https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 19:23:53 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-173561 EUVD-2026-173561 https://cve.radiocsirt.org/vuln/euvd-2026-173561 https://cve.radiocsirt.org/vuln/fkie_cve-2021-31403 <p>Non-constant-time comparison of CSRF tokens in UIDL request handler in com.vaadin:vaadin-server versions 7.0.0 through 7.7.23 (Vaadin 7.0.0 through 7.7.23), and 8.0.0 through 8.12.2 (Vaadin 8.0.0 through 8.12.2) allows attacker to guess a security token via timing attack</p> <p>Non-constant-time comparison of CSRF tokens in UIDL request handler in com.vaadin:vaadin-server versions 7.0.0 through 7.7.23 (Vaadin 7.0.0 through 7.7.23), and 8.0.0 through 8.12.2 (Vaadin 8.0.0 through 8.12.2) allows attacker to guess a security token via timing attack</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-31403 https://cve.radiocsirt.org/vuln/ghsa-75xc-qvxh-27f8 <p><strong>Affected:</strong> Maven: com.vaadin:vaadin-bom, Maven: com.vaadin:vaadin-server</p> <p>Non-constant-time comparison of CSRF tokens in UIDL request handler in `com.vaadin:vaadin-server` versions 7.0.0 through 7.7.23 (Vaadin 7.0.0 through 7.7.23), and 8.0.0 through 8.12.2 (Vaadin 8.0.0 through 8.12.2) allows attacker to guess a security token via timing attack</p> <p>- https://vaadin.com/security/cve-2021-31403</p> <p><strong>Affected:</strong> Maven: com.vaadin:vaadin-bom, Maven: com.vaadin:vaadin-server</p> <p>Non-constant-time comparison of CSRF tokens in UIDL request handler in `com.vaadin:vaadin-server` versions 7.0.0 through 7.7.23 (Vaadin 7.0.0 through 7.7.23), and 8.0.0 through 8.12.2 (Vaadin 8.0.0 through 8.12.2) allows attacker to guess a security token via timing attack</p> <p>- https://vaadin.com/security/cve-2021-31403</p> https://cve.radiocsirt.org/vuln/ghsa-75xc-qvxh-27f8 https://cve.radiocsirt.org/vuln/gsd-2021-31403 gsd-2021-31403 https://cve.radiocsirt.org/vuln/gsd-2021-31403