Maven/com.vaadin:vaadin-bom: medium 4
Timing side channel vulnerability in UIDL request handler in Vaadin 10, 11-14, and 15-18
Action: Upgrade com.vaadin:vaadin-bom to 10.0.17 (10.x), 14.4.7 (14.x) or 18.0.6 (18.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 10.0.0 | 10.0.17 | - |
| 11.0.0 | 14.4.7 | - |
| 15.0.0 | 18.0.6 | - |
Fixed versions
| 10.0.17 | 14.4.7 | 18.0.6 |
Sources
- osv: GHSA-c6c4-7x48-4cqp
- https://github.com/vaadin/platform/security/advisories/GHSA-c6c4-7x48-4cqp
- https://github.com/vaadin/platform
- https://vaadin.com/security/cve-2021-31404
published · modified · JSON