com.github.mcollovati:quarkus-hilla (24.9.6), com.github.mcollovati:quarkus-hilla-commons (24.9.6) +170 more potentially affected by CVE-2026-110737 via com.vaadin:flow-server (>=24.10.0, <=24.10.14)

com.vaadin:flow-server MAVEN version =24.10.0, =3.4.0, =3.4.0, =3.4.0, =3.4.0, =3.4.0, =3.4.0, =3.4.0, =3.4.0, =3.4.0, =3.4.0, =3.4.0, =3.4.0, =3.4.1 and more Source cves: CVE-2026-110737 Source advisory: SNYK:JAVA-COMVAADIN-21755467...

com.github.mcollovati:quarkus-hilla (24.9.6), com.github.mcollovati:quarkus-hilla-commons (24.9.6) +170 more potentially affected by CVE-2026-110737 via com.vaadin:flow-server (>=24.10.0-beta1, <=24.10.14)

com.vaadin:flow-server MAVEN version =24.10.0-beta1, =3.4.0, =3.4.0, =3.4.0, =3.4.0, =3.4.0, =3.4.0, =3.4.0, =3.4.0, =3.4.0, =3.4.0, =3.4.0, =3.4.0, =3.4.1 and more Source cves: CVE-2026-110737 Source advisory: MEND:CVE-2026-110737...

com.github.mcollovati:hilla-jandex (25.2.1), com.github.mcollovati:hilla-react-jandex (25.2.1) +183 more potentially affected by CVE-2026-110737 via com.vaadin:flow-server (>=25.2.1, <=25.2.12)

com.vaadin:flow-server MAVEN version =25.2.1, =25.2.0-beta1, =25.2.0-beta1, =25.2.0-beta1, =25.2.0-beta1, =25.2.0-beta1, =25.2.0-beta1, =25.2.1, =25.2.1, =25.2.11 - com.vaadin:browserless-test-junit6 1.1.2 - com.vaadin:browserless-test-junit6-cdi-tests 1.1.2 - com.vaadin:browserless-test-quarkus...

com.appjars:appjars-ai-support-flow (1.0.0), com.appjars:appjars-flow-utils (1.0.0) +272 more potentially affected by CVE-2026-110737 via com.vaadin:flow-server (>=24.8.0, <=24.9.28)

com.vaadin:flow-server MAVEN version =24.8.0, =1.0.0, =0.1.0, =24.8.0, =24.8.0, =24.8.0, =24.8.4, =24.8.4, =24.8.0, =24.8.0, =24.8.4, =24.8.0, =24.9.6 - com.holon-platform.artisan:holon-artisan-demo 3.0.3 and more Source cves: CVE-2026-110737 Source advisory: MEND:CVE-2026-110737...

com.alibaba.rsocket:alibaba-broker-server (>=1.0.0.m1, <=1.0.0), com.dorkbox.gradlevaadin:com.dorkbox.gradlevaadin.gradle.plugin (>=0.1, <=14.10.1) +283 more potentially affected by CVE-2026-110737 via com.vaadin:flow-server (>=2.0.0, <=2.13.7)

com.vaadin:flow-server MAVEN version =2.0.0, =1.0.0.m1, =0.1, =14.8, =3.7.0, =2.9.3, =1.3.0, =1.0, =0.0.1, =14.0.0, =14.0.0, =1.0.0, =0.3.1, =1.0.0, =1.0.0, =1.0.5.4 and more Source cves: CVE-2026-110737 Source advisory: MEND:CVE-2026-110737...

PraisonAI information leakage vulnerability

PraisonAI is a low-code multi-agent collaboration framework developed by Mervin Praison. Versions of PraisonAI prior to 4.5.115 contained an information leakage vulnerability. This vulnerability stemmed from a lack of authentication in the event flow server, which could lead to information leaks...

com.holon-platform.artisan:holon-artisan-demo (>=1.1.2, <=1.1.5), com.holon-platform.artisan:holon-artisan-vaadin-flow-app-layout (>=1.1.2, <=1.1.5) +28 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (1.4.6)

com.vaadin:flow-server MAVEN version 1.4.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.holon-platform.artisan:holon-artisan-demo =1.1.2, =1.1.2, =1.1.2, =1.1.2, =5.2.12, =5.2.12, =5.2.12, =5.2.12,...

com.mantledillusion.essentials:vaadin-flow-filter-bar (2.0.0), com.mantledillusion.essentials:vaadin-flow-graph-pane (>=1.0.0, <=2.0.1) +84 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.4.3)

com.vaadin:flow-server MAVEN version 2.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.mantledillusion.essentials:vaadin-flow-filter-bar 2.0.0 - com.mantledillusion.essentials:vaadin-flow-graph-pane...

