Browse Security Advisories
Moderate Security Advisories for com.vaadin:vaadin-bom in maven Clear Filters
Moderate
over 3 years ago
Reflected cross-site scripting in vaadin-menu-bar webjar resources in Vaadin 14
maven
org.webjars.bowergithub.vaadin:vaadin-menu-bar, com.vaadin:vaadin-bom
Moderate
almost 4 years ago
Unauthorized property update in CheckboxGroup component in Vaadin 12-14 and 15-20
maven
com.vaadin:vaadin-bom
Moderate
about 4 years ago
Possible route enumeration in production mode via RouteNotFoundError view in Vaadin 10, 11-14, and 15-19
maven
com.vaadin:vaadin-bom
Moderate
over 4 years ago
Server session is not invalidated when logout() helper method of Authentication module is used in Vaadin 18-19
maven
com.vaadin:vaadin-bom
Moderate
over 4 years ago
Timing side channel vulnerability in UIDL request handler in Vaadin 7 and 8
maven
com.vaadin:vaadin-server, com.vaadin:vaadin-bom
Moderate
over 4 years ago
Stored cross-site scripting in Grid component in Vaadin 7 and 8
maven
com.vaadin:vaadin-server, com.vaadin:vaadin-bom
Moderate
over 4 years ago
Reflected cross-site scripting in default RouteNotFoundError view in Vaadin 10 and 11-13
maven
com.vaadin:vaadin-bom
Moderate
over 4 years ago
Directory traversal in development mode handler in Vaadin 14 and 15-17
maven
com.vaadin:vaadin-bom
Moderate
over 4 years ago
Timing side channel vulnerability in UIDL request handler in Vaadin 10, 11-14, and 15-18
maven
com.vaadin:vaadin-bom
Moderate
over 4 years ago
Timing side channel vulnerability in endpoint request handler in Vaadin 15-19
maven
com.vaadin:vaadin-bom
Filter by Severity
Filter by Ecosystem
maven
3,135
packagist
3,007
pypi
2,022
npm
1,354
go
1,273
nuget
659
rubygems
437
cargo
411
hex
16
swift
13
actions
7
pub
3
Filter by Package
org.jenkins-ci.main:jenkins-core
145
org.apache.tomcat:tomcat
96
com.liferay.portal:release.portal.bom
73
com.liferay.portal:release.dxp.bom
68
org.elasticsearch:elasticsearch
33
org.keycloak:keycloak-core
32
org.apache.struts:struts2-core
20
org.keycloak:keycloak-services
20
org.apache.tomcat.embed:tomcat-embed-core
19
org.opencms:opencms-core
15
io.undertow:undertow-core
15
org.xwiki.platform:xwiki-platform-oldcore
14
org.springframework.security:spring-security-core
13
com.jfinal:jfinal
13
com.thoughtworks.xstream:xstream
13
org.apache.jspwiki:jspwiki-main
13
org.bouncycastle:bcprov-jdk14
12
org.eclipse.jetty:jetty-server
11
org.apache.tomcat:tomcat-coyote
11
org.apache.jspwiki:jspwiki-war
10
org.keycloak:keycloak-parent
10
org.apache.solr:solr-core
10
org.apache.nifi:nifi
10
org.springframework:spring-core
10
com.vaadin:vaadin-bom
10
org.mortbay.jetty:jetty
9
bootstrap
9
org.webjars:bootstrap
9
bootstrap
9
org.jenkins-ci.plugins:git
9
org.jenkins-ci.plugins:script-security
9
org.opencrx:opencrx-core-models
9
org.igniterealtime.openfire:parent
9
