com.vaadin:flow-plugin-base vulnerabilities

CVEs whose affected-version data names the com.vaadin:flow-plugin-base package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-7860Low· 1.6

4mo ago

A possible information disclosure vulnerability exists in the Vaadin Maven plugin and Vaadin Gradle plugin that exposes the full set of environment variables in build logs whenever the frontend build process exits with a non-zero status.…

A possible information disclosure vulnerability exists in the Vaadin Maven plugin and Vaadin Gradle plugin that exposes the full set of environment variables in build logs whenever the frontend build process exits with a non-zero status.…

▾ Sunlitvaadin · com.vaadin:flow-plugin-baseEPSS 0.12%via NVD