com.flowingcode.vaadin.addons:error-window-vaadin (>=3.7.0, <=4.0.0), com.vaadin:flow (2.8.7) +92 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.8.7)

com.vaadin:flow-server MAVEN version 2.8.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.flowingcode.vaadin.addons:error-window-vaadin =3.7.0, =4.0.0 - com.vaadin:flow 2.8.7 - com.vaadin:flow-client...

com.dorkbox.gradlevaadin:com.dorkbox.gradlevaadin.gradle.plugin (>=14.7, <=14.7.2), com.vaadin:flow (2.7.1) +96 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.7.1)

com.vaadin:flow-server MAVEN version 2.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.dorkbox.gradlevaadin:com.dorkbox.gradlevaadin.gradle.plugin =14.7, =14.7.2 - com.vaadin:flow 2.7.1 -...

com.github.mcollovati.vertx:vaadin-flow-sockjs (17.0.0), com.github.mcollovati.vertx:vertx-vaadin-flow (17.0.0) +18 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (4.0.1)

com.vaadin:flow-server MAVEN version 4.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.github.mcollovati.vertx:vaadin-flow-sockjs 17.0.0 - com.github.mcollovati.vertx:vertx-vaadin-flow 17.0.0 -...

com.flowingcode.vaadin.test:testbench-rpc (>=1.4.0, <=1.5.0), com.vaadin:appsec-kit-starter (2.0.1) +96 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.10.5)

com.vaadin:flow-server MAVEN version 2.10.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.flowingcode.vaadin.test:testbench-rpc =1.4.0, =14.11.11, =14.11.13 and more Source cves: CVE-2026-2742 Source...

com.github.mcollovati.vertx:vaadin-flow-sockjs (>=18.0.0, <=18.1.2), com.github.mcollovati.vertx:vertx-vaadin-flow (>=18.0.0, <=18.1.2) +95 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (5.0.2)

com.vaadin:flow-server MAVEN version 5.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.github.mcollovati.vertx:vaadin-flow-sockjs =18.0.0, =18.0.0, =18.0.2, =18.0.2, =18.0.5 and more Source cves:...

com.alibaba.rsocket:alibaba-broker-server (1.0.1), com.vaadin:flow (6.0.3) +91 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (6.0.3)

com.vaadin:flow-server MAVEN version 6.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.alibaba.rsocket:alibaba-broker-server 1.0.1 - com.vaadin:flow 6.0.3 - com.vaadin:flow-client 6.0.3 -...

com.vaadin:com.vaadin.gradle.plugin (22.2.2), com.vaadin:flow (9.2.3) +100 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (9.2.3)

com.vaadin:flow-server MAVEN version 9.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.vaadin:com.vaadin.gradle.plugin 22.2.2 - com.vaadin:flow 9.2.3 - com.vaadin:flow-client 9.2.3 -...

com.github.mvysny.kaributesting:karibu-testing-v10 (>=1.1.5, <=1.1.6), com.holon-platform.artisan:holon-artisan-demo (>=1.0.2, <=1.0.9) +46 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (1.4.3)

com.vaadin:flow-server MAVEN version 1.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.github.mvysny.kaributesting:karibu-testing-v10 =1.1.5, =1.0.2, =1.0.2, =1.0.2, =1.0.2, =5.2.6, =5.2.6, =5.2.6,...

com.github.mcollovati.vertx:vaadin-flow-sockjs (>=14.0.0, <=14.0.13), com.github.mcollovati.vertx:vertx-vaadin-flow (>=14.0.0, <=14.0.13) +81 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.0.11)

com.vaadin:flow-server MAVEN version 2.0.11 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.github.mcollovati.vertx:vaadin-flow-sockjs =14.0.0, =14.0.0, =14.0.13 - com.vaadin:flow 2.0.11 -...

com.github.martinprause.cytoscape:cytoscape-addon (>=0.0.1, <=0.0.2), com.github.mcollovati.vertx:vaadin-flow-sockjs (>=14.2.1, <=14.2.2) +38 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.2.0)

com.vaadin:flow-server MAVEN version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.github.martinprause.cytoscape:cytoscape-addon =0.0.1, =14.2.1, =14.2.1, =14.2.2 -...

com.alibaba.rsocket:alibaba-broker-server (1.0.0.m3), com.holon-platform.artisan:holon-artisan-demo (>=2.2.0, <=2.2.2) +34 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.3.1)

com.vaadin:flow-server MAVEN version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.alibaba.rsocket:alibaba-broker-server 1.0.0.m3 - com.holon-platform.artisan:holon-artisan-demo =2.2.0, =2.2.0,...

com.github.mcollovati.vertx:vaadin-flow-sockjs (>=14.1.2, <=14.1.3), com.github.mcollovati.vertx:vertx-vaadin-flow (>=14.1.2, <=14.1.3) +21 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.1.7)

com.vaadin:flow-server MAVEN version 2.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.github.mcollovati.vertx:vaadin-flow-sockjs =14.1.2, =14.1.2, =14.1.22, =14.1.24 and more Source cves:...