8.9.1

DATE	CVE	VULNERABILITY TITLE	RISK
2021-10-13	CVE-2021-33609	Improper Input Validation vulnerability in Vaadin Missing check in DataCommunicator class in com.vaadin:vaadin-server versions 8.0.0 through 8.14.0 (Vaadin 8.0.0 through 8.14.0) allows authenticated network attacker to cause heap exhaustion by requesting too many rows of data. network low complexity vaadin CWE-20	4.3
2021-05-06	CVE-2021-31409	Resource Exhaustion vulnerability in Vaadin Unsafe validation RegEx in EmailValidator component in com.vaadin:vaadin-compatibility-server versions 8.0.0 through 8.12.4 (Vaadin versions 8.0.0 through 8.12.4) allows attackers to cause uncontrolled resource consumption by submitting malicious email addresses. network low complexity vaadin CWE-400	5.0