com.vaadin:vaadin-bom vulnerabilities (Maven)
18 vulnerabilities.
com.vaadin:vaadin-bomMavenReflected cross-site scripting in vaadin-menu-bar webjar resources in Vaadin 146.1 Mediumcom.vaadin:vaadin-bomMavenRegular expression Denial of Service (ReDoS) in EmailValidator class in V7 compatibility module in Vaadin 87.5 Highcom.vaadin:vaadin-bomMavenUnauthorized property update in CheckboxGroup component in Vaadin 12-14 and 15-204.3 Mediumcom.vaadin:vaadin-bomMavenPossible route enumeration in production mode via RouteNotFoundError view in Vaadin 10, 11-14, and 15-195.3 Mediumcom.vaadin:vaadin-bomMavenReflected cross-site scripting in development mode handler in Vaadin 14, 15-192.5 Lowcom.vaadin:vaadin-bomMavenInsecure temporary directory usage in frontend build functionality of Vaadin 14 and 15-196.3 Mediumcom.vaadin:vaadin-bomMavenServer session is not invalidated when logout() helper method of Authentication module is used in Vaadin 18-196.3 Mediumcom.vaadin:vaadin-bomMavenTiming side channel vulnerability in UIDL request handler in Vaadin 7 and 84.0 Mediumcom.vaadin:vaadin-bomMavenStored cross-site scripting in Grid component in Vaadin 7 and 85.4 Mediumcom.vaadin:vaadin-bomMavenRegular expression Denial of Service (ReDoS) in EmailValidator class in Vaadin 77.5 Highcom.vaadin:vaadin-bomMavenUnauthorized client-side property update in UIDL request handler in Vaadin 10 and 112.6 Lowcom.vaadin:vaadin-bomMavenReflected cross-site scripting in default RouteNotFoundError view in Vaadin 10 and 11-136.1 Mediumcom.vaadin:vaadin-bomMavenPotential sensitive data exposure in applications using Vaadin 153.1 Lowcom.vaadin:vaadin-bomMavenDirectory traversal in development mode handler in Vaadin 14 and 15-175.9 Mediumcom.vaadin:vaadin-bomMavenTiming side channel vulnerability in UIDL request handler in Vaadin 10, 11-14, and 15-184.0 Mediumcom.vaadin:vaadin-bomMavenRegular expression denial of service (ReDoS) in EmailField component in Vaadin 14 and 15-177.5 Highcom.vaadin:vaadin-bomMavenTiming side channel vulnerability in endpoint request handler in Vaadin 15-194.0 Mediumcom.vaadin:vaadin-bomMavenServer classes and resources exposure in OSGi applications using Vaadin 12-14 and 198.6 High