vaadin/flow-components Security Advisories | GitStock

medium2026-01-05

Vaadin vulnerable to Cross-site Scripting

GHSA-7wwv-79xw-rvvg · CVE-2025-15022

medium2025-09-04

Vaadin Flow Components possible file bypass via upload validation on the server-side

GHSA-94g8-xv23-7656

medium2021-08-30

Unauthorized property update in CheckboxGroup component in Vaadin 12-14 and 15-20

GHSA-qcc4-3rxf-gf4m · CVE-2021-33605

high2021-04-19

Regular expression denial of service (ReDoS) in EmailField component in Vaadin 14 and 15-17

GHSA-crh4-294p-vcfq