https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T02:32:17.476258+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-167657 EUVD-2026-167657 2026-10-03T02:32:17.479093+00:00 EUVD-2026-167657 https://cve.radiocsirt.org/vuln/fkie_cve-2018-25007 fkie_cve-2018-25007 2026-10-03T02:32:17.479122+00:00

Missing check in UIDL request handler in com.vaadin:flow-server versions 1.0.0 through 1.0.5 (Vaadin 10.0.0 through 10.0.7, and 11.0.0 through 11.0.2) allows attacker to update element property values via crafted synchronization message.

 https://cve.radiocsirt.org/vuln/ghsa-jmx8-355m-8vwh GHSA-jmx8-355m-8vwh — Unauthorized client-side property update in UIDL request handler in Vaadin 10 and 11 2026-10-03T02:32:17.479151+00:00

Affected: Maven: com.vaadin:flow-server

Missing check in UIDL request handler in com.vaadin:flow-server versions 1.0.0 through 1.0.5 (Vaadin 10.0.0 through 10.0.7, and 11.0.0 through 11.0.2) allows attacker to update element property values via crafted synchronization message.

- https://vaadin.com/security/cve-2018-25007

 https://cve.radiocsirt.org/vuln/gsd-2018-25007 gsd-2018-25007 2026-10-03T02:32:17.479176+00:00 gsd-2018-25007