{"id":"CVE-2026-2742","summary":"Unauthorized session creation via reserved framework path access","details":"An authentication bypass vulnerability exists in Vaadin 14.0.0 through 14.14.0, 23.0.0 through 23.6.6, 24.0.0 through 24.9.7 and 25.0.0 through 25.0.1, applications using Spring Security due to inconsistent path pattern matching of reserved framework paths.\n\nAccessing the /VAADIN endpoint without a trailing slash bypasses security filters, and allowing unauthenticated users to trigger framework initialization and create sessions without proper authorization.\n\nUsers of affected versions using Spring Security should upgrade as follows: 14.0.0-14.14.0 upgrade to 14.14.1, 23.0.0-23.6.6 to 23.6.7, 24.0.0 - 24.9.7 to 24.9.8, and 25.0.0-25.0.1 upgrade to 25.0.2 or newer.\n\nPlease note that Vaadin versions 10-13 and 15-22 are no longer supported and you should update either to the latest 14, 23, 24, 25 version.","aliases":["GHSA-rjgh-wgc7-m37j"],"modified":"2026-07-15T02:18:19.172303881Z","published":"2026-03-10T12:08:48.738Z","database_specific":{"cwe_ids":["CWE-284"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/2xxx/CVE-2026-2742.json","cna_assigner":"Vaadin"},"references":[{"type":"WEB","url":"https://repo.maven.apache.org/maven2"},{"type":"WEB","url":"https://vaadin.com/security/cve-2026-2742"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/2xxx/CVE-2026-2742.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-2742"},{"type":"FIX","url":"https://github.com/vaadin/flow/pull/22998"},{"type":"FIX","url":"https://github.com/vaadin/flow/pull/23033"},{"type":"FIX","url":"https://github.com/vaadin/flow/pull/23034"},{"type":"FIX","url":"https://github.com/vaadin/flow/pull/23037"},{"type":"FIX","url":"https://github.com/vaadin/flow/pull/23052"},{"type":"FIX","url":"https://github.com/vaadin/flow/pull/23057"},{"type":"PACKAGE","url":"https://github.com/vaadin/flow"},{"type":"PACKAGE","url":"https://github.com/vaadin/platform"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/vaadin/flow","events":[{"introduced":"0"},{"last_affected":"f629e550348397e0b4a976afbbf2594c8d21332d"},{"introduced":"f5bd08834302a4f461b920dea6d0be8808e88a50"},{"last_affected":"e6c6742c388e74ab77dfb4eac5c239ed57025925"},{"introduced":"d3e5f6448dd0563cd62137836ea4fd5be69c9067"},{"fixed":"dc64bafff1d2bf12e73ce433941c484b8d123d53"},{"introduced":"3cd0c02025aba6de6fd78a8ea65c67483a721b4e"},{"last_affected":"02bb22cdab8d90dcfdce70dc05842481d0ed17be"},{"introduced":"4b6ca4330163c4e976b32d03880fe2154a9d1ca7"},{"last_affected":"90076b751b26030a271942c3d523b732ced97219"}],"database_specific":{"source":"AFFECTED_FIELD","extracted_events":[{"introduced":"15.0.0"},{"last_affected":"23.6.6"},{"introduced":"24.0.0"},{"last_affected":"24.9.7"},{"introduced