Repository navigation
Security: vaadin/framework
Security Advisories
View information about security vulnerabilities from this repository's maintainers.
-
Session lock leak on an invalid UI id allows denial of service in Vaadin Framework 8GHSA-xfv2-cqh5-2wc4 published
Oct 21, 2026 by manoloHigh -
Possibility to bypass file upload validation on the server-sideGHSA-9gfh-4fwj-w3rj published
Sep 4, 2025 by alvarezguilleModerate -
Denial of service in DataCommunicator class in Vaadin 8GHSA-j23j-q57m-63v3 published
Oct 13, 2021 by fluorumlabsModerate -
Denial of service in DataCommunicator class in Vaadin 8GHSA-qcgx-crrx-38v5 published
Oct 13, 2021 by fluorumlabsModerate -
Regular expression Denial of Service (ReDoS) in EmailValidator class in V7 compatibility module in Vaadin 8GHSA-c332-w4jm-55wv published
Apr 30, 2021 by fluorumlabsHigh -
Regular expression Denial of Service (ReDoS) in EmailValidator class in V7 compatibility module in Vaadin 8GHSA-jfmf-w293-8xr8 published
Apr 30, 2021 by fluorumlabsHigh -
Timing side channel vulnerability in UIDL request handler in Vaadin 7 and 8GHSA-75xc-qvxh-27f8 published
Apr 16, 2021 by fluorumlabsModerate -
Regular expression denial of service (ReDoS) in EmailValidator class in Vaadin 7GHSA-42j4-733x-5vcf published
Apr 16, 2021 by fluorumlabsHigh -
Stored cross-site scripting in Grid component in Vaadin 7 and 8GHSA-q74r-4xw3-ppx9 published
Apr 16, 2021 by fluorumlabsModerate