vaadin/flow Security Advisories | GitStock

low2026-05-19

Vaadin Build Plugins is Affected by a Possible Information Disclosure Vulnerability

GHSA-j8mx-j73w-9mxw · CVE-2026-7860

low2026-03-10

Vaadin: Specially crafted ZIP archives can escape the intended extraction directory

GHSA-8jrh-7jg8-fvmv · CVE-2026-2741

medium2026-03-10

Vaadin Vulnerable to Authentication Bypass When Accessing the /VAADIN Endpoint Without a Trailing Slash

GHSA-rjgh-wgc7-m37j · CVE-2026-2742