":"25.0.0"},{"last_affected":"25.0.1"},{"fixed":"25.0.1"},{"introduced":"1.0.0"},{"last_affected":"2.13.0"},{"introduced":"3.0.0"},{"last_affected":"23.6.7"}]}},{"type":"GIT","repo":"https://github.com/vaadin/platform","events":[{"introduced":"8e1b5f1a3f9bb984108d172f19d4d2df4a1987f5"},{"fixed":"ecdbd581aa8f05d30390b791c53a3d61a25fda3c"},{"introduced":"354ad0186b5e61b548adad84de03af297dc6f2a6"},{"fixed":"e576f406b9f7f28cc7df549145e7983cd4efb25c"},{"introduced":"6aea8fa5fdf6b2c7645a54e1bc38978ee40b26df"},{"fixed":"e4a10d57d219a197451591c596fe19334ba7ddb1"},{"introduced":"f7582b4be60fe9100489237bb8b022783a288766"},{"fixed":"e5c34fb3b0b6606502ccd91a25514f44b1672859"}],"database_specific":{"extracted_events":[{"introduced":"10.0.0"},{"fixed":"14.14.1"},{"introduced":"15.0.0"},{"fixed":"23.6.7"},{"introduced":"24.0.0"},{"fixed":"24.9.8"},{"introduced":"25.0.0"},{"fixed":"25.0.2"}],"source":"CPE_RANGE","cpe":"cpe:2.3:a:vaadin:vaadin:*:*:*:*:*:*:*:*"}},{"type":"GIT","repo":"https://github.com/vaadin/vaadin","events":[{"introduced":"7ac406600a3c1a228e15ba253fe844f7e13771a0"},{"fixed":"2fb28ea68d4354625468e8d53dd87e892e466057"},{"introduced":"9efda1b1e0a27769eef9292dd7799d8fea77e633"},{"fixed":"220a7e475d06b7442c8f6f45ce4b08c78f19e828"},{"introduced":"a45cc881358732b3d594b20750f1369a65d7237a"},{"fixed":"a3ea95049825d8510cdb110cb9e6a663182e084b"},{"introduced":"1bbe0e9e6b57f11d3fbb7b58810f72fbf106ef43"},{"fixed":"321adece24930836170106a4b719a3c5c55a2362"}],"database_specific":{"source":"CPE_RANGE","cpe":"cpe:2.3:a:vaadin:vaadin:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"10.0.0"},{"fixed":"14.14.1"},{"introduced":"15.0.0"},{"fixed":"23.6.7"},{"introduced":"24.0.0"},{"fixed":"24.9.8"},{"introduced":"25.0.0"},{"fixed":"25.0.2"}]}}],"versions":["2.10.5","25.0.0","24.9.7","24.9.6","23.6.7","24.9.5","2.13.0-beta1","2.13.0","24.9.4","24.9.3","24.9.2","23.6.6","24.9.1","2.12.3","24.9.0","24.9.0-rc2","23.6.5","24.9.0-rc1","24.9.0-beta3","24.9.0-beta2","24.9.0-beta1","24.9.0-alpha6","23.6.4","2.12.2","24.9.0-alpha5","24.9.0-alpha4","23.6.3","24.9.0-alpha3","23.6.2","24.9.0-alpha2","2.12.1","24.9.0-alpha1","24.8.0","24.8.0.rc2","24.8.0.rc1","23.6.1","2.12.0","24.8.0.beta4","23.6.0","24.8.0.beta3","24.8.0.beta2","24.8.0.beta1","24.8.0.alpha15","2.12.0.alpha3","24.8.0.alpha14","2.12.0.alpha2","24.8.0.alpha13","23.6.0.alpha3","23.5.13","2.12.0.alpha1","24.8.0.alpha12","24.8.0.alpha11","23.6.0.alpha2","24.8.0.alpha10","23.6.0.alpha1","24.8.0.alpha9","24.8.0.alpha8","24.8.0.alpha7","24.8.0.alpha6","24.8.0.alpha5","24.8.0.alpha4","24.8.0.alpha3","24.8.0.alpha2","24.7.0.beta1","24.8.0.alpha1","24.7.0.alpha15","24.7.0.alpha14","24.7.0.alpha13","2.11.5","23.5.12","24.7.0.alpha12","24.7.0.alpha11","24.7.0.alpha10","24.7.0.alpha9","24.7.0.alpha8","