com.vaadin:flow (2.7.10), com.vaadin:flow-client (2.7.10) +12 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.7.10)

com.vaadin:flow-server MAVEN version 2.7.10 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.vaadin:flow 2.7.10 - com.vaadin:flow-client 2.7.10 - com.vaadin:flow-component-demo-helpers 2.7.10 -...

com.vaadin:com.vaadin.gradle.plugin (>=22.0.12, <=22.0.13), com.vaadin:flow (9.0.11) +101 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (9.0.11)

com.vaadin:flow-server MAVEN version 9.0.11 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.vaadin:com.vaadin.gradle.plugin =22.0.12, =22.0.13 - com.vaadin:flow 9.0.11 - com.vaadin:flow-client 9.0.11 -...

com.vaadin:flow (2.13.2), com.vaadin:flow-client (2.13.2) +12 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.13.2)

com.vaadin:flow-server MAVEN version 2.13.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.vaadin:flow 2.13.2 - com.vaadin:flow-client 2.13.2 - com.vaadin:flow-component-demo-helpers 2.13.2 -...

com.vaadin:flow (3.0.4), com.vaadin:flow-client (3.0.4) +9 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (3.0.4)

com.vaadin:flow-server MAVEN version 3.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.vaadin:flow 3.0.4 - com.vaadin:flow-client 3.0.4 - com.vaadin:flow-component-demo-helpers 3.0.4 -...

com.vaadin:flow (3.0.0), com.vaadin:flow-client (3.0.0) +86 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (3.0.0)

com.vaadin:flow-server MAVEN version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.vaadin:flow 3.0.0 - com.vaadin:flow-client 3.0.0 - com.vaadin:flow-component-demo-helpers 3.0.0 -...

com.vaadin:flow (3.1.2), com.vaadin:flow-client (3.1.2) +14 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (3.1.2)

com.vaadin:flow-server MAVEN version 3.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.vaadin:flow 3.1.2 - com.vaadin:flow-client 3.1.2 - com.vaadin:flow-component-demo-helpers 3.1.2 -...

com.flowingcode.vaadin.addons:twincolgrid (>=2.9.3, <=2.9.4), com.vaadin:flow (2.8.6) +92 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.8.6)

com.vaadin:flow-server MAVEN version 2.8.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.flowingcode.vaadin.addons:twincolgrid =2.9.3, =2.9.4 - com.vaadin:flow 2.8.6 - com.vaadin:flow-client 2.8.6 -...

com.faendir.vaadin:jfreechart-flow (1.1.6), com.github.mcollovati.vertx:vaadin-flow-sockjs (0.2.0) +69 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (1.0.5)

com.vaadin:flow-server MAVEN version 1.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.faendir.vaadin:jfreechart-flow 1.1.6 - com.github.mcollovati.vertx:vaadin-flow-sockjs 0.2.0 -...

com.vaadin:flow (1.0.9), com.vaadin:flow-client (1.0.9) +14 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (1.0.9)

com.vaadin:flow-server MAVEN version 1.0.9 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.vaadin:flow 1.0.9 - com.vaadin:flow-client 1.0.9 - com.vaadin:flow-code-generator 1.0.9 -...

com.vaadin:flow (5.0.1), com.vaadin:flow-client (5.0.1) +89 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (5.0.1)

com.vaadin:flow-server MAVEN version 5.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.vaadin:flow 5.0.1 - com.vaadin:flow-client 5.0.1 - com.vaadin:flow-component-demo-helpers 5.0.1 -...

com.vaadin:flow (9.0.5), com.vaadin:flow-client (9.0.5) +13 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (9.0.5)

com.vaadin:flow-server MAVEN version 9.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.vaadin:flow 9.0.5 - com.vaadin:flow-client 9.0.5 - com.vaadin:flow-component-demo-helpers 9.0.5 -...

com.vaadin:flow (2.13.6), com.vaadin:flow-client (2.13.6) +91 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.13.6)

com.vaadin:flow-server MAVEN version 2.13.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.vaadin:flow 2.13.6 - com.vaadin:flow-client 2.13.6 - com.vaadin:flow-component-demo-helpers 2.13.6 -...

com.github.mcollovati.vertx:vaadin-flow-sockjs (15.0.0), com.github.mcollovati.vertx:vertx-vaadin-flow (15.0.0) +16 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (3.0.6)

com.vaadin:flow-server MAVEN version 3.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.github.mcollovati.vertx:vaadin-flow-sockjs 15.0.0 - com.github.mcollovati.vertx:vertx-vaadin-flow 15.0.0 -...

com.vaadin:com.vaadin.gradle.plugin (22.0.1), com.vaadin:flow (9.0.1) +101 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (9.0.1)

com.vaadin:flow-server MAVEN version 9.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.vaadin:com.vaadin.gradle.plugin 22.0.1 - com.vaadin:flow 9.0.1 - com.vaadin:flow-client 9.0.1 -...

firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the DOM: Core & HTML component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to incorrect boundary conditions in the DOM: Core & HTML component...

firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the DOM: Core & HTML component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to incorrect boundary conditions in the DOM: Core & HTML component...

firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the DOM: Core & HTML component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to incorrect boundary conditions in the DOM: Core & HTML component...

SUSE CVE-2026-2798

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 148 and Thunderbird 148...

CVE-2026-2771

Undefined behavior in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8...

CVE-2026-2799

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 148 and Thunderbird 148...