vaadin flow vulnerabilities

4 published CVEs name vaadin flow among the affected products.

All 4 in the list Atom feed of new CVEs

Published CVEs: 4
Last 12 months: 4
Critical: 0
Known exploited: 0

Critical 0High 0Medium 1Low 3Not scored 0

Newest CVEs

CVE-2026-110737
Push Endpoint Returns Permissive CORS Headers
vaadin · vaadin
Low2.3
CVE-2026-7860
Possible information disclosure of environment variables in Vaadin Build Plugins via Failed Frontend Build
vaadin · flow
Low1.6
CVE-2026-2742
Unauthorized session creation via reserved framework path access
vaadin · vaadin
Medium5.3
CVE-2026-2741
Zip Slip Path Traversal on Node Unpack
vaadin · vaadin
Low2.3

Most common weaknesses