@vaadin/react-components-pro (>=25.0.0, <=25.2.13), @vaadin/vaadin (>=25.0.0, <=25.3.0-alpha3) potentially affected by CVE-2026-107588 via @vaadin/charts (>=25.0.0, <=25.2.13)

@vaadin/charts NPM version =25.0.0, =25.0.0, =25.0.0, =25.3.0-alpha3 Source cves: CVE-2026-107588 Source advisory: SNYK:JS-VAADINCHARTS-21691580...