Official announcement of CVE-2026-111497

Hello Vaadin team,

I would like to ask whether and when you plan to make an official statement whether and which Vaadin versions are affected by the CVE-2026-111497 announced NVD - Home
It would be good to know it for all Vaadin versions.

Best Regards,
Elena

1 Like

It’s also mentioned here if it helps you: Vaadin and the October 2026 Node.js security releases

1 Like