com.github.mvysny.kaributesting:karibu-testing-v10 (>=1.1.5, <=1.1.6), com.holon-platform.artisan:holon-artisan-demo (>=1.0.2, <=1.0.9) +46 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (1.4.3)

com.vaadin:flow-server MAVEN version 1.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.github.mvysny.kaributesting:karibu-testing-v10 =1.1.5, =1.0.2, =1.0.2, =1.0.2, =1.0.2, =5.2.6, =5.2.6, =5.2.6,...

com.holon-platform.artisan:holon-artisan-demo (>=1.1.2, <=1.1.5), com.holon-platform.artisan:holon-artisan-vaadin-flow-app-layout (>=1.1.2, <=1.1.5) +28 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (1.4.6)

com.vaadin:flow-server MAVEN version 1.4.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.holon-platform.artisan:holon-artisan-demo =1.1.2, =1.1.2, =1.1.2, =1.1.2, =5.2.12, =5.2.12, =5.2.12, =5.2.12,...

com.github.mcollovati.vertx:vaadin-flow-sockjs (>=14.0.0, <=14.0.13), com.github.mcollovati.vertx:vertx-vaadin-flow (>=14.0.0, <=14.0.13) +81 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.0.11)

com.vaadin:flow-server MAVEN version 2.0.11 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.github.mcollovati.vertx:vaadin-flow-sockjs =14.0.0, =14.0.0, =14.0.13 - com.vaadin:flow 2.0.11 -...

com.github.mdre:bubbledialog (1.0.0), com.github.mdre:flowquickpopup (1.0.0) +23 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.0.15)

com.vaadin:flow-server MAVEN version 2.0.15 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.github.mdre:bubbledialog 1.0.0 - com.github.mdre:flowquickpopup 1.0.0 -...

com.alibaba.rsocket:alibaba-broker-server (1.0.0.m1), com.github.mdre:bubbledialog (>=1.0.2, <=1.0.4.1) +28 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.1.6)

com.vaadin:flow-server MAVEN version 2.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.alibaba.rsocket:alibaba-broker-server 1.0.0.m1 - com.github.mdre:bubbledialog =1.0.2, =1.0.2, =1.0.3, =0.0.3,...

com.alibaba.rsocket:alibaba-broker-server (1.0.0.m2), com.mantledillusion.essentials:vaadin-flow-filter-bar (>=1.0.0, <=1.2.0) +29 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.1.9)

com.vaadin:flow-server MAVEN version 2.1.9 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.alibaba.rsocket:alibaba-broker-server 1.0.0.m2 - com.mantledillusion.essentials:vaadin-flow-filter-bar =1.0.0,...

com.github.martinprause.cytoscape:cytoscape-addon (>=0.0.1, <=0.0.2), com.github.mcollovati.vertx:vaadin-flow-sockjs (>=14.2.1, <=14.2.2) +38 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.2.0)

com.vaadin:flow-server MAVEN version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.github.martinprause.cytoscape:cytoscape-addon =0.0.1, =14.2.1, =14.2.1, =14.2.2 -...

com.github.mdre:chartlib (>=0.3.1, <=0.5.2), com.github.mdre:stickynotes (>=0.5.1, <=0.5.2) +92 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.3.0)

com.vaadin:flow-server MAVEN version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.github.mdre:chartlib =0.3.1, =0.5.1, =2.0.0, =3.0.0 - com.vaadin:com.vaadin.gradle.plugin 0.8.0 - com.vaadin:fl...

com.alibaba.rsocket:alibaba-broker-server (1.0.0.m3), com.holon-platform.artisan:holon-artisan-demo (>=2.2.0, <=2.2.2) +34 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.3.1)

com.vaadin:flow-server MAVEN version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.alibaba.rsocket:alibaba-broker-server 1.0.0.m3 - com.holon-platform.artisan:holon-artisan-demo =2.2.0, =2.2.0,...

com.mantledillusion.essentials:vaadin-flow-filter-bar (2.0.0), com.mantledillusion.essentials:vaadin-flow-graph-pane (>=1.0.0, <=2.0.1) +84 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.4.3)

com.vaadin:flow-server MAVEN version 2.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.mantledillusion.essentials:vaadin-flow-filter-bar 2.0.0 - com.mantledillusion.essentials:vaadin-flow-graph-pane...

