https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T19:23:51.082335+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-173561 EUVD-2026-173561 2026-10-03T19:23:51.145388+00:00 EUVD-2026-173561 https://cve.radiocsirt.org/vuln/fkie_cve-2021-31403 fkie_cve-2021-31403 2026-10-03T19:23:51.145433+00:00

Non-constant-time comparison of CSRF tokens in UIDL request handler in com.vaadin:vaadin-server versions 7.0.0 through 7.7.23 (Vaadin 7.0.0 through 7.7.23), and 8.0.0 through 8.12.2 (Vaadin 8.0.0 through 8.12.2) allows attacker to guess a security token via timing attack

 https://cve.radiocsirt.org/vuln/ghsa-75xc-qvxh-27f8 GHSA-75xc-qvxh-27f8 — Timing side channel vulnerability in UIDL request handler in Vaadin 7 and 8 2026-10-03T19:23:51.145468+00:00

Affected: Maven: com.vaadin:vaadin-bom, Maven: com.vaadin:vaadin-server

Non-constant-time comparison of CSRF tokens in UIDL request handler in `com.vaadin:vaadin-server` versions 7.0.0 through 7.7.23 (Vaadin 7.0.0 through 7.7.23), and 8.0.0 through 8.12.2 (Vaadin 8.0.0 through 8.12.2) allows attacker to guess a security token via timing attack

- https://vaadin.com/security/cve-2021-31403

 https://cve.radiocsirt.org/vuln/gsd-2021-31403 gsd-2021-31403 2026-10-03T19:23:51.145498+00:00 gsd-2021-31403