Known Vulnerabilities for Flow-server by Vaadin
Listed below are 1 of the newest known vulnerabilities associated with "Flow-server" by "Vaadin".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-112381 json | Apache Traffic Server can crash with a null pointer dereference when a client POST request is torn down via half-close while ... | Not Provided | 2026-10-21 | 2026-10-21 |
| CVE-2026-111874 json | A flaw has been found in OpenCATS 0.10.0. Affected is the function processLogin of the file modules/careers/CareersUI.php of ... | Not Provided | 2026-10-18 | 2026-10-19 |
| CVE-2026-110803 json | VaadinService.requestEnd() in Vaadin Framework 8 locks the session and then reads the v-uiId request parameter outside the bl... | Not Provided | 2026-10-21 | 2026-10-21 |
| CVE-2026-109245 json | FreeRDP 3.0.0 before 3.32.0 contains an improper certificate validation vulnerability in freerdp_http_request() in libfreerdp... | Not Provided | 2026-10-12 | 2026-10-13 |
| CVE-2026-108702 json | 1Panel-dev CordysCRM through 1.9.3 lacks a PROCESS_SETTING permission check on POST /approval-flow/webhook/test, allowing any... | Not Provided | 2026-10-11 | 2026-10-18 |
| CVE-2026-107839 json | ageLANServer provides a cross-platform web server and launcher for offline multiplayer in several Age of Empires and Age of M... | Not Provided | 2026-10-09 | 2026-10-14 |
| CVE-2026-107806 json | Nginx UI is a web user interface for the Nginx web server. From 2.3.8 until 2.5.0, an authenticated administrator with an act... | Not Provided | 2026-10-09 | 2026-10-14 |
| CVE-2026-105697 json | Langflow is a tool for building and deploying AI-powered agents and workflows. Before Langflow 1.10.3, the MCP stdio transpor... | Not Provided | 2026-10-05 | 2026-10-09 |
| CVE-2026-105628 json | Plane is an open-source project management tool. Prior to 1.4.0, Plane's OAuth avatar synchronization flow fetches avatar_url... | Not Provided | 2026-10-05 | 2026-10-05 |
| CVE-2026-105485 json | Authentication bypass OAuth device authorization flow in Devolutions Server 2026.3.7.0 and earlier allows a remote attacker t... | Not Provided | 2026-10-06 | 2026-10-06 |