com.vaadin:vaadin@6.4.4 vulnerabilities
latest version
24.7.2
latest non vulnerable version
first published
15 years ago
latest version published
14 days ago
licenses detected
- [0,)
package registry
Direct Vulnerabilities
Known vulnerabilities in the com.vaadin:vaadin package. This does not include vulnerabilities belonging to this package’s dependencies.
How to fix?
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free| Vulnerability | Vulnerable Version |
|---|---|
com.vaadin:vaadin is a Java framework for modern Java web applications. Affected versions of this package are vulnerable to Regular Expression Denial of Service (ReDoS). EmailValidator catastrophic exponential-time regular expression How to fix Regular Expression Denial of Service (ReDoS)? Upgrade | [0,8.0) |
com.vaadin:vaadin is a Java framework for modern Java web applications. Affected versions of this package are vulnerable to Cross-site Scripting (XSS). It allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to the index page. How to fix Cross-site Scripting (XSS)? Upgrade | [,6.4.9) |