{"action":"Upgrade com.vaadin:vaadin-bom to 14.5.3 (14.x) or 19.0.5 (19.x) or later.","affected":[{"fixed":"14.5.3","introduced":"14.0.3"},{"fixed":"19.0.5","introduced":"15.0.0"}],"component":"com.vaadin:vaadin-bom","cve_ids":["CVE-2021-31411"],"ecosystem":"Maven","epss":0.00231,"exploited":false,"fixed_versions":["14.5.3","19.0.5"],"ghsa_id":"GHSA-p826-8vhq-h439","id":"tcs_01M5N96X6ABK2EMAJ0J4N09HFB","modified_at":"2023-11-08T04:05:48.589209Z","published_at":"2021-05-06T15:27:12Z","references":["https://osv.dev/vulnerability/GHSA-p826-8vhq-h439","https://github.com/vaadin/platform/security/advisories/GHSA-p826-8vhq-h439","https://nvd.nist.gov/vuln/detail/CVE-2021-31411","https://github.com/vaadin/flow/pull/10640","https://vaadin.com/security/cve-2021-31411"],"severity":{"label":"medium","score":6.3},"sources":[{"source":"osv","source_id":"GHSA-p826-8vhq-h439","url":"https://osv.dev/vulnerability/GHSA-p826-8vhq-h439"}],"summary":"Insecure temporary directory usage in frontend build functionality of Vaadin 14 and 15-19"}