How many CVEs does vaadin flow-components have?

vaadin flow-components has 5 published CVE records since 2021.

How many vaadin flow-components CVEs are in CISA KEV?

None of vaadin flow-components's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for vaadin flow-components vulnerabilities?

No vaadin flow-components CVEs currently have a tracked public exploit in this dataset.

Which versions of vaadin flow-components are affected?

280 distinct vaadin flow-components versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in vaadin flow-components CVEs?

vaadin flow-components's CVEs most often map to these CWE weakness types: CWE-20 (Improper Input Validation), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-400 (Uncontrolled Resource Consumption), CWE-754 (Improper Check for Unusual or Exceptional Conditions).

What is the average severity of vaadin flow-components CVEs?

The average CVSS base score across vaadin flow-components's scored CVEs is 5.9.

vaadin flow-components Vulnerabilities: CVEs, CISA KEV & Security Advisories

Affected versions and CVEs

Browse every vaadin flow-components version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

14.10.01 CVE
14.10.0.alpha11 CVE
14.10.0.alpha21 CVE
14.10.0.alpha31 CVE
14.10.0.beta11 CVE
14.10.11 CVE
14.10.21 CVE
14.11.01 CVE
14.11.0.alpha11 CVE
14.11.0.alpha21 CVE
14.11.11 CVE
14.11.101 CVE
14.11.111 CVE
14.11.21 CVE
14.11.31 CVE
14.11.41 CVE
14.11.51 CVE
14.11.61 CVE
14.11.71 CVE
14.11.81 CVE
14.11.91 CVE
14.12.01 CVE
14.12.0.alpha11 CVE
14.12.0.beta11 CVE
14.12.0.rc11 CVE
14.12.11 CVE
14.12.21 CVE
14.12.31 CVE
14.12.41 CVE
14.12.51 CVE
14.12.61 CVE
14.12.71 CVE
14.12.81 CVE
14.13.01 CVE
14.13.0.alpha11 CVE
14.4.01 CVE
14.5.0.alpha11 CVE
14.5.0.alpha21 CVE
14.5.0.alpha31 CVE
14.5.0.beta11 CVE
14.5.0.rc11 CVE
14.6.0.alpha11 CVE
14.6.0.alpha21 CVE
14.6.0.beta11 CVE
14.6.0.beta21 CVE
14.7.0.alpha11 CVE
14.7.0.alpha21 CVE
14.7.0.alpha31 CVE
14.7.0.beta11 CVE
14.7.0.rc11 CVE
14.8.01 CVE
14.8.0.alpha11 CVE
14.8.0.beta11 CVE
14.8.11 CVE
14.8.101 CVE
14.8.111 CVE
14.8.121 CVE
14.8.131 CVE
14.8.141 CVE
14.8.151 CVE
14.8.161 CVE
14.8.171 CVE
14.8.181 CVE
14.8.21 CVE
14.8.31 CVE
14.8.41 CVE
14.8.51 CVE
14.8.61 CVE
14.8.71 CVE
14.8.81 CVE
14.8.91 CVE
14.9.01 CVE
14.9.0.alpha11 CVE
14.9.0.beta11 CVE
14.9.0.rc11 CVE
14.9.11 CVE
14.9.21 CVE
14.9.31 CVE
14.9.41 CVE
14.9.51 CVE
14.9.61 CVE
23.0.01 CVE
23.1.0.alpha11 CVE
23.1.0.alpha21 CVE
23.1.0.alpha31 CVE
23.1.0.alpha41 CVE
23.1.0.beta11 CVE
23.2.01 CVE
23.2.0.alpha11 CVE
23.2.0.alpha21 CVE
23.2.0.alpha31 CVE
23.2.0.beta11 CVE
23.2.0.beta21 CVE
23.2.0.beta31 CVE
23.2.0.beta41 CVE
23.2.0.rc11 CVE
23.3.01 CVE
23.3.0.alpha11 CVE
23.3.0.alpha21 CVE
23.3.0.alpha31 CVE
23.3.0.beta11 CVE
23.3.0.beta21 CVE
23.3.0.rc11 CVE
23.3.11 CVE
23.3.101 CVE
23.3.111 CVE
23.3.121 CVE
23.3.131 CVE
23.3.141 CVE
23.3.151 CVE
23.3.161 CVE
23.3.171 CVE
23.3.181 CVE
23.3.191 CVE
23.3.21 CVE
23.3.201 CVE
23.3.211 CVE
23.3.221 CVE
23.3.231 CVE
23.3.241 CVE
23.3.251 CVE
23.3.261 CVE
23.3.31 CVE
23.3.41 CVE
23.3.51 CVE
23.3.61 CVE
23.3.71 CVE
23.3.81 CVE
23.3.91 CVE
23.4.01 CVE
23.4.0.alpha11 CVE
23.4.0.alpha21 CVE
23.4.0.beta11 CVE
23.5.01 CVE
23.5.0.alpha11 CVE
23.5.11 CVE
23.5.101 CVE
23.5.111 CVE
23.5.121 CVE
23.5.131 CVE
23.5.141 CVE
23.5.151 CVE
23.5.161 CVE
23.5.171 CVE
23.5.21 CVE
23.5.31 CVE
23.5.41 CVE
