PraisonAI information leakage vulnerability

PraisonAI is a low-code multi-agent collaboration framework developed by Mervin Praison. Versions of PraisonAI prior to 4.5.115 contained an information leakage vulnerability. This vulnerability stemmed from a lack of authentication in the event flow server, which could lead to information leaks...

com.github.mdre:chartlib (>=0.3.1, <=0.5.2), com.github.mdre:stickynotes (>=0.5.1, <=0.5.2) +92 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.3.0)

com.vaadin:flow-server MAVEN version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.github.mdre:chartlib =0.3.1, =0.5.1, =2.0.0, =3.0.0 - com.vaadin:com.vaadin.gradle.plugin 0.8.0 - com.vaadin:fl...

com.github.mcollovati.vertx:vaadin-flow-sockjs (>=18.0.0, <=18.1.2), com.github.mcollovati.vertx:vertx-vaadin-flow (>=18.0.0, <=18.1.2) +95 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (5.0.2)

com.vaadin:flow-server MAVEN version 5.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.github.mcollovati.vertx:vaadin-flow-sockjs =18.0.0, =18.0.0, =18.0.2, =18.0.2, =18.0.5 and more Source cves:...

com.flowingcode.vaadin.test:testbench-rpc (>=1.4.0, <=1.5.0), com.vaadin:appsec-kit-starter (2.0.1) +96 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.10.5)

com.vaadin:flow-server MAVEN version 2.10.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.flowingcode.vaadin.test:testbench-rpc =1.4.0, =14.11.11, =14.11.13 and more Source cves: CVE-2026-2742 Source...

com.vaadin:com.vaadin.gradle.plugin (22.2.2), com.vaadin:flow (9.2.3) +100 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (9.2.3)

com.vaadin:flow-server MAVEN version 9.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.vaadin:com.vaadin.gradle.plugin 22.2.2 - com.vaadin:flow 9.2.3 - com.vaadin:flow-client 9.2.3 -...

com.dorkbox.gradlevaadin:com.dorkbox.gradlevaadin.gradle.plugin (>=14.9.4a1, <=14.10.1), com.dorkbox:gradlevaadin (>=14.9.4a1, <=14.10.1) +93 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.9.2)

com.vaadin:flow-server MAVEN version 2.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.dorkbox.gradlevaadin:com.dorkbox.gradlevaadin.gradle.plugin =14.9.4a1, =14.9.4a1, =14.10.1 - com.vaadin:flow...

com.github.mcollovati.vertx:vaadin-flow-sockjs (17.0.0), com.github.mcollovati.vertx:vertx-vaadin-flow (17.0.0) +18 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (4.0.1)

com.vaadin:flow-server MAVEN version 4.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.github.mcollovati.vertx:vaadin-flow-sockjs 17.0.0 - com.github.mcollovati.vertx:vertx-vaadin-flow 17.0.0 -...

com.github.mcollovati.vertx:vaadin-flow-sockjs (14.6.0), com.github.mcollovati.vertx:vertx-vaadin-flow (14.6.0) +96 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.7.11)

com.vaadin:flow-server MAVEN version 2.7.11 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.github.mcollovati.vertx:vaadin-flow-sockjs 14.6.0 - com.github.mcollovati.vertx:vertx-vaadin-flow 14.6.0 -...

com.dorkbox.gradlevaadin:com.dorkbox.gradlevaadin.gradle.plugin (>=14.7, <=14.7.2), com.vaadin:flow (2.7.1) +96 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.7.1)

com.vaadin:flow-server MAVEN version 2.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.dorkbox.gradlevaadin:com.dorkbox.gradlevaadin.gradle.plugin =14.7, =14.7.2 - com.vaadin:flow 2.7.1 -...

com.vaadin:com.vaadin.gradle.plugin (22.1.6), com.vaadin:flow (9.1.10) +103 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (9.1.10)

com.vaadin:flow-server MAVEN version 9.1.10 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.vaadin:com.vaadin.gradle.plugin 22.1.6 - com.vaadin:flow 9.1.10 - com.vaadin:flow-client 9.1.10 -...

