Skip to content
OpenAdvisories

Product · vaadin

framework

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.7
    CVE-2026-110803

    Session Lock Leak on an Invalid UI Id Allows Denial of Service in Vaadin Framework 8

    VaadinService.requestEnd() in Vaadin Framework 8 locks the session and then reads the v-uiId request parameter outside the block that releases the lock. A request carrying a non-numeric v-uiId makes Integer.parseInt throw while the session lock is held, so th…

    vaadin framework