Ecosyste.ms: Packages

An open API service providing package, version and dependency metadata of many open source software ecosystems and registries.

Top 0.5% dependent packages on repo1.maven.org
Top 0.1% dependent repos on repo1.maven.org

repo1.maven.org : com.vaadin:vaadin-bom

Vaadin Platform (Bill of Materials)

Registry - Source - Homepage - Documentation - JSON
purl: pkg:maven/com.vaadin/vaadin-bom
License: Apache-2.0
Latest release: about 1 month ago
First release: about 9 years ago
Namespace: com.vaadin
Dependent packages: 166
Dependent repositories: 4,379
Stars: 6 on GitHub
Forks: 5 on GitHub
See more repository details: repos.ecosyste.ms
Last synced: 23 days ago

High

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXA4MjYtOHZocS1oNDM5

Insecure temporary directory usage in frontend build functionality of Vaadin 14 and 15-19
Ecosystems: maven
Packages: com.vaadin:vaadin-bom
Source: github
Published: about 3 years ago

Moderate

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW1yOGgtajljdi00bTho

Server session is not invalidated when logout() helper method of Authentication module is used in Vaadin 18-19
Ecosystems: maven
Packages: com.vaadin:vaadin-bom
Source: github
Published: about 3 years ago

High

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTQyajQtNzMzeC01dmNm

Regular expression denial of service (ReDoS) in EmailValidator class in Vaadin 7
Ecosystems: maven
Packages: com.vaadin:vaadin-server, com.vaadin:vaadin-bom
Source: github
Published: about 3 years ago

High

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTJ3cXAtam1jYy1tYzc3

Regular expression denial of service (ReDoS) in EmailField component in Vaadin 14 and 15-17
Ecosystems: maven
Packages: com.vaadin:vaadin-bom
Source: github
Published: about 3 years ago

Moderate

GSA_kwCzR0hTQS05M2M0LXZmODYtM3JqN80W1A

Reflected cross-site scripting in vaadin-menu-bar webjar resources in Vaadin 14
Ecosystems: maven
Packages: org.webjars.bowergithub.vaadin:vaadin-menu-bar, com.vaadin:vaadin-bom
Source: github
Published: over 2 years ago

High

GSA_kwCzR0hTQS1qZm1mLXcyOTMtOHhyOM0Wjg

Regular expression Denial of Service (ReDoS) in EmailValidator class in V7 compatibility module in Vaadin 8
Ecosystems: maven
Packages: com.vaadin:vaadin-bom
Source: github
Published: over 2 years ago

Moderate

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWh3N3ItcXJocC01cGZm

Unauthorized property update in CheckboxGroup component in Vaadin 12-14 and 15-20
Ecosystems: maven
Packages: com.vaadin:vaadin-bom
Source: github
Published: over 2 years ago

Moderate

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXFyZzktZjQ3Mi1xd2Zt

Possible route enumeration in production mode via RouteNotFoundError view in Vaadin 10, 11-14, and 15-19
Ecosystems: maven
Packages: com.vaadin:vaadin-bom
Source: github
Published: almost 3 years ago

Moderate

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTgybWYtbW1oNy1oeHA1

Directory traversal in development mode handler in Vaadin 14 and 15-17
Ecosystems: maven
Packages: com.vaadin:vaadin-bom
Source: github
Published: about 3 years ago

Moderate

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTloNmctNm14Zy12dnA0

Timing side channel vulnerability in endpoint request handler in Vaadin 15-19
Ecosystems: maven
Packages: com.vaadin:vaadin-bom
Source: github
Published: about 3 years ago

High

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWo5d3ItNDl2cS1ybTVn

Server classes and resources exposure in OSGi applications using Vaadin 12-14 and 19
Ecosystems: maven
Packages: com.vaadin:vaadin-bom
Source: github
Published: about 3 years ago

Low

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWM5OXItNjd4NC13aGo2

Reflected cross-site scripting in development mode handler in Vaadin 14, 15-19
Ecosystems: maven
Packages: com.vaadin:vaadin-bom
Source: github
Published: almost 3 years ago

Moderate

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWM2YzQtN3g0OC00Y3Fw

Timing side channel vulnerability in UIDL request handler in Vaadin 10, 11-14, and 15-18
Ecosystems: maven
Packages: com.vaadin:vaadin-bom
Source: github
Published: about 3 years ago

Moderate

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWpxajQtcjQ4My00Z3Zy

Reflected cross-site scripting in default RouteNotFoundError view in Vaadin 10 and 11-13
Ecosystems: maven
Packages: com.vaadin:vaadin-bom
Source: github
Published: about 3 years ago

Low

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTc2ZjQtZnczMy02ajJ2

Potential sensitive data exposure in applications using Vaadin 15
Ecosystems: maven
Packages: com.vaadin:vaadin-bom
Source: github
Published: about 3 years ago

Moderate

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXE3NHItNHh3My1wcHg5

Stored cross-site scripting in Grid component in Vaadin 7 and 8
Ecosystems: maven
Packages: com.vaadin:vaadin-server, com.vaadin:vaadin-bom
Source: github
Published: about 3 years ago

Moderate

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTc1eGMtcXZ4aC0yN2Y4

Timing side channel vulnerability in UIDL request handler in Vaadin 7 and 8
Ecosystems: maven
Packages: com.vaadin:vaadin-server, com.vaadin:vaadin-bom
Source: github
Published: about 3 years ago

Low

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTNoNXItOTI4di1teGho

Unauthorized client-side property update in UIDL request handler in Vaadin 10 and 11
Ecosystems: maven
Packages: com.vaadin:vaadin-bom
Source: github
Published: about 3 years ago