{"action":"Upgrade com.vaadin:vaadin-bom to 10.0.19 (10.x), 14.6.2 (14.x) or 19.0.9 (19.x) or later.","affected":[{"fixed":"10.0.19","introduced":"10.0.0"},{"fixed":"14.6.2","introduced":"11.0.0"},{"fixed":"19.0.9","introduced":"15.0.0"}],"component":"com.vaadin:vaadin-bom","cve_ids":["CVE-2021-31412"],"ecosystem":"Maven","epss":0.01318,"exploited":false,"fixed_versions":["10.0.19","14.6.2","19.0.9"],"ghsa_id":"GHSA-qrg9-f472-qwfm","id":"tcs_01M5N9A6TRZD3YJPPDKCE0AWDD","modified_at":"2023-11-08T04:05:48.650539Z","published_at":"2021-06-28T16:55:58Z","references":["https://osv.dev/vulnerability/GHSA-qrg9-f472-qwfm","https://github.com/vaadin/platform/security/advisories/GHSA-qrg9-f472-qwfm","https://nvd.nist.gov/vuln/detail/CVE-2021-31412","https://github.com/vaadin/flow/pull/11107","https://vaadin.com/security/cve-2021-31412"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-qrg9-f472-qwfm","url":"https://osv.dev/vulnerability/GHSA-qrg9-f472-qwfm"}],"summary":"Possible route enumeration in production mode via RouteNotFoundError view in Vaadin 10, 11-14, and 15-19"}