{"action":"Upgrade com.vaadin:vaadin-checkbox-flow to 14.6.8 (14.x) or 20.0.6 (20.x) or later.","affected":[{"fixed":"14.6.8","introduced":"12.0.0"},{"fixed":"20.0.6","introduced":"15.0.0"}],"component":"com.vaadin:vaadin-checkbox-flow","cve_ids":["CVE-2021-33605"],"ecosystem":"Maven","epss":0.00665,"exploited":false,"fixed_versions":["14.6.8","20.0.6"],"ghsa_id":"GHSA-qcc4-3rxf-gf4m","id":"tcs_01M5N9983EG0VQQ34QHEWSPGZA","modified_at":"2023-11-08T04:06:05.804479Z","published_at":"2021-08-30T16:16:38Z","references":["https://osv.dev/vulnerability/GHSA-qcc4-3rxf-gf4m","https://github.com/vaadin/flow-components/security/advisories/GHSA-qcc4-3rxf-gf4m","https://nvd.nist.gov/vuln/detail/CVE-2021-33605","https://github.com/vaadin/flow-components/pull/1903","https://github.com/vaadin/flow-components/commit/1aa6bc94c763023bc3fc5849c2a1e8cab3bf6766","https://github.com/vaadin/flow-components/commit/f136532a735f703f1144f19fee48c9009c659f03","https://github.com/vaadin/flow-components","https://vaadin.com/security/cve-2021-33605"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-qcc4-3rxf-gf4m","url":"https://osv.dev/vulnerability/GHSA-qcc4-3rxf-gf4m"}],"summary":"Unauthorized property update in CheckboxGroup component in Vaadin 12-14 and 15-20"}