Skip to content
OpenAdvisories

Package · Maven

com.vaadin:vaadin-spreadsheet-flow

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 4.8
    CVE-2025-15022

    Cross-site scripting in Action caption

    Action captions in Vaadin accept HTML by default but were not sanitized, potentially allowing Cross-site Scripting (XSS) if caption content is derived from user input. In Vaadin Framework 7 and 8, the Action class is a general-purpose class that may be used b…

    vaadin vaadin framework vaadin-spreadsheet-flow Maven