bootstrap
9
twbs/bootstrap
9
org.apache.activemq:activemq-client
9
org.bouncycastle:bcprov-jdk15on
9
org.jenkins-ci.plugins:electricflow
8
org.apache.archiva:archiva
8
org.jenkins-ci.plugins:subversion
8
org.apache.ranger:ranger
8
org.bouncycastle:bcprov-jdk15to18
8
bootstrap-sass
7
jquery
7
org.apache.tomcat:tomcat-catalina
7
bootstrap.sass
7
org.apache.cxf:cxf-core
7
org.webjars.npm:jquery-ui
7
org.jenkins-ci.plugins:config-file-provider
7
io.jenkins:configuration-as-code
7
org.springframework:spring-web
7
jquery-ui-rails
7
org.jenkins-ci.plugins:email-ext
7
org.webjars.npm:jquery
7
jQuery.UI.Combined
7
jquery-ui
7
io.jenkins.blueocean:blueocean
7
com.vaadin:flow-server
7
jquery-rails
7
org.opennms:opennms
7
org.owasp.antisamy:antisamy
7
org.bouncycastle:bcprov-jdk15
7
org.apache.santuario:xmlsec
7
com.sonyericsson.jenkins.plugins.bfa:build-failure-analyzer
6
org.cloudfoundry.identity:cloudfoundry-identity-server
6
org.apache.geode:geode-core
6
org.apache.struts.xwork:xwork-core
6
org.jenkins-ci.plugins:fortify-on-demand-uploader
6
org.apache.tika:tika
6
org.apache.pdfbox:pdfbox
6
org.jenkins-ci.plugins:openshift-deployer
6
org.bouncycastle:bcprov-jdk18on
6
org.apache.commons:commons-compress
6
org.jenkins-ci.plugins:jobConfigHistory
6
org.apache.poi:poi
6
bootstrap-sass
6
jQuery
6
org.geoserver.web:gs-web-app
6
org.opensearch.plugin:opensearch-security
6
io.netty:netty
6
org.jenkins-ci.plugins:azure-vm-agents
6
org.apache.zeppelin:zeppelin-server
5
com.xebialabs.deployit.ci:deployit-plugin
5
io.vertx:vertx-core
5
org.jenkins-ci.plugins:credentials-binding
5
org.apache.openmeetings:openmeetings-parent
5
org.springframework:spring-webmvc
5
org.jenkins-ci.plugins:ec2
5
org.apache.james:james-server
5
io.jenkins.plugins:miniorange-saml-sp
5
org.opennms:opennms-webapp
5
org.apache.kylin:kylin
5
mysql:mysql-connector-java
5
org.jboss.resteasy:resteasy-client
5
org.graylog2:graylog2-server
5
org.jenkinsci.plugins:octoperf
5
org.jboss.netty:netty
5
com.mabl.integration.jenkins:mabl-integration
5
org.yaml:snakeyaml
5
org.apache.pulsar:pulsar-broker
5
org.jenkins-ci.plugins:rundeck
5
io.jenkins.plugins:warnings-ng
5
org.jenkins-ci.plugins:aws-codecommit-trigger
5
org.jenkins-ci.plugins:fortify
5
org.biouno:uno-choice
5
org.apache.streampark:streampark
5
org.jenkins-ci.plugins:credentials
5
hudson.plugins:project-inheritance
5
org.apache.atlas:atlas-common
5
org.keycloak:keycloak-quarkus-server
5
org.silverpeas.core:silverpeas-core-web
5
io.netty:netty-codec-http
5
org.jenkins-ci.plugins:codedx
5
org.jenkins-ci.plugins:google-compute-engine
5
org.apache.cxf:cxf
5
org.apache.ambari:ambari
5
org.csanchez.jenkins.plugins:kubernetes
5
org.hibernate.validator:hibernate-validator
4
io.github.robothy:local-s3-rest
4
org.owasp.esapi:esapi
4
org.jenkins-ci.plugins:mercurial
4
com.datapipe.jenkins.plugins:hashicorp-vault-plugin
