https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T07:09:12.175254+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2019-25027 CVE-2019-25027 — Reflected cross-site scripting in default RouteNotFoundError view in Vaadin 10 and 11-13 2026-10-06T07:09:12.195224+00:00

Affected: Vaadin, Vaadin flow-server

Missing output sanitization in default RouteNotFoundError view in com.vaadin:flow-server versions 1.0.0 through 1.0.10 (Vaadin 10.0.0 through 10.0.13), and 1.1.0 through 1.4.2 (Vaadin 11.0.0 through 13.0.5) allows attacker to execute malicious JavaScript via crafted URL