Skip to content
OpenAdvisories

Product · vaadin

vaadin-spreadsheet-flow

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-93547

    Missing Authorization Check in Vaadin Spreadsheet Allows Cell Comments to Be Written to Protected Sheets and Locked Cells

    A missing authorization check in the Vaadin Spreadsheet component allows an authenticated user of an application that renders a spreadsheet to add or replace cell comments on a sheet that has protection enabled, including on cells that are locked. Writing a c…

    vaadin vaadin vaadin-spreadsheet-flow vaadin-spreadsheet
  • Medium 4.8
    CVE-2025-15022

    Cross-site scripting in Action caption

    Action captions in Vaadin accept HTML by default but were not sanitized, potentially allowing Cross-site Scripting (XSS) if caption content is derived from user input. In Vaadin Framework 7 and 8, the Action class is a general-purpose class that may be used b…

    vaadin vaadin framework vaadin-spreadsheet-flow Maven