com.vaadin:hilla-maven-plugin (>=24.4.0, <=24.9.16), com.vaadin:vaadin-maven-plugin (>=24.0.0, <=24.9.16) +1 more potentially affected by CVE-2026-7860 via com.vaadin:flow-maven-plugin (>=24.0.0, <=24.9.17)

com.vaadin:flow-maven-plugin MAVEN version =24.0.0, =24.4.0, =24.0.0, =2.0.0, =24.1.15 Source cves: CVE-2026-7860 Source advisory: SNYK:JAVA-COMVAADIN-17176893...

com.vaadin.flow:com.vaadin.flow.gradle.plugin (>=25.0.0, <=25.0.10), com.vaadin.hilla:com.vaadin.hilla.gradle.plugin (>=25.0.0, <=25.0.9) +4 more potentially affected by CVE-2026-7860 via com.vaadin:flow-gradle-plugin (>=25.0.0, <=25.0.10)

com.vaadin:flow-gradle-plugin MAVEN version =25.0.0, =25.0.0, =25.0.0, =25.0.0, =25.0.0, =25.0.0, =25.0.0, =25.0.9 Source cves: CVE-2026-7860 Source advisory: GHSA-J8MX-J73W-9MXW...

com.vaadin.flow:com.vaadin.flow.gradle.plugin (>=24.8.0.alpha10, <=24.9.16), com.vaadin.hilla:com.vaadin.hilla.gradle.plugin (>=24.4.0, <=24.9.15) +9 more potentially affected by CVE-2026-7860 via com.vaadin:flow-gradle-plugin (>=24.0.0, <=24.9.16)

com.vaadin:flow-gradle-plugin MAVEN version =24.0.0, =24.8.0.alpha10, =24.4.0, =24.0.0, =24.4.0, =24.4.21, =24.4.0, =24.0.0, =2.1.0.alpha1, =2.1.0.alpha1, =2.0.0-m2, =2.0.0-m2, =2.8.1 Source cves: CVE-2026-7860 Source advisory: GHSA-J8MX-J73W-9MXW...

com.vaadin.flow:com.vaadin.flow.gradle.plugin (>=24.10.0, <=24.10.3), com.vaadin.hilla:com.vaadin.hilla.gradle.plugin (>=24.10.0, <=24.10.3) +4 more potentially affected by CVE-2026-7860 via com.vaadin:flow-gradle-plugin (>=24.10.0, <=24.10.3)

com.vaadin:flow-gradle-plugin MAVEN version =24.10.0, =24.10.0, =24.10.0, =24.10.0, =24.10.0, =24.10.0, =24.10.0, =24.10.3 Source cves: CVE-2026-7860 Source advisory: OSV:GHSA-J8MX-J73W-9MXW...

com.vaadin.flow:com.vaadin.flow.gradle.plugin (>=24.10.0-beta1, <=24.10.3), com.vaadin.hilla:com.vaadin.hilla.gradle.plugin (>=24.10.0-beta1, <=24.10.3) +9 more potentially affected by CVE-2026-7860 via com.vaadin:flow-plugin-base (>=24.10.0-beta1, <=24.10.3)

com.vaadin:flow-plugin-base MAVEN version =24.10.0-beta1, =24.10.0-beta1, =24.10.0-beta1, =24.10.0-beta1, =24.10.0-beta1, =24.10.0-beta1, =24.10.0-beta1, =24.10.0-beta1, =24.10.0-beta1, =24.10.0-beta1, =24.10.0-beta1, =24.10.0-beta1, =24.10.3 Source cves: CVE-2026-7860 Source advisory:...

com.vaadin.flow:com.vaadin.flow.gradle.plugin (>=24.8.0.alpha10, <=24.9.17), com.vaadin.hilla:com.vaadin.hilla.gradle.plugin (>=24.4.0, <=24.9.16) +9 more potentially affected by CVE-2026-7860 via com.vaadin:flow-gradle-plugin (>=24.0.0, <=24.9.17)

com.vaadin:flow-gradle-plugin MAVEN version =24.0.0, =24.8.0.alpha10, =24.4.0, =24.0.0, =24.4.0, =24.4.21, =24.4.0, =24.0.0, =2.1.0.alpha1, =2.1.0.alpha1, =2.0.0-m2, =2.0.0-m2, =2.8.1 Source cves: CVE-2026-7860 Source advisory: OSV:GHSA-J8MX-J73W-9MXW...

