Known Vulnerabilities for Flow-server by Vaadin
Listed below are 1 of the newest known vulnerabilities associated with "Flow-server" by "Vaadin".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-92138 json | The OAuth authorization endpoint in Jenkins Bitbucket Server Integration Plugin 6.0.1 and earlier reads the `oauth_callback` ... | Not Provided | 2026-09-16 | 2026-09-16 |
| CVE-2026-85534 json | A flaw was found in libsoup. When a client sends an HTTP/2 request body from a non-pollable input stream, the library can buf... | Not Provided | 2026-09-04 | 2026-09-04 |
| CVE-2026-82426 json | Description Nimbus accepted the `uploadedJarLocation` argument of `submitTopology` / `submitTopologyWithOpts` as a server-si... | Not Provided | 2026-09-14 | 2026-09-14 |
| CVE-2026-82241 json | Budibase backend-core (@budibase/backend-core, as used by @budibase/server) omits the shared address space range 100.64.0.0/1... | Not Provided | 2026-08-28 | 2026-08-28 |
| CVE-2026-81941 json | IBM Langflow OSS 1.0.0 through 1.11.5 allows an authenticated non-administrative user could execute arbitrary operating syste... | Not Provided | 2026-09-10 | 2026-09-12 |
| CVE-2026-81890 json | elFinder is an open-source file manager for web, written in JavaScript using jQuery UI. Prior to 2.1.70, the netmount command... | Not Provided | 2026-08-31 | 2026-09-01 |
| CVE-2026-77386 json | Kyoo is a self-hosted media server focused on movies, series, and anime. Prior to 5.1.0, an unauthenticated attacker could in... | Not Provided | 2026-09-18 | 2026-09-22 |
| CVE-2026-77274 json | MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, validat... | Not Provided | 2026-09-22 | 2026-09-22 |
| CVE-2026-77272 json | MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the OAu... | Not Provided | 2026-09-22 | 2026-09-22 |
| CVE-2026-77270 json | MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the Jir... | Not Provided | 2026-09-22 | 2026-09-22 |