com.alibaba.rsocket:alibaba-broker-server (>=1.1.3, <=1.1.4), com.github.mcollovati.vertx:vaadin-flow-sockjs (>=23.1.0, <=23.4.1) +276 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (>=23.0.0, <=23.6.6)

com.vaadin:flow-server MAVEN version =23.0.0, =1.1.3, =23.1.0, =23.1.0, =23.4.0-alpha1, =23.4.0-alpha1, =1.0.0-alpha1, =1.0.0-alpha1, =1.0.0-alpha1, =1.0.0-alpha1, =2.3.0, =2.3.0, =2.3.0, =2.3.0, =5.7.0, =5.7.0, =5.7.1 and more Source cves: CVE-2026-2742 Source advisory:...

com.vaadin:appsec-kit-starter (2.0.0), com.vaadin:flow (2.9.10) +93 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.9.10)

com.vaadin:flow-server MAVEN version 2.9.10 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.vaadin:appsec-kit-starter 2.0.0 - com.vaadin:flow 2.9.10 - com.vaadin:flow-client 2.9.10 -...

com.github.fluorumlabs:code-quality-test (1.0.0), com.vaadin:com.vaadin.gradle.plugin (0.17.0.0) +90 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (4.0.0)

com.vaadin:flow-server MAVEN version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.github.fluorumlabs:code-quality-test 1.0.0 - com.vaadin:com.vaadin.gradle.plugin 0.17.0.0 - com.vaadin:flow 4.0...

com.vaadin:com.vaadin.gradle.plugin (21.0.2), com.vaadin:flow (8.0.2) +101 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (8.0.2)

com.vaadin:flow-server MAVEN version 8.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.vaadin:com.vaadin.gradle.plugin 21.0.2 - com.vaadin:flow 8.0.2 - com.vaadin:flow-client 8.0.2 -...

com.github.mvysny.kaributesting:karibu-testing-v10 (>=1.1.5, <=1.1.6), com.holon-platform.artisan:holon-artisan-demo (>=1.0.2, <=1.0.9) +46 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (1.4.3)

com.vaadin:flow-server MAVEN version 1.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.github.mvysny.kaributesting:karibu-testing-v10 =1.1.5, =1.0.2, =1.0.2, =1.0.2, =1.0.2, =5.2.6, =5.2.6, =5.2.6,...

com.github.mcollovati.vertx:vaadin-flow-sockjs (>=14.0.0, <=14.0.13), com.github.mcollovati.vertx:vertx-vaadin-flow (>=14.0.0, <=14.0.13) +81 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.0.11)

com.vaadin:flow-server MAVEN version 2.0.11 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.github.mcollovati.vertx:vaadin-flow-sockjs =14.0.0, =14.0.0, =14.0.13 - com.vaadin:flow 2.0.11 -...

com.github.martinprause.cytoscape:cytoscape-addon (>=0.0.1, <=0.0.2), com.github.mcollovati.vertx:vaadin-flow-sockjs (>=14.2.1, <=14.2.2) +38 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.2.0)

com.vaadin:flow-server MAVEN version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.github.martinprause.cytoscape:cytoscape-addon =0.0.1, =14.2.1, =14.2.1, =14.2.2 -...

com.alibaba.rsocket:alibaba-broker-server (1.0.0.m3), com.holon-platform.artisan:holon-artisan-demo (>=2.2.0, <=2.2.2) +34 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.3.1)

com.vaadin:flow-server MAVEN version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.alibaba.rsocket:alibaba-broker-server 1.0.0.m3 - com.holon-platform.artisan:holon-artisan-demo =2.2.0, =2.2.0,...

com.mantledillusion.essentials:vaadin-flow-filter-bar (2.0.0), com.mantledillusion.essentials:vaadin-flow-graph-pane (>=1.0.0, <=2.0.1) +84 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.4.3)

com.vaadin:flow-server MAVEN version 2.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.mantledillusion.essentials:vaadin-flow-filter-bar 2.0.0 - com.mantledillusion.essentials:vaadin-flow-graph-pane...

com.mantledillusion.metrics:trail-metrics-support-vaadin-14 (>=2.1.0, <=2.6.0), com.vaadin:flow (2.7.12) +92 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.7.12)

com.vaadin:flow-server MAVEN version 2.7.12 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.mantledillusion.metrics:trail-metrics-support-vaadin-14 =2.1.0, =2.6.0 - com.vaadin:flow 2.7.12 -...