Skip to content
OpenAdvisories

Product · vaadin

@vaadin/component-base

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.3
    CVE-2026-91860

    Prototype Pollution in Vaadin Charts and Component Base via Unfiltered Deep Merge

    A prototype pollution vulnerability exists in the deep merge helpers of Vaadin Charts and Vaadin Component Base. Merging an object the application does not control into a chart configuration or into a component's i18n property writes onto Object.prototype, ma…

    vaadin vaadin vaadin-core vaadin-charts-flow