https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T12:38:33.871732+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-36225 cnvd-2021-36225 2026-10-02T12:38:33.934323+00:00 cnvd-2021-36225 https://cve.radiocsirt.org/vuln/euvd-2026-172731 EUVD-2026-172731 2026-10-02T12:38:33.934363+00:00 EUVD-2026-172731 https://cve.radiocsirt.org/vuln/fkie_cve-2019-25028 fkie_cve-2019-25028 2026-10-02T12:38:33.934378+00:00

Missing variable sanitization in Grid component in com.vaadin:vaadin-server versions 7.4.0 through 7.7.19 (Vaadin 7.4.0 through 7.7.19), and 8.0.0 through 8.8.4 (Vaadin 8.0.0 through 8.8.4) allows attacker to inject malicious JavaScript via unspecified vector

 https://cve.radiocsirt.org/vuln/ghsa-q74r-4xw3-ppx9 GHSA-q74r-4xw3-ppx9 — Stored cross-site scripting in Grid component in Vaadin 7 and 8 2026-10-02T12:38:33.934409+00:00

Affected: Maven: com.vaadin:vaadin-bom, Maven: com.vaadin:vaadin-server

Missing variable sanitization in `Grid` component in `com.vaadin:vaadin-server` versions 7.4.0 through 7.7.19 (Vaadin 7.4.0 through 7.7.19), and 8.0.0 through 8.8.4 (Vaadin 8.0.0 through 8.8.4) allows attacker to inject malicious JavaScript via unspecified vector.

- https://vaadin.com/security/cve-2019-25028

 https://cve.radiocsirt.org/vuln/gsd-2019-25028 gsd-2019-25028 2026-10-02T12:38:33.934438+00:00 gsd-2019-25028