Skip to content
OpenAdvisories

Package · Maven

com.vaadin:flow-project

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Low 2.3
    CVE-2026-2741

    Zip Slip Path Traversal on Node Unpack

    Specially crafted ZIP archives can escape the intended extraction directory during Node.js download and extraction in Vaadin 14.2.0 through 14.14.0, 15.0.0 through 23.6.6, 24.0.0 through 24.9.8, and 25.0.0 through 25.0.2. Vaadin’s build process can automatica…

    vaadin vaadin flow com.vaadin:flow-project Maven