Vaadin flow-server

• CVE-2023-25499 Medium 5.7 Possible information disclosure in non visible components 0.6%
• CVE-2021-31412 Medium 5.3 Possible route enumeration in production mode via RouteNotFoundError view in Vaadin 10, 11-14, and 15-19 1.3%
• CVE-2021-33604 Low 2.5 Reflected cross-site scripting in development mode handler in Vaadin 14, 15-19 0.3%
• CVE-2021-31411 Medium 6.3 Insecure temporary directory usage in frontend build functionality of Vaadin 14 and 15-19 0.2%
• CVE-2021-31407 High 8.6 Server classes and resources exposure in OSGi applications using Vaadin 12-14 and 19 2.4%
• CVE-2021-31406 Medium 4.0 Timing side channel vulnerability in endpoint request handler in Vaadin 15-19 0.2%
• CVE-2021-31404 Medium 4.0 Timing side channel vulnerability in UIDL request handler in Vaadin 10, 11-14, and 15-18 0.2%
• CVE-2020-36321 Medium 5.9 Directory traversal in development mode handler in Vaadin 14 and 15-17 1.2%
• CVE-2020-36319 Low 3.1 Potential sensitive data exposure in applications using Vaadin 15 1.0%