pkg:Maven/com.vaadin:vaadin-server
6 total CVEsHIGH1MEDIUM3
✅ Check your installed version
All known vulnerabilities
HIGH7.5CVE-2020-36320Regular expression denial of service (ReDoS) in EmailValidator class in Vaadin 7 >= 7.0.0.beta1, < 7.7.22
MEDIUM5.4CVE-2019-25028Stored cross-site scripting in Grid component in Vaadin 7 and 8 >= 7.4.0, < 7.7.20
MEDIUM4.3CVE-2021-33609Denial of service in DataCommunicator class in Vaadin 8 >= 8.0.6, < 8.14.1
MEDIUM4.0Timing side channel vulnerability in UIDL request handler in Vaadin 7 and 8
>= 7.0.0, < 7.7.24
—Vaadin vulnerable to Cross-site Scripting
>= 7.0.0, < 7.7.50
—Vaadin Framework possible file bypass via upload validation on the server-side
>= 7.0.0, < 7.7.48