tocsin

CVE-2026-7860

3 advisories.

Maven/com.vaadin:flow-plugins CVE-2026-7860: low, EPSS 0.13%

Vaadin Build Plugins is Affected by a Possible Information Disclosure Vulnerability

Action: Upgrade com.vaadin:flow-plugins to 23.6.11 (23.6.x), 24.9.18 (24.9.x), 24.10.4 (24.10.x), 25.0.12 (25.0.x) or 25.1.5 (25.1.x) or later.

Affected

introducedfixedlast affected
23.0.023.6.11-
24.0.024.9.18-
24.10.024.10.4-
25.0.025.0.12-
25.1.025.1.5-

Fixed versions

23.6.1124.9.1824.10.425.0.1225.1.5

Sources

CVE-2026-7860 · published · modified · JSON

Maven/com.vaadin:flow-maven-plugin CVE-2026-7860: low, EPSS 0.13%

Vaadin Build Plugins is Affected by a Possible Information Disclosure Vulnerability

Action: Upgrade com.vaadin:flow-maven-plugin to 23.6.11 (23.6.x), 24.9.18 (24.9.x), 24.10.4 (24.10.x), 25.0.12 (25.0.x) or 25.1.5 (25.1.x) or later.

Affected

introducedfixedlast affected
23.0.023.6.11-
24.0.024.9.18-
24.10.024.10.4-
25.0.025.0.12-
25.1.025.1.5-

Fixed versions

23.6.1124.9.1824.10.425.0.1225.1.5

Sources

CVE-2026-7860 · published · modified · JSON

Maven/com.vaadin:flow-gradle-plugin CVE-2026-7860: low, EPSS 0.13%

Vaadin Build Plugins is Affected by a Possible Information Disclosure Vulnerability

Action: Upgrade com.vaadin:flow-gradle-plugin to 24.9.18 (24.9.x), 24.10.4 (24.10.x), 25.0.12 (25.0.x) or 25.1.5 (25.1.x) or later.

Affected

introducedfixedlast affected
24.0.024.9.18-
24.10.024.10.4-
25.0.025.0.12-
25.1.025.1.5-

Fixed versions

24.9.1824.10.425.0.1225.1.5

Sources

CVE-2026-7860 · published · modified · JSON