Vaadin @vaadin/component-base vulnerabilities

• vaadin @vaadin/charts, @vaadin/component-base, vaadin +2 more +4 more Prototype Pollution in Vaadin Charts and Component Base via Unfiltered Deep Merge CVE-2026-91860 6.3 MediumSeptember 30, 2026