Skip to content
OpenAdvisories

Package · Maven

com.vaadin:flow-client

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 6.3
    GHSA-6hgr-2g6q-3rmc

    Server session is not invalidated when logout() helper method of Authentication module is used in Vaadin 18-19

    `Authentication.logout()` helper in `com.vaadin:flow-client` versions 5.0.0 prior to 6.0.0 (Vaadin 18), and 6.0.0 through 6.0.4 (Vaadin 19.0.0 through 19.0.3) uses incorrect HTTP method, which, in combination with Spring Security CSRF protection, allows local…

    com.vaadin:flow-client Maven