Known Vulnerabilities for Flow by Vaadin
Listed below are 10 of the newest known vulnerabilities associated with "Flow" by "Vaadin".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-114089 json | Trigger.dev before 4.5.2 contains a cross-site request forgery vulnerability in the CLI authorization-code flow because loadi... | Not Provided | 2026-10-21 | 2026-10-21 |
| CVE-2026-114072 json | The Trigger.dev webapp before 4.5.12 contains a cross-site request forgery vulnerability in its organization-level Slack OAut... | Not Provided | 2026-10-21 | 2026-10-21 |
| CVE-2026-113669 json | ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0 of ApostropheCMS and 1.6.1 of passport-bri... | Not Provided | 2026-10-20 | 2026-10-20 |
| CVE-2026-112381 json | Apache Traffic Server can crash with a null pointer dereference when a client POST request is torn down via half-close while ... | Not Provided | 2026-10-21 | 2026-10-21 |
| CVE-2026-111895 json | phpMyFAQ 3.2.0 before 4.0.0 and 4.0.2 before 4.2.0-beta contains an authentication bypass in its Microsoft Entra ID login flo... | Not Provided | 2026-10-17 | 2026-10-19 |
| CVE-2026-111884 json | phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta does not require the current password when changing an account e-mail... | Not Provided | 2026-10-17 | 2026-10-18 |
| CVE-2026-111882 json | phpMyFAQ 3.2.0-alpha before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains an authentication bypass vulnerability that allo... | Not Provided | 2026-10-17 | 2026-10-18 |
| CVE-2026-111874 json | A flaw has been found in OpenCATS 0.10.0. Affected is the function processLogin of the file modules/careers/CareersUI.php of ... | Not Provided | 2026-10-18 | 2026-10-19 |
| CVE-2026-110803 json | VaadinService.requestEnd() in Vaadin Framework 8 locks the session and then reads the v-uiId request parameter outside the bl... | Not Provided | 2026-10-21 | 2026-10-21 |
| CVE-2026-110008 json | @fastify/oauth2 is a Fastify wrapper for OAuth2 login flows. In versions 7.2.0 through 8.3.1, the state and code-verifier coo... | Not Provided | 2026-10-19 | 2026-10-19 |