vaadin framework vulnerabilities

4 published CVEs name vaadin framework among the affected products.

All 4 in the list Atom feed of new CVEs

Published CVEs: 4
Last 12 months: 3
Critical: 0
Known exploited: 0

Critical 0High 1Medium 2Low 1Not scored 0

CVEs per yearBy the year they were published

20251
20263

Newest CVEs

CVE-2026-110737
Push Endpoint Returns Permissive CORS Headers
vaadin · vaadin
Low2.3
CVE-2026-110803
Session Lock Leak on an Invalid UI Id Allows Denial of Service in Vaadin Framework 8
vaadin · framework
High8.7
CVE-2025-15022
Cross-site scripting in Action caption
vaadin · vaadin
Medium4.8
CVE-2025-9467
Possibility to bypass file upload validation on the server-side
vaadin · vaadin
Medium5.3

Most common weaknesses