Vaadin vaadin-spreadsheet-flow

• CVE-2026-93547 Medium 5.3 Missing Authorization Check in Vaadin Spreadsheet Allows Cell Comments to Be Written to Protected Sheets and Locked Cells 0.4%
• CVE-2025-15022 Medium 4.8 Cross-site scripting in Action caption 0.3%