com.github.mcollovati:quarkus-hilla-commons-deployment (>=25.1.0-alpha1, <=25.1.0), com.github.mcollovati:quarkus-hilla-deployment (>=25.1.0-alpha1, <=25.1.0) +14 more potentially affected by CVE-2026-7860 via com.vaadin:flow-plugin-base (>=25.1.0-beta1, <=25.1.4)

com.vaadin:flow-plugin-base MAVEN version =25.1.0-beta1, =25.1.0-alpha1, =25.1.0-alpha1, =25.1.0-alpha1, =25.1.0-beta1, =25.1.0-beta1, =25.1.0-beta1, =25.1.0-beta1, =25.1.0-beta1, =25.1.0-beta1, =25.1.0-beta1, =25.1.0-beta1, =25.1.0-beta1, =25.1.0-beta1, =25.1.0-beta1, =3.1.0-beta1, =3.1.1 and mo...

com.vaadin:com.vaadin.gradle.plugin (>=23.0.0, <=23.6.9), com.vaadin:flow-gradle-plugin (>=23.0.0, <=23.6.10) +12 more potentially affected by CVE-2026-7860 via com.vaadin:flow-plugin-base (>=23.0.0, <=23.6.10)

com.vaadin:flow-plugin-base MAVEN version =23.0.0, =23.0.0, =23.0.0, =23.0.0, =23.0.0, =23.0.0, =0.0.2-8-605ce6, =0.0.2-8-605ce6, =0.0.0-24-fcfa64, =0.0.0, =1.4.0-m2, =1.4.0-m2, =2.0.0-m1 - org.geckoprojects.vaadin:org.gecko.vaadin.generator 2.0.0 Source cves: CVE-2026-7860 Source advisory:...

com.vaadin.flow:com.vaadin.flow.gradle.plugin (>=24.10.0-beta1, <=24.10.3), com.vaadin.hilla:com.vaadin.hilla.gradle.plugin (>=24.10.0-beta1, <=24.10.3) +9 more potentially affected by CVE-2026-7860 via com.vaadin:flow-plugin-base (>=24.10.0-beta1, <=24.10.3)

com.vaadin:flow-plugin-base MAVEN version =24.10.0-beta1, =24.10.0-beta1, =24.10.0-beta1, =24.10.0-beta1, =24.10.0-beta1, =24.10.0-beta1, =24.10.0-beta1, =24.10.0-beta1, =24.10.0-beta1, =24.10.0-beta1, =24.10.0-beta1, =24.10.0-beta1, =24.10.3 Source cves: CVE-2026-7860 Source advisory:...

com.github.mcollovati:quarkus-hilla-commons-deployment (>=25.0.0-alpha1, <=25.0.1), com.github.mcollovati:quarkus-hilla-deployment (>=25.0.0-alpha1, <=25.0.1) +14 more potentially affected by CVE-2026-7860 via com.vaadin:flow-plugin-base (>=25.0.0-beta1, <=25.0.11)

com.vaadin:flow-plugin-base MAVEN version =25.0.0-beta1, =25.0.0-alpha1, =25.0.0-alpha1, =25.0.0-alpha1, =25.0.0-beta1, =25.0.0-beta1, =25.0.0-beta1, =25.0.0-beta1, =25.0.0-beta1, =25.0.0-beta1, =25.0.0-beta1, =25.0.0-beta1, =25.0.0-beta1, =25.0.0-beta1, =25.0.0-beta1, =3.0.0-beta1, =3.0.3 and mo...

com.github.mcollovati:quarkus-hilla-commons-deployment (>=25.0.0-rc1, <=25.1.0), com.github.mcollovati:quarkus-hilla-deployment (>=25.0.0-rc1, <=25.1.0) +15 more potentially affected by CVE-2026-7860 via com.vaadin:flow-plugin-base (>=25.0.0, <=25.1.4)

com.vaadin:flow-plugin-base MAVEN version =25.0.0, =25.0.0-rc1, =25.0.0-rc1, =25.0.0-rc1, =25.0.0, =25.0.0, =25.0.0, =25.0.0, =25.0.0, =25.0.0, =25.0.0, =25.0.0, =25.0.0, =25.0.0, =25.0.0, =25.1.4 and more Source cves: CVE-2026-7860 Source advisory: MEND:CVE-2026-7860...

com.github.mcollovati:quarkus-hilla-commons-deployment (>=24.7.0, <=24.9.6), com.github.mcollovati:quarkus-hilla-deployment (>=24.7.0, <=24.9.6) +18 more potentially affected by CVE-2026-7860 via com.vaadin:flow-plugin-base (>=24.0.0, <=24.10.3)

com.vaadin:flow-plugin-base MAVEN version =24.0.0, =24.7.0, =24.7.0, =24.7.0, =24.8.0, =24.4.0, =24.0.0, =24.4.0, =24.0.0, =24.0.0, =24.0.0, =24.4.21, =24.4.0, =24.4.0, =24.0.0, =24.0.0, =24.10.3 and more Source cves: CVE-2026-7860 Source advisory: MEND:CVE-2026-7860...

com.vaadin:com.vaadin.gradle.plugin (>=23.0.0, <=23.6.9), com.vaadin:flow-gradle-plugin (>=23.0.0, <=23.6.10) +12 more potentially affected by CVE-2026-7860 via com.vaadin:flow-plugin-base (>=23.0.0, <=23.6.10)

com.vaadin:flow-plugin-base MAVEN version =23.0.0, =23.0.0, =23.0.0, =23.0.0, =23.0.0, =23.0.0, =0.0.2-8-605ce6, =0.0.2-8-605ce6, =0.0.0-24-fcfa64, =0.0.0, =1.4.0-m2, =1.4.0-m2, =2.0.0-m1 - org.geckoprojects.vaadin:org.gecko.vaadin.generator 2.0.0 Source cves: CVE-2026-7860 Source advisory:...