com.vaadin:vaadin-charts-flow-svg-generator vulnerabilities

CVEs whose affected-version data names the com.vaadin:vaadin-charts-flow-svg-generator package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-107588High· 8.4

today

Multiple Vulnerabilities in the Highcharts Library Bundled with Vaadin Charts

Vaadin Charts renders charts with the Highcharts library and pins an exact version of it, 9.2.2 in Vaadin 22 to 24 and 12.2.0 in Vaadin 25, so an application cannot remove these vulnerabilities by upgrading Highcharts on its own. Highsof…

▾ Twilightvaadin · com.vaadin:vaadinvia CVEORG