Vaadin Framework
2 CVEs affecting Vaadin Framework. Latest disclosed: 2026-01-05. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-15022 | | 2026-01-05 | Action captions in Vaadin accept HTML by default but were not sanitized, potentially allowing Cross-site Scripting (XSS) if caption content is derived from use… | |
CVE-2025-9467 | | 2025-09-04 | When the Vaadin Upload's start listener is used to validate metadata about an incoming upload, it is possible to bypass the upload validation. Users of affe… |