23.5.51 CVE
23.5.61 CVE
23.5.71 CVE
23.5.81 CVE
23.5.91 CVE
23.6.01 CVE
23.6.0.alpha11 CVE
23.6.11 CVE
23.6.21 CVE
24.0.0.alpha11 CVE
24.0.0.alpha101 CVE
24.0.0.alpha21 CVE
24.0.0.alpha31 CVE
24.0.0.alpha41 CVE
24.0.0.alpha51 CVE
24.0.0.alpha61 CVE
24.0.0.alpha71 CVE
24.0.0.alpha81 CVE
24.0.0.alpha91 CVE
24.0.0.beta11 CVE
24.1.0.alpha11 CVE
24.1.0.alpha21 CVE
24.1.0.alpha31 CVE
24.1.0.alpha41 CVE
24.1.0.alpha51 CVE
24.1.0.alpha61 CVE
24.1.0.beta11 CVE
24.2.0.alpha11 CVE
24.2.0.alpha101 CVE
24.2.0.alpha111 CVE
24.2.0.alpha21 CVE
24.2.0.alpha31 CVE
24.2.0.alpha41 CVE
24.2.0.alpha51 CVE
24.2.0.alpha61 CVE
24.2.0.alpha71 CVE
24.2.0.alpha81 CVE
24.2.0.alpha91 CVE
24.3.01 CVE
24.3.0.alpha11 CVE
24.3.0.alpha21 CVE
24.3.0.alpha31 CVE
24.3.0.alpha41 CVE
24.3.0.alpha51 CVE
24.3.0.alpha61 CVE
24.3.0.beta11 CVE
24.3.0.rc11 CVE
24.4.0.alpha11 CVE
24.4.0.alpha101 CVE
24.4.0.alpha111 CVE
24.4.0.alpha131 CVE
24.4.0.alpha141 CVE
24.4.0.alpha151 CVE
24.4.0.alpha161 CVE
24.4.0.alpha171 CVE
24.4.0.alpha181 CVE
24.4.0.alpha191 CVE
24.4.0.alpha21 CVE
24.4.0.alpha201 CVE
24.4.0.alpha211 CVE
24.4.0.alpha221 CVE
24.4.0.alpha231 CVE
24.4.0.alpha241 CVE
24.4.0.alpha251 CVE
24.4.0.alpha31 CVE
24.4.0.alpha41 CVE
24.4.0.alpha51 CVE
24.4.0.alpha61 CVE
24.4.0.alpha71 CVE
24.4.0.alpha81 CVE
24.4.0.alpha91 CVE
24.4.0.beta11 CVE
24.5.0.alpha11 CVE
24.5.0.alpha101 CVE
24.5.0.alpha111 CVE
24.5.0.alpha121 CVE
24.5.0.alpha131 CVE
24.5.0.alpha141 CVE
24.5.0.alpha151 CVE
24.5.0.alpha161 CVE
24.5.0.alpha171 CVE
24.5.0.alpha21 CVE
24.5.0.alpha31 CVE
24.5.0.alpha41 CVE
24.5.0.alpha51 CVE
24.5.0.alpha61 CVE
24.5.0.alpha71 CVE
24.5.0.alpha81 CVE
24.5.0.alpha91 CVE
24.5.0.beta11 CVE
24.5.0.beta21 CVE
24.5.0.beta31 CVE
24.5.0.beta41 CVE
24.5.0.beta51 CVE
24.5.0.beta61 CVE
24.5.0.rc11 CVE
24.6.0.alpha11 CVE
24.6.0.alpha21 CVE
24.6.0.alpha31 CVE
24.6.0.alpha41 CVE
24.6.0.beta11 CVE
24.6.0.beta21 CVE
24.6.0.beta31 CVE
24.7.01 CVE
24.7.0.alpha11 CVE
24.7.0.alpha101 CVE
24.7.0.alpha111 CVE
24.7.0.alpha121 CVE
24.7.0.alpha21 CVE
24.7.0.alpha31 CVE
24.7.0.alpha41 CVE
24.7.0.alpha51 CVE
24.7.0.alpha61 CVE
24.7.0.alpha71 CVE
24.7.0.alpha81 CVE
24.7.0.alpha91 CVE
24.7.0.beta11 CVE
24.7.0.beta21 CVE
24.7.0.rc11 CVE
24.7.0.rc21 CVE
24.7.11 CVE
24.7.21 CVE
24.7.31 CVE
24.7.41 CVE
24.7.51 CVE
24.7.61 CVE
24.9.01 CVE
24.9.11 CVE
24.9.21 CVE
24.9.31 CVE
24.9.41 CVE
24.9.51 CVE
24.9.61 CVE

Find a version

5 CVEs

Sort

Cross-site scripting in Action caption
CVE-2025-15022
Patch
Workaround
CWE-79
Medium · CVSS 4.8
EPSS 0.3% (25th pct)2026-01-05
Possibility to bypass file upload validation on the server-side
CVE-2025-9467
Patch
Workaround
CWE-20
Medium · CVSS 5.3
EPSS 0.4% (28th pct)2025-09-04
High vulnerability · 2022-05-24
CVE-2022-29567
Patch
Workaround
CWE-200
High · CVSS 7.5
EPSS 0.9% (57th pct)2022-05-24
Medium vulnerability · 2021-08-25
CVE-2021-33605
Patch
CWE-754
Medium · CVSS 4.3
EPSS 0.7% (48th pct)2021-08-25
Regular expression denial of service (ReDoS) in EmailField component in Vaadin 14 and 15-17
CVE-2021-31405
Patch
CWE-400
High · CVSS 7.5
EPSS 1.1% (63th pct)2021-04-23

vaadin flow-components Vulnerabilities

Overview

Severity and exploitation

Affected versions and CVEs

Specific versions

Common weakness types

Disclosure activity by year

Other vaadin products

Frequently asked questions

References

Track vaadin flow-components vulnerabilities