Information Disclosure

Vaadin-grid-flow is vulnerable to information disclosure. The vulnerability exists in treegrid component due to the use of a numeric incremental id as a key for grid items on client side which allows an attacker to get access to sensitive information...