com.github.mcollovati.vertx:vaadin-flow-sockjs (17.0.0), com.github.mcollovati.vertx:vertx-vaadin-flow (17.0.0) +18 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (4.0.1)

com.vaadin:flow-server MAVEN version 4.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.github.mcollovati.vertx:vaadin-flow-sockjs 17.0.0 - com.github.mcollovati.vertx:vertx-vaadin-flow 17.0.0 -...

com.flowingcode.vaadin.addons:twincolgrid (>=2.9.3, <=2.9.4), com.vaadin:flow (2.8.6) +92 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.8.6)

com.vaadin:flow-server MAVEN version 2.8.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.flowingcode.vaadin.addons:twincolgrid =2.9.3, =2.9.4 - com.vaadin:flow 2.8.6 - com.vaadin:flow-client 2.8.6 -...

com.alibaba.rsocket:alibaba-broker-server (>=1.1.3, <=1.1.4), com.github.mcollovati.vertx:vaadin-flow-sockjs (>=23.1.0, <=23.1.1) +258 more potentially affected by CVE-2023-25499 via com.vaadin:flow-server (>=23.0.0, <=23.3.10)

com.vaadin:flow-server MAVEN version =23.0.0, =1.1.3, =23.1.0, =23.1.0, =1.0.0-alpha1, =1.0.0-alpha1, =1.0.0-alpha1, =1.0.0-alpha1, =5.0.0, =23.0.0, =23.0.0, =23.0.0, =23.0.0, =23.0.0, =23.0.0, =23.3.10 and more Source cves: CVE-2023-25499 Source advisory: GHSA-5F9V-MV5G-JH5Q...

com.alibaba.rsocket:alibaba-broker-server (1.0.1), com.beirtipol:jfixtools-reporting (1.0-beta) +110 more potentially affected by unknown CVE via com.vaadin:flow-server (>=3.0.0, <=6.0.5)

com.vaadin:flow-server MAVEN version =3.0.0, =1.1.6, =15.0.0, =15.0.0, =0.17.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =6.0.5 and more Source cves: unknown CVE Source advisory: OSV:GHSA-C57F-4VP2-JQHM...

com.beirtipol:jfixtools-reporting (1.0-beta), com.beirtipol:jfixtools-ui-vaadin (1.0-beta) +107 more potentially affected by CVE-2021-31404 via com.vaadin:flow-server (>=3.0.0, <=5.0.2)

com.vaadin:flow-server MAVEN version =3.0.0, =1.1.6, =15.0.0, =15.0.0, =0.17.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =5.0.0, =5.0.2 and more Source cves: CVE-2021-31404 Source advisory: MEND:CVE-2021-31404...

com.vaadin:flow (>=3.0.0, <=3.0.5), com.vaadin:flow-client (>=3.0.0, <=3.0.5) +87 more potentially affected by CVE-2020-36319 via com.vaadin:flow-server (>=3.0.0, <=3.0.5)

com.vaadin:flow-server MAVEN version =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =15.0.0, =15.0.4 - com.vaadin:vaadin-accordion-flow 3.0.0 - com.vaadin:vaadin-accordion-flow-demo 3.0.0 and more Source cves: CVE-2020-36319 Source advisory: OSV:GHSA-RJWW-2X8V-M9V...

com.beirtipol:jfixtools-reporting (1.0-beta), com.beirtipol:jfixtools-ui-vaadin (1.0-beta) +101 more potentially affected by CVE-2020-36321 via com.vaadin:flow-server (>=3.0.0, <=4.0.8)

com.vaadin:flow-server MAVEN version =3.0.0, =1.1.6, =15.0.0, =15.0.0, =0.17.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =4.0.8 and more Source cves: CVE-2020-36321 Source advisory: GHSA-49R2-73M6-PP8F...

com.beirtipol:jfixtools-reporting (1.0-beta), com.beirtipol:jfixtools-ui-vaadin (1.0-beta) +107 more potentially affected by CVE-2021-31404 via com.vaadin:flow-server (>=3.0.0, <=5.0.2)

com.vaadin:flow-server MAVEN version =3.0.0, =1.1.6, =15.0.0, =15.0.0, =0.17.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =5.0.0, =5.0.2 and more Source cves: CVE-2021-31404 Source advisory: GHSA-XWG3-QRCG-W9X6...