com.vaadin:com.vaadin.gradle.plugin (>=23.0.0, <=23.6.9), com.vaadin:flow-gradle-plugin (>=23.0.0, <=23.6.10) +12 more potentially affected by CVE-2026-7860 via com.vaadin:flow-plugin-base (>=23.0.0, <=23.6.10)

com.vaadin:flow-plugin-base MAVEN version =23.0.0, =23.0.0, =23.0.0, =23.0.0, =23.0.0, =23.0.0, =0.0.2-8-605ce6, =0.0.2-8-605ce6, =0.0.0-24-fcfa64, =0.0.0, =1.4.0-m2, =1.4.0-m2, =2.0.0-m1 - org.geckoprojects.vaadin:org.gecko.vaadin.generator 2.0.0 Source cves: CVE-2026-7860 Source advisory:...

com.vaadin:hilla-maven-plugin (>=25.0.0-beta1, <=25.0.10), com.vaadin:vaadin-maven-plugin (>=25.0.0-beta1, <=25.0.10) potentially affected by CVE-2026-7860 via com.vaadin:flow-maven-plugin (>=25.0.0-beta1, <=25.0.11)

com.vaadin:flow-maven-plugin MAVEN version =25.0.0-beta1, =25.0.0-beta1, =25.0.0-beta1, =25.0.10 Source cves: CVE-2026-7860 Source advisory: SNYK:JAVA-COMVAADIN-17176893...

com.github.mcollovati:quarkus-hilla-commons-deployment (>=25.0.0-alpha1, <=25.0.1), com.github.mcollovati:quarkus-hilla-deployment (>=25.0.0-alpha1, <=25.0.1) +14 more potentially affected by CVE-2026-7860 via com.vaadin:flow-plugin-base (>=25.0.0-beta1, <=25.0.11)

com.vaadin:flow-plugin-base MAVEN version =25.0.0-beta1, =25.0.0-alpha1, =25.0.0-alpha1, =25.0.0-alpha1, =25.0.0-beta1, =25.0.0-beta1, =25.0.0-beta1, =25.0.0-beta1, =25.0.0-beta1, =25.0.0-beta1, =25.0.0-beta1, =25.0.0-beta1, =25.0.0-beta1, =25.0.0-beta1, =25.0.0-beta1, =3.0.0-beta1, =3.0.3 and mo...

com.github.mcollovati:quarkus-hilla-commons-deployment (>=25.1.0-alpha1, <=25.1.0), com.github.mcollovati:quarkus-hilla-deployment (>=25.1.0-alpha1, <=25.1.0) +14 more potentially affected by CVE-2026-7860 via com.vaadin:flow-plugin-base (>=25.1.0-beta1, <=25.1.4)

com.vaadin:flow-plugin-base MAVEN version =25.1.0-beta1, =25.1.0-alpha1, =25.1.0-alpha1, =25.1.0-alpha1, =25.1.0-beta1, =25.1.0-beta1, =25.1.0-beta1, =25.1.0-beta1, =25.1.0-beta1, =25.1.0-beta1, =25.1.0-beta1, =25.1.0-beta1, =25.1.0-beta1, =25.1.0-beta1, =25.1.0-beta1, =3.1.0-beta1, =3.1.1 and mo...

com.vaadin:hilla-maven-plugin (>=25.0.0, <=25.0.10), com.vaadin:vaadin-maven-plugin (>=25.0.0, <=25.0.10) potentially affected by CVE-2026-7860 via com.vaadin:flow-maven-plugin (>=25.0.0, <=25.0.11)

com.vaadin:flow-maven-plugin MAVEN version =25.0.0, =25.0.0, =25.0.0, =25.0.10 Source cves: CVE-2026-7860 Source advisory: OSV:GHSA-J8MX-J73W-9MXW...

com.vaadin.flow:com.vaadin.flow.gradle.plugin (>=24.10.0, <=24.10.3), com.vaadin.hilla:com.vaadin.hilla.gradle.plugin (>=24.10.0, <=24.10.3) +4 more potentially affected by CVE-2026-7860 via com.vaadin:flow-gradle-plugin (>=24.10.0, <=24.10.3)

com.vaadin:flow-gradle-plugin MAVEN version =24.10.0, =24.10.0, =24.10.0, =24.10.0, =24.10.0, =24.10.0, =24.10.0, =24.10.3 Source cves: CVE-2026-7860 Source advisory: GHSA-J8MX-J73W-9MXW...