4
org.jenkins-ci.plugins:ansible
4
org.apache.httpcomponents:httpclient
4
org.jenkins-ci.plugins:jira
4
org.apache.druid:druid
4
org.bouncycastle:bcprov-ext-jdk15on
4
org.jenkins-ci.plugins:soapui-pro-functional-testing
4
org.jenkins-ci.plugins:scriptler
4
org.xwiki.platform:xwiki-platform-web
4
org.jenkins-ci.plugins:jira-steps
4
com.sonyericsson.hudson.plugins.gerrit:gerrit-trigger
4
org.apache.karaf:apache-karaf
4
org.apache.spark:spark-core_2.11
4
org.jenkins-ci.plugins:delphix
4
org.apache.tika:tika-core
4
org.apache.inlong:manager-pojo
4
org.jenkins-ci.plugins:active-directory
4
org.opensaml:opensaml
4
org.jenkins-ci.plugins:extended-choice-parameter
4
org.glassfish.main.admingui:console-common
4
org.jenkins-ci.plugins:reportportal
4
org.apache.zeppelin:zeppelin
4
BouncyCastle
4
org.jenkins-ci.plugins:google-login
4
org.apache.derby:derby
4
org.jeecgframework.boot:jeecg-boot-parent
4
org.jenkins-ci.plugins:ec2-deployment-dashboard
4
org.opencastproject:opencast-kernel
4
org.apache.spark:spark-core_2.10
4
org.jenkins-ci.plugins:publish-over-ssh
4
com.vaadin:vaadin-server
4
org.jenkins-ci.plugins:proxmox
4
org.jvnet.hudson.plugins:analysis-core
4
org.xwiki.platform:xwiki-platform-web-templates
4
com.cloudtp.jenkins:paaslane-estimate
4
org.apache.ozone:ozone-main
4
io.jenkins.plugins:cavisson-ns-nd-integration
4
org.jenkins-ci.plugins:artifactory
4
org.bouncycastle:bc-fips
4
org.jenkins-ci.tools:git-parameter
4
com.xuxueli:xxl-job
4
io.jenkins.plugins:neuvector-vulnerability-scanner
4
org.jenkins-ci.plugins:pipeline-build-step
4
org.jenkins-ci.plugins:requests
4
org.jenkins-ci.plugins:htmlpublisher
4
org.apache.kafka:kafka-clients
4
com.liferay.portal:com.liferay.portal.impl
3
io.jenkins.plugins:folder-auth
3
org.jenkins-ci.plugins:ci-with-toad-edge
3
com.itextpdf:itext7-core
3
com.ruoyi:ruoyi
3
io.goobi.viewer:viewer-core
3
org.kohsuke.stapler:stapler-parent
3
org.jenkins-ci.plugins:mailer
3
org.apache.hadoop:hadoop-main
3
org.apache.ws.security:wss4j
3
org.apache.dolphinscheduler:dolphinscheduler
3
edu.internet2.middleware:shibboleth-identityprovider
3
org.jenkins-ci.plugins:svn-partial-release-mgr
3
org.fitnesse:fitnesse
3
com.synopsys.jenkinsci:ownership
3
com.soasta.jenkins:cloudtest
3
com.liferay:com.liferay.frontend.taglib.clay
3
org.springframework.data:spring-data-jpa
3
org.jenkins-ci.plugins:elastest
3
org.jenkins-ci.plugins:s3
3
org.jenkins-ci.plugins:gogs-webhook
3
org.jenkins-ci.plugins:swarm
3
org.apache.camel:camel-core
3
org.jenkins-ci.plugins:p4
3
org.apache.axis2:axis2
3
org.jenkins-ci.plugins:icescrum
3
org.jboss.hal:hal-console
3
org.jenkins-ci.plugins:gitlab-oauth
3
org.jenkins-ci.plugins:nomad
3
org.apache.atlas:apache-atlas
3
org.jenkins-ci.plugins:dashboard-view
3
org.apache.activemq:activemq-web-console
3
org.bouncycastle:bctls-jdk15to18
3