FR
Product
framework
4
CVEs
0
On KEV
8.7
Max CVSS
2
New 30D
Severity mix
Critical 0High 1Medium 2Low 1
Watch
Add framework to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-110803 | 8.7 | Oct 21 | Session Lock Leak on an Invalid UI Id Allows Denial of Service in Vaadin Framework 8 Affected: 8.16.0 before 8.32.2; 8.18.0 before 8.32.2 |
| CVE-2025-9467 | 5.3 | Sep 4 | Possibility to bypass file upload validation on the server-side Affected: 7.0.0 through 7.7.47; 8.0.0 through 8.28.1 |
| CVE-2025-15022 | 4.8 | Jan 5 | Cross-site scripting in Action caption Affected: 7.0.0 through 7.7.49; 8.0.0 through 8.29.1 |
| CVE-2026-110737 New | 2.3 | Oct 27 | Push Endpoint Returns Permissive CORS Headers Affected: 7.1.0 before 7.7.55; 8.0.0 before 8.32.2; 7.7.36 before 7.7.55; 8.18.0 before 8.32.2 |
Showing 4