com.vaadin.flow:com.vaadin.flow.gradle.plugin (>=25.0.0, <=25.1.4), com.vaadin.hilla:com.vaadin.hilla.gradle.plugin (>=25.0.0, <=25.1.3) +5 more potentially affected by CVE-2026-7860 via com.vaadin:flow-gradle-plugin (>=25.0.0, <=25.1.4)

com.vaadin:flow-gradle-plugin MAVEN version =25.0.0, =25.0.0, =25.0.0, =25.0.0, =25.0.0, =25.0.0, =25.0.0, =25.1.4 Source cves: CVE-2026-7860 Source advisory: MEND:CVE-2026-7860...

com.github.mcollovati:quarkus-hilla-commons-deployment (>=25.0.0-rc1, <=25.1.0), com.github.mcollovati:quarkus-hilla-deployment (>=25.0.0-rc1, <=25.1.0) +15 more potentially affected by CVE-2026-7860 via com.vaadin:flow-plugin-base (>=25.0.0, <=25.1.4)

com.vaadin:flow-plugin-base MAVEN version =25.0.0, =25.0.0-rc1, =25.0.0-rc1, =25.0.0-rc1, =25.0.0, =25.0.0, =25.0.0, =25.0.0, =25.0.0, =25.0.0, =25.0.0, =25.0.0, =25.0.0, =25.0.0, =25.0.0, =25.1.4 and more Source cves: CVE-2026-7860 Source advisory: MEND:CVE-2026-7860...

com.github.mcollovati:quarkus-hilla-commons-deployment (>=24.7.0, <=24.9.6), com.github.mcollovati:quarkus-hilla-deployment (>=24.7.0, <=24.9.6) +18 more potentially affected by CVE-2026-7860 via com.vaadin:flow-plugin-base (>=24.0.0, <=24.10.3)

com.vaadin:flow-plugin-base MAVEN version =24.0.0, =24.7.0, =24.7.0, =24.7.0, =24.8.0, =24.4.0, =24.0.0, =24.4.0, =24.0.0, =24.0.0, =24.0.0, =24.4.21, =24.4.0, =24.4.0, =24.0.0, =24.0.0, =24.10.3 and more Source cves: CVE-2026-7860 Source advisory: MEND:CVE-2026-7860...

com.vaadin:com.vaadin.gradle.plugin (>=23.0.0, <=23.6.9), com.vaadin:flow-gradle-plugin (>=23.0.0, <=23.6.10) +12 more potentially affected by CVE-2026-7860 via com.vaadin:flow-plugin-base (>=23.0.0, <=23.6.10)

com.vaadin:flow-plugin-base MAVEN version =23.0.0, =23.0.0, =23.0.0, =23.0.0, =23.0.0, =23.0.0, =0.0.2-8-605ce6, =0.0.2-8-605ce6, =0.0.0-24-fcfa64, =0.0.0, =1.4.0-m2, =1.4.0-m2, =2.0.0-m1 - org.geckoprojects.vaadin:org.gecko.vaadin.generator 2.0.0 Source cves: CVE-2026-7860 Source advisory:...

com.vaadin:com.vaadin.gradle.plugin (0.17.0.1), com.vaadin:flow (4.0.2) +17 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (4.0.2)

com.vaadin:flow-server MAVEN version 4.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.vaadin:com.vaadin.gradle.plugin 0.17.0.1 - com.vaadin:flow 4.0.2 - com.vaadin:flow-client 4.0.2 -...

com.vaadin:flow (2.13.0-beta1), com.vaadin:flow-client (2.13.0-beta1) +91 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.13.0-beta1)

com.vaadin:flow-server MAVEN version 2.13.0-beta1 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.vaadin:flow 2.13.0-beta1 - com.vaadin:flow-client 2.13.0-beta1 - com.vaadin:flow-component-demo-helpers...

com.github.mcollovati.vertx:vaadin-flow-sockjs (19.0.0), com.github.mcollovati.vertx:vertx-vaadin-flow (19.0.0) +93 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (6.0.2)

com.vaadin:flow-server MAVEN version 6.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.github.mcollovati.vertx:vaadin-flow-sockjs 19.0.0 - com.github.mcollovati.vertx:vertx-vaadin-flow 19.0.0 -...

com.vaadin:flow (1.2.2), com.vaadin:flow-client (1.2.2) +17 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (1.2.2)

com.vaadin:flow-server MAVEN version 1.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.vaadin:flow 1.2.2 - com.vaadin:flow-client 1.2.2 - com.vaadin:flow-code-generator 1.2.2 -...