https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T05:19:38.245791+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-31948 cnvd-2021-31948 2026-10-03T05:19:38.248991+00:00 cnvd-2021-31948 https://cve.radiocsirt.org/vuln/euvd-2026-179568 EUVD-2026-179568 2026-10-03T05:19:38.249021+00:00 EUVD-2026-179568 https://cve.radiocsirt.org/vuln/fkie_cve-2019-25027 fkie_cve-2019-25027 2026-10-03T05:19:38.249035+00:00

Missing output sanitization in default RouteNotFoundError view in com.vaadin:flow-server versions 1.0.0 through 1.0.10 (Vaadin 10.0.0 through 10.0.13), and 1.1.0 through 1.4.2 (Vaadin 11.0.0 through 13.0.5) allows attacker to execute malicious JavaScript via crafted URL

 https://cve.radiocsirt.org/vuln/ghsa-rp4x-wxqv-cf9m GHSA-rp4x-wxqv-cf9m — Reflected cross-site scripting in default RouteNotFoundError view in Vaadin 10 and 11-13 2026-10-03T05:19:38.249063+00:00

Affected: Maven: com.vaadin:flow-server

Missing output sanitization in default `RouteNotFoundError` view in `com.vaadin:flow-server` versions 1.0.0 through 1.0.10 (Vaadin 10.0.0 through 10.0.13), and 1.1.0 through 1.4.2 (Vaadin 11.0.0 through 13.0.5) allows attacker to execute malicious JavaScript via crafted URL.

- https://vaadin.com/security/cve-2019-25027

 https://cve.radiocsirt.org/vuln/gsd-2019-25027 gsd-2019-25027 2026-10-03T05:19:38.249088+00:00 gsd-2019-25027