com.alibaba.rsocket:alibaba-broker-server (1.1.3), com.vaadin.componentfactory:tooltip (2.0.1) +29 more potentially affected by CVE-2022-29567 via com.vaadin:vaadin-grid-flow (>=23.0.0, <=23.0.8)

com.vaadin:vaadin-grid-flow MAVEN version =23.0.0, =23.0.0, =23.0.0, =23.0.0, =23.0.0, =23.0.0, =23.0.0, =23.0.0, =23.0.0, =23.0.0, =23.0.0, =23.0.0, =23.0.0, =23.0.8 - com.xdev-software:vaadin-date-range-picker 3.0.0 and more Source cves: CVE-2022-29567 Source advisory: OSV:GHSA-QFR3-323W-QV27...

com.holon-platform.artisan:holon-artisan-demo (>=2.2.4, <=2.2.6), com.holon-platform.artisan:holon-artisan-vaadin-flow-app-layout (>=2.2.4, <=2.2.6) +88 more potentially affected by CVE-2022-29567 via com.vaadin:vaadin-grid-flow (>=14.8.5, <=14.8.9)

com.vaadin:vaadin-grid-flow MAVEN version =14.8.5, =2.2.4, =2.2.4, =2.2.4, =2.2.4, =14.8.5, =14.8.5, =14.8.5, =14.8.9 and more Source cves: CVE-2022-29567 Source advisory: OSV:GHSA-QFR3-323W-QV27...

com.alibaba.rsocket:alibaba-broker-server (1.1.3), com.vaadin.componentfactory:tooltip (2.0.1) +29 more potentially affected by CVE-2022-29567 via com.vaadin:vaadin-grid-flow (>=23.0.0, <=23.0.8)

com.vaadin:vaadin-grid-flow MAVEN version =23.0.0, =23.0.0, =23.0.0, =23.0.0, =23.0.0, =23.0.0, =23.0.0, =23.0.0, =23.0.0, =23.0.0, =23.0.0, =23.0.0, =23.0.0, =23.0.8 - com.xdev-software:vaadin-date-range-picker 3.0.0 and more Source cves: CVE-2022-29567 Source advisory: GHSA-QFR3-323W-QV27...

com.holon-platform.artisan:holon-artisan-demo (>=2.2.4, <=2.2.6), com.holon-platform.artisan:holon-artisan-vaadin-flow-app-layout (>=2.2.4, <=2.2.6) +88 more potentially affected by CVE-2022-29567 via com.vaadin:vaadin-grid-flow (>=14.8.5, <=14.8.9)

com.vaadin:vaadin-grid-flow MAVEN version =14.8.5, =2.2.4, =2.2.4, =2.2.4, =2.2.4, =14.8.5, =14.8.5, =14.8.5, =14.8.9 and more Source cves: CVE-2022-29567 Source advisory: GHSA-QFR3-323W-QV27...

com.vaadin:vaadin (>=22.0.6, <=22.0.14), com.vaadin:vaadin-core (>=22.0.6, <=22.0.14) +9 more potentially affected by CVE-2022-29567 via com.vaadin:vaadin-grid-flow (>=22.0.6, <=22.0.14)

com.vaadin:vaadin-grid-flow MAVEN version =22.0.6, =22.0.6, =22.0.6, =22.0.6, =22.0.6, =22.0.6, =22.0.6, =22.0.6, =22.0.6, =22.0.6, =22.0.6, =22.0.6, =22.0.14 Source cves: CVE-2022-29567 Source advisory: OSV:GHSA-QFR3-323W-QV27...

com.vaadin:vaadin (>=22.0.6, <=22.0.14), com.vaadin:vaadin-core (>=22.0.6, <=22.0.14) +9 more potentially affected by CVE-2022-29567 via com.vaadin:vaadin-grid-flow (>=22.0.6, <=22.0.14)

com.vaadin:vaadin-grid-flow MAVEN version =22.0.6, =22.0.6, =22.0.6, =22.0.6, =22.0.6, =22.0.6, =22.0.6, =22.0.6, =22.0.6, =22.0.6, =22.0.6, =22.0.6, =22.0.14 Source cves: CVE-2022-29567 Source advisory: GHSA-QFR3-323W-QV27...

Information Disclosure

Vaadin-grid-flow is vulnerable to information disclosure. The vulnerability exists in treegrid component due to the use of a numeric incremental id as a key for grid items on client side which allows an attacker to get access to sensitive information...

com.holon-platform.artisan:holon-artisan-demo (>=2.2.4, <=2.2.6), com.holon-platform.artisan:holon-artisan-vaadin-flow-app-layout (>=2.2.4, <=2.2.6) +88 more potentially affected by CVE-2022-29567 via com.vaadin:vaadin-grid-flow (>=14.8.5, <=14.8.9)

com.vaadin:vaadin-grid-flow MAVEN version =14.8.5, =2.2.4, =2.2.4, =2.2.4, =2.2.4, =14.8.5, =14.8.5, =14.8.5, =14.8.9 and more Source cves: CVE-2022-29567 Source advisory: MEND:CVE-2022-29567...

com.vaadin:vaadin (>=22.0.6, <=22.0.14), com.vaadin:vaadin-core (>=22.0.6, <=22.0.14) +9 more potentially affected by CVE-2022-29567 via com.vaadin:vaadin-grid-flow (>=22.0.6, <=22.0.14)

com.vaadin:vaadin-grid-flow MAVEN version =22.0.6, =22.0.6, =22.0.6, =22.0.6, =22.0.6, =22.0.6, =22.0.6, =22.0.6, =22.0.6, =22.0.6, =22.0.6, =22.0.6, =22.0.14 Source cves: CVE-2022-29567 Source advisory: MEND:CVE-2022-29567...

com.alibaba.rsocket:alibaba-broker-server (1.1.3), com.vaadin.componentfactory:tooltip (2.0.1) +29 more potentially affected by CVE-2022-29567 via com.vaadin:vaadin-grid-flow (>=23.0.0, <=23.0.8)

com.vaadin:vaadin-grid-flow MAVEN version =23.0.0, =23.0.0, =23.0.0, =23.0.0, =23.0.0, =23.0.0, =23.0.0, =23.0.0, =23.0.0, =23.0.0, =23.0.0, =23.0.0, =23.0.0, =23.0.8 - com.xdev-software:vaadin-date-range-picker 3.0.0 and more Source cves: CVE-2022-29567 Source advisory: MEND:CVE-2022-29567...