{"action":"Upgrade com.vaadin:vaadin-bom to 14.6.8 (14.x) or 20.0.6 (20.x) or later.","affected":[{"fixed":"14.6.8","introduced":"12.0.0"},{"fixed":"20.0.6","introduced":"15.0.0"}],"component":"com.vaadin:vaadin-bom","cve_ids":[],"ecosystem":"Maven","exploited":false,"fixed_versions":["14.6.8","20.0.6"],"ghsa_id":"GHSA-hw7r-qrhp-5pff","id":"tcs_01M5N91GS19ETXAYXB10QHSWGN","modified_at":"2024-12-02T05:48:58.192273Z","published_at":"2021-08-30T16:16:46Z","references":["https://osv.dev/vulnerability/GHSA-hw7r-qrhp-5pff","https://github.com/vaadin/platform/security/advisories/GHSA-hw7r-qrhp-5pff"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-hw7r-qrhp-5pff","url":"https://osv.dev/vulnerability/GHSA-hw7r-qrhp-5pff"}],"summary":"Unauthorized property update in CheckboxGroup component in Vaadin 12-14 and 15-20"}