Security: vaadin/platform
Security Advisories
View information about security vulnerabilities from this repository's maintainers.
-
Possibility to bypass file upload validation on the server-sideGHSA-c7v7-rqfm-f44j published
Sep 4, 2025 by alvarezguilleModerate -
Possible information disclosure of class and method names in RPC responseGHSA-ch48-9r3q-pv7x published
Jun 22, 2023 by alvarezguilleLow -
Possible information disclosure in non visible components.GHSA-5f9v-mv5g-jh5q published
Jun 22, 2023 by alvarezguilleModerate -
Possible information disclosure inside TreeGrid component with default data providerGHSA-qfr3-323w-qv27 published
May 24, 2022 by manoloModerate -
Reflected cross-site scripting in vaadin-menu-bar webjar resources in Vaadin 14GHSA-93c4-vf86-3rj7 published
Nov 2, 2021 by alvarezguilleModerate -
Unauthorized property update in CheckboxGroup component in Vaadin 12-14 and 15-20GHSA-hw7r-qrhp-5pff published
Aug 25, 2021 by fluorumlabsModerate -
Reflected cross-site scripting in development mode handler in Vaadin 14, 15-19GHSA-c99r-67x4-whj6 published
Jun 24, 2021 by fluorumlabsLow -
Possible route enumeration in production mode via RouteNotFoundError view in Vaadin 10, 11-14, and 15-19GHSA-qrg9-f472-qwfm published
Jun 24, 2021 by fluorumlabsModerate -
Insecure temporary directory usage in frontend build functionality of Vaadin 14 and 15-19GHSA-p826-8vhq-h439 published
May 4, 2021 by fluorumlabsModerate -
Server session is not invalidated when logout() helper method of Authentication module is used in Vaadin 18-19GHSA-mr8h-j9cv-4m8h published
Apr 20, 2021 by fluorumlabsModerate