Maven/com.vaadin:flow-server: medium 6.3
Insecure temporary directory usage in frontend build functionality of Vaadin 14 and 15-19
Action: Upgrade com.vaadin:flow-server to 2.5.3 (2.x) or 6.0.6 (6.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.9 | 2.5.3 | - |
| 3.0.0 | 6.0.6 | - |
Fixed versions
| 2.5.3 | 6.0.6 |
Sources
- osv: GHSA-c57f-4vp2-jqhm
- https://github.com/vaadin/flow/security/advisories/GHSA-c57f-4vp2-jqhm
- https://github.com/vaadin/flow
published · modified · JSON