https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T23:52:29.021823+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-183393 EUVD-2026-183393 2026-10-02T23:52:29.024454+00:00 EUVD-2026-183393 https://cve.radiocsirt.org/vuln/fkie_cve-2021-33604 fkie_cve-2021-33604 2026-10-02T23:52:29.024485+00:00

URL encoding error in development mode handler in com.vaadin:flow-server versions 2.0.0 through 2.6.1 (Vaadin 14.0.0 through 14.6.1), 3.0.0 through 6.0.9 (Vaadin 15.0.0 through 19.0.8) allows local user to execute arbitrary JavaScript code by opening crafted URL in browser.

 https://cve.radiocsirt.org/vuln/ghsa-c99r-67x4-whj6 GHSA-c99r-67x4-whj6 — Reflected cross-site scripting in development mode handler in Vaadin 14, 15-19 2026-10-02T23:52:29.024516+00:00

Affected: Maven: com.vaadin:vaadin-bom

URL encoding error in development mode handler in `com.vaadin:flow-server` versions 2.0.0 through 2.6.1 (Vaadin 14.0.0 through 14.6.1), 3.0.0 through 6.0.9 (Vaadin 15.0.0 through 19.0.8) allows local user to execute arbitrary JavaScript code by opening crafted URL in browser.

- https://vaadin.com/security/cve-2021-33604

 https://cve.radiocsirt.org/vuln/gsd-2021-33604 gsd-2021-33604 2026-10-02T23:52:29.024542+00:00 gsd-2021-33604