https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 23:52:15 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-183393 EUVD-2026-183393 https://cve.radiocsirt.org/vuln/euvd-2026-183393 https://cve.radiocsirt.org/vuln/fkie_cve-2021-33604 <p>URL encoding error in development mode handler in com.vaadin:flow-server versions 2.0.0 through 2.6.1 (Vaadin 14.0.0 through 14.6.1), 3.0.0 through 6.0.9 (Vaadin 15.0.0 through 19.0.8) allows local user to execute arbitrary JavaScript code by opening crafted URL in browser.</p> <p>URL encoding error in development mode handler in com.vaadin:flow-server versions 2.0.0 through 2.6.1 (Vaadin 14.0.0 through 14.6.1), 3.0.0 through 6.0.9 (Vaadin 15.0.0 through 19.0.8) allows local user to execute arbitrary JavaScript code by opening crafted URL in browser.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-33604 https://cve.radiocsirt.org/vuln/ghsa-c99r-67x4-whj6 <p><strong>Affected:</strong> Maven: com.vaadin:vaadin-bom</p> <p>URL encoding error in development mode handler in `com.vaadin:flow-server` versions 2.0.0 through 2.6.1 (Vaadin 14.0.0 through 14.6.1), 3.0.0 through 6.0.9 (Vaadin 15.0.0 through 19.0.8) allows local user to execute arbitrary JavaScript code by opening crafted URL in browser.</p> <p>- https://vaadin.com/security/cve-2021-33604</p> <p><strong>Affected:</strong> Maven: com.vaadin:vaadin-bom</p> <p>URL encoding error in development mode handler in `com.vaadin:flow-server` versions 2.0.0 through 2.6.1 (Vaadin 14.0.0 through 14.6.1), 3.0.0 through 6.0.9 (Vaadin 15.0.0 through 19.0.8) allows local user to execute arbitrary JavaScript code by opening crafted URL in browser.</p> <p>- https://vaadin.com/security/cve-2021-33604</p> https://cve.radiocsirt.org/vuln/ghsa-c99r-67x4-whj6 https://cve.radiocsirt.org/vuln/gsd-2021-33604 gsd-2021-33604 https://cve.radiocsirt.org/vuln/gsd-2021-33604