected by CVE-2026-7860 via com.vaadin:flow-gradle-plugin (>=25.0.0, <=25.1.4)

com.vaadin:flow-gradle-plugin MAVEN version =25.0.0, =25.0.0, =25.0.0, =25.0.0, =25.0.0, =25.0.0, =25.0.0, =25.1.4 Source cves: CVE-2026-7860 Source advisory: MEND:CVE-2026-7860...

com.vaadin.flow:com.vaadin.flow.gradle.plugin (>=24.8.0.alpha10, <=24.10.3), com.vaadin.hilla:com.vaadin.hilla.gradle.plugin (>=24.4.0, <=24.10.3) +9 more potentially affected by CVE-2026-7860 via com.vaadin:flow-gradle-plugin (>=24.0.0, <=24.10.3)

com.vaadin:flow-gradle-plugin MAVEN version =24.0.0, =24.8.0.alpha10, =24.4.0, =24.0.0, =24.4.0, =24.4.21, =24.4.0, =24.0.0, =2.1.0.alpha1, =2.1.0.alpha1, =2.0.0-m2, =2.0.0-m2, =2.8.1 Source cves: CVE-2026-7860 Source advisory: MEND:CVE-2026-7860...

com.vaadin:com.vaadin.gradle.plugin (>=23.0.0, <=23.6.9), com.vaadin:flow-gradle-plugin (>=23.0.0, <=23.6.10) +12 more potentially affected by CVE-2026-7860 via com.vaadin:flow-plugin-base (>=23.0.0, <=23.6.10)

com.vaadin:flow-plugin-base MAVEN version =23.0.0, =23.0.0, =23.0.0, =23.0.0, =23.0.0, =23.0.0, =0.0.2-8-605ce6, =0.0.2-8-605ce6, =0.0.0-24-fcfa64, =0.0.0, =1.4.0-m2, =1.4.0-m2, =2.0.0-m1 - org.geckoprojects.vaadin:org.gecko.vaadin.generator 2.0.0 Source cves: CVE-2026-7860 Source advisory:...

CVE-2026-7860 Possible information disclosure of environment variables in Vaadin Build Plugins via Failed Frontend Build

A possible information disclosure vulnerability exists in the Vaadin Maven plugin and Vaadin Gradle plugin that exposes the full set of environment variables in build logs whenever the frontend build process exits with a non-zero status. Because the build environment may contain credentials...

CVE-2026-7860 Possible information disclosure of environment variables in Vaadin Build Plugins via Failed Frontend Build

A possible information disclosure vulnerability exists in the Vaadin Maven plugin and Vaadin Gradle plugin that exposes the full set of environment variables in build logs whenever the frontend build process exits with a non-zero status. Because the build environment may contain credentials...