com.vaadin:flow-server

Licenses: Apache-2.0

Direct Vulnerabilities

Known vulnerabilities in the com.vaadin:flow-server package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • L
Permissive Cross-domain Policy with Untrusted Domains

[2.13.0,2.13.8)[23.6.0,23.6.16)[24.4.0,24.4.19)[24.5.0,24.7.17)[24.8.0,24.9.29)[24.10.0,24.10.15)[25.0.0,25.1.19)[25.2.0,25.2.13)[25.3.0,25.3.4)
  • L
Directory Traversal

[2.0.0,2.13.1)[3.0.0,23.6.8)[24.0.0,24.9.10)
  • M
Access Control Bypass

[23.0.0,23.6.7)[24.0.0,24.9.8)[25.0.0-beta1,25.0.2)
  • L
Debug Messages Revealing Unnecessary Information

[1.0.0,1.0.21)[1.1.0,2.9.3)[3.0.0,9.1.2)[23.0.0,23.3.13)[24.0.0,24.0.9)[24.1.0.alpha1,24.1.0)
  • M
Information Exposure

[1.0.0,1.0.20)[1.1.0,2.8.10)[3.0.0,9.1.1)[23.0.0,23.3.11)[24.0.0,24.0.8)[24.1.0.alpha1,24.1.0)
  • L
Cross-site Scripting (XSS)

[2.0.0,2.6.2)[3.0.0,6.0.10)
  • M
Denial of Service (DoS)

[1.0.0,1.0.15)[1.1.0,2.6.2)[3.0.0,6.0.10)
  • M
Insecure Permissions

[3.0.0,6.0.6)[2.0.9,2.5.3)
  • M
Access Restriction Bypass

[5.0.0,6.0.5)
  • L
Information Exposure

[3.0.0,3.0.6)
  • H
Information Exposure

[6.0.0,6.0.2)[1.2.0,2.4.8)
  • M
Cross-site Scripting (XSS)

[1.1.0,1.4.3)[1.0.0,1.0.11)
  • L
Improper Input Validation

[1.0.0,1.0.6)
  • M
Timing Attack

[3.0.0,5.0.4)
  • M
Directory Traversal

[3.0.0,5.0.0)[2.0.0,2.4.2)
  • M
Timing Attack

[,1.0.14)[1.1.0,2.4.7)[3.0.0,5.0.3)

Package versions

704 VERSIONS IN TOTAL See all versions
versionpublisheddirect vulnerabilities
25.3.526 Oct, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
25.3.413 Oct, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
25.3.38 Oct, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 1
    L
25.3.22 Oct, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 1
    L
25.3.12 Oct, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 1
    L
25.3.022 Sep, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 1
    L
25.3.0-rc216 Sep, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
25.3.0-rc115 Sep, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
25.3.0-beta310 Sep, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
25.3.0-beta27 Sep, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L