{"action":"Upgrade com.vaadin:flow-server to 2.5.3 (2.x) or 6.0.6 (6.x) or later.","affected":[{"fixed":"2.5.3","introduced":"2.0.9"},{"fixed":"6.0.6","introduced":"3.0.0"}],"component":"com.vaadin:flow-server","cve_ids":[],"ecosystem":"Maven","exploited":false,"fixed_versions":["2.5.3","6.0.6"],"ghsa_id":"GHSA-c57f-4vp2-jqhm","id":"tcs_01M5N8RKAPKM74ANHM8ASSPQMB","modified_at":"2024-12-02T05:39:35.536297Z","published_at":"2021-05-06T15:27:04Z","references":["https://osv.dev/vulnerability/GHSA-c57f-4vp2-jqhm","https://github.com/vaadin/flow/security/advisories/GHSA-c57f-4vp2-jqhm","https://github.com/vaadin/flow"],"severity":{"label":"medium","score":6.3},"sources":[{"source":"osv","source_id":"GHSA-c57f-4vp2-jqhm","url":"https://osv.dev/vulnerability/GHSA-c57f-4vp2-jqhm"}],"summary":"Insecure temporary directory usage in frontend build functionality of Vaadin 14 and 15-19"}