com.alibaba.rsocket:alibaba-broker-server (1.0.0), com.dorkbox.gradlevaadin:com.dorkbox.gradlevaadin.gradle.plugin (>=14.0, <=14.1.4) +46 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.4.6)

com.vaadin:flow-server MAVEN version 2.4.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.alibaba.rsocket:alibaba-broker-server 1.0.0 - com.dorkbox.gradlevaadin:com.dorkbox.gradlevaadin.gradle.plugin...

com.mantledillusion.vaadin:cotton (>=2.1.0.beta2, <=2.3.4), com.vaadin:flow (2.5.4) +90 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.5.4)

com.vaadin:flow-server MAVEN version 2.5.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.mantledillusion.vaadin:cotton =2.1.0.beta2, =2.3.4 - com.vaadin:flow 2.5.4 - com.vaadin:flow-client 2.5.4 -...

com.github.mcollovati.vertx:vaadin-flow-sockjs (>=14.4.0, <=14.5.0), com.github.mcollovati.vertx:vertx-vaadin-flow (>=14.4.0, <=14.5.0) +100 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.6.0)

com.vaadin:flow-server MAVEN version 2.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.github.mcollovati.vertx:vaadin-flow-sockjs =14.4.0, =14.4.0, =0.6.0-snapshot, =0.14.6.0 - com.vaadin:flow 2.6.0...

com.mantledillusion.metrics:trail-metrics-support-vaadin-14 (>=2.0.0.beta2, <=2.0.0), com.vaadin:flow (2.6.1) +91 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.6.1)

com.vaadin:flow-server MAVEN version 2.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.mantledillusion.metrics:trail-metrics-support-vaadin-14 =2.0.0.beta2, =2.0.0 - com.vaadin:flow 2.6.1 -...

com.oliveryasuna.vaadin:flow-commons-parent (1), com.oliveryasuna.vaadin:fluent-flow-parent (1) +109 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.6.7)

com.vaadin:flow-server MAVEN version 2.6.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.oliveryasuna.vaadin:flow-commons-parent 1 - com.oliveryasuna.vaadin:fluent-flow-parent 1 -...

com.dorkbox.gradlevaadin:com.dorkbox.gradlevaadin.gradle.plugin (>=14.7, <=14.7.2), com.vaadin:flow (2.7.1) +96 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.7.1)

com.vaadin:flow-server MAVEN version 2.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.dorkbox.gradlevaadin:com.dorkbox.gradlevaadin.gradle.plugin =14.7, =14.7.2 - com.vaadin:flow 2.7.1 -...

com.github.mcollovati.vertx:vaadin-flow-sockjs (14.6.0), com.github.mcollovati.vertx:vertx-vaadin-flow (14.6.0) +96 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.7.11)

com.vaadin:flow-server MAVEN version 2.7.11 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.github.mcollovati.vertx:vaadin-flow-sockjs 14.6.0 - com.github.mcollovati.vertx:vertx-vaadin-flow 14.6.0 -...

com.mantledillusion.metrics:trail-metrics-support-vaadin-14 (>=2.1.0, <=2.6.0), com.vaadin:flow (2.7.12) +92 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.7.12)

com.vaadin:flow-server MAVEN version 2.7.12 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.mantledillusion.metrics:trail-metrics-support-vaadin-14 =2.1.0, =2.6.0 - com.vaadin:flow 2.7.12 -...

com.dorkbox.gradlevaadin:com.dorkbox.gradlevaadin.gradle.plugin (14.8), com.dorkbox:gradlevaadin (14.8) +96 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.7.23)

com.vaadin:flow-server MAVEN version 2.7.23 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.dorkbox.gradlevaadin:com.dorkbox.gradlevaadin.gradle.plugin 14.8 - com.dorkbox:gradlevaadin 14.8 -...

com.dorkbox.gradlevaadin:com.dorkbox.gradlevaadin.gradle.plugin (>=14.9, <=14.9.4a), com.dorkbox:gradlevaadin (>=14.9, <=14.9.4a) +93 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.8.3)

com.vaadin:flow-server MAVEN version 2.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.dorkbox.gradlevaadin:com.dorkbox.gradlevaadin.gradle.plugin =14.9, =14.9, =14.9.4a - com.vaadin:flow 2.8.3 -...