Ecosyste.ms: Packages

An open API service providing package, version and dependency metadata of many open source software ecosystems and registries.

Top 0.8% dependent packages on repo1.maven.org
Top 1.6% dependent repos on repo1.maven.org
Top 3.5% docker downloads on repo1.maven.org

repo1.maven.org : com.vaadin:flow-server

Flow Server

Registry - Source - Homepage - Documentation - JSON
purl: pkg:maven/com.vaadin/flow-server
License: Apache-2.0
Latest release: about 2 months ago
First release: almost 6 years ago
Namespace: com.vaadin
Dependent packages: 91
Dependent repositories: 128
Stars: 5 on GitHub
Forks: 5 on GitHub
Docker dependents: 55
Docker downloads: 6,360
See more repository details: repos.ecosyste.ms
Last synced: 30 days ago

High

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTI1eGMtandmcS0zOWp3

OSGi applications using Vaadin 12-14 and 19 vulnerable to server classes and resources exposure
Ecosystems: maven
Packages: com.vaadin:flow-server
Source: github
Published: about 3 years ago

Moderate

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXA3anEtdjhqcC1qNDI0

Timing side channel vulnerability in endpoint request handler in Vaadin 15-19
Ecosystems: maven
Packages: com.vaadin:flow-server
Source: github
Published: about 3 years ago

Moderate

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXJwNHgtd3hxdi1jZjlt

Reflected cross-site scripting in default RouteNotFoundError view in Vaadin 10 and 11-13
Ecosystems: maven
Packages: com.vaadin:flow-server
Source: github
Published: about 3 years ago

Low

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXJqd3ctMng4di1tOXY5

Potential sensitive data exposure in applications using Vaadin 15
Ecosystems: maven
Packages: com.vaadin:flow-server
Source: github
Published: about 3 years ago

Low

GSA_kwCzR0hTQS1jaDQ4LTlyM3EtcHY3eM4AAz_0

Vaadin vulnerable to possible information disclosure of class and method names in RPC response
Ecosystems: maven
Packages: com.vaadin:vaadin, com.vaadin:flow-server
Source: github
Published: 11 months ago

Moderate

GSA_kwCzR0hTQS1mcjI2LXFqYzgtbXZqeM0Wjw

Possible route enumeration in production mode via RouteNotFoundError view in Vaadin 10, 11-14, and 15-19
Ecosystems: maven
Packages: com.vaadin:flow-server
Source: github
Published: over 2 years ago

Moderate

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWM1N2YtNHZwMi1qcWht

Insecure temporary directory usage in frontend build functionality of Vaadin 14 and 15-19
Ecosystems: maven
Packages: com.vaadin:flow-server
Source: github
Published: about 3 years ago

Moderate

GSA_kwCzR0hTQS01Zjl2LW12NWctamg1cc4AAz_1

Vaadin vulnerable to possible information disclosure in non visible components.
Ecosystems: maven
Packages: com.vaadin:flow-server, com.vaadin:vaadin
Source: github
Published: 11 months ago

Moderate

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXh3ZzMtcXJjZy13OXg2

Timing side channel vulnerability in UIDL request handler in Vaadin 10, 11-14, and 15-18
Ecosystems: maven
Packages: com.vaadin:flow-server
Source: github
Published: about 3 years ago

Low

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWpteDgtMzU1bS04dndo

Unauthorized client-side property update in UIDL request handler in Vaadin 10 and 11
Ecosystems: maven
Packages: com.vaadin:flow-server
Source: github
Published: about 3 years ago

Low

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTh2ZnctdjJqdi05aHdj

Reflected cross-site scripting in development mode handler in Vaadin
Ecosystems: maven
Packages: com.vaadin:flow-server
Source: github
Published: almost 3 years ago

Moderate

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTQ5cjItNzNtNi1wcDhm

Directory traversal in development mode handler in Vaadin 14 and 15-17
Ecosystems: maven
Packages: com.vaadin:flow-server
Source: github
Published: about 3 years ago