2.11.4","24.7.0.alpha7","24.7.0.alpha6","24.7.0.alpha5","24.7.0.alpha4","23.5.11","24.7.0.alpha3","24.7.0.alpha2","2.11.3","23.5.10","24.7.0.alpha1","24.6.0.beta3","24.6.0.beta2","24.6.0.beta1","24.6.0.alpha6","23.5.9","24.6.0.alpha5","2.11.2","23.5.8","24.6.0.alpha4","24.6.0.alpha3","24.6.0.alpha2","23.5.7","2.11.1","24.6.0.alpha1","23.5.6","23.5.5","24.5.0.beta1","24.5.0.alpha20","23.5.4","24.5.0.alpha19","24.5.0.alpha18","24.5.0.alpha17","23.5.3","24.5.0.alpha16","24.5.0.alpha15","24.5.0.alpha14","24.5.0.alpha13","24.5.0.alpha12","24.5.0.alpha11","24.5.0.alpha10","2.11.0.rc1","2.11.0.beta1","2.11.0","24.5.0.alpha9","24.5.0.alpha8","2.11.0.alpha1","23.5.2","24.5.0.alpha7","24.5.0.alpha6","24.5.0.alpha5","24.5.0.alpha4","24.5.0.alpha3","24.5.0.alpha2","24.5.0.alpha1","2.10.4","23.5.1","24.4.0.beta1","24.4.0.alpha32","24.4.0.alpha31","23.5.0","24.4.0.alpha30","24.4.0.alpha29","23.4.0","24.4.0.alpha28","24.4.0.alpha27","24.4.0.alpha26","23.5.0.alpha2","24.4.0.alpha25","24.4.0.alpha24","23.5.0.alpha1","24.4.0.alpha23","24.4.0.alpha22","24.4.0.alpha21","24.4.0.alpha20","24.4.0.alpha19","24.4.0.alpha18","24.4.0.alpha17","24.4.0.alpha16","24.4.0.alpha15","24.4.0.alpha14","23.4.0.beta1","24.4.0.alpha13","24.4.0.alpha12","23.4.0.alpha2","24.4.0.alpha11","24.4.0.alpha10","24.4.0.alpha9","24.4.0.alpha8","24.4.0.alpha7","24.4.0.alpha6","2.10.3","24.4.0.alpha5","24.4.0.alpha4","24.4.0.alpha3","2.10.2","2.10.1","24.4.0.alpha2","2.10.0","24.4.0.alpha1","23.4.0.alpha1","2.10.0.alpha3","24.3.0.beta1","24.3.0.alpha7","24.3.0.alpha6","23.3.24","24.3.0.alpha5","24.3.0.alpha4","24.3.0.alpha3","2.10.0.alpha2","24.3.0.alpha2","23.3.23","24.3.0.alpha1","23.3.22","23.3.21","2.10.0.alpha1","24.2.0.beta1","23.3.20","24.2.0.alpha9","23.3.19","24.2.0.alpha8","23.3.18","24.2.0.alpha7","24.2.0.alpha6","23.3.17","24.2.0.alpha5","24.2.0.alpha4","23.3.16","24.2.0.alpha3","23.3.15","24.2.0.alpha2","23.3.14","24.2.0.alpha1","2.9.3","23.3.13","2.9.2","2.9.1","23.3.12","23.3.11","24.1.0.beta1","23.3.10","24.1.0.alpha8","2.9.0.rc1","2.9.0","24.1.0.alpha7","24.1.0.alpha6","24.1.0.alpha5","24.1.0.alpha4","23.3.9","2.9.0.beta1","23.3.8","24.1.0.alpha3","2.9.0.alpha2","23.3.7","24.1.0.alpha2","23.3.6","2.9.0.alpha1","24.1.0.alpha1","23.3.5","2.8.5","23.3.4","24.0.0.beta1","2.8.4","24.0.0.alpha17","24.0.0.alpha16","23.3.3","24.0.0.alpha15","24.0.0.alpha14","2.8.3","24.0.0.alpha13","24.0.0.alpha12","23.3.2","24.0.0.alpha11","23.3.1","24.0.0.alpha10","2.8.2","23.3.0","23.3.0.rc2","23.3.0.rc1","23.3.0.beta4","23.3.0.beta3","2.8.1","24.0.0.alpha9","23.3.0.beta2","23.3.0.beta1","24.0.0.alpha8","23.3.0.alpha3","24.0.0.alpha7","23.3.0.alpha2","2.8.0","24.0.0.alpha6","2.8.0.rc1","24.0.0.alpha5","2.8.0.beta1","24.0.0.alpha4","24.0.0.alpha3","2.8.0.alpha1","23.3.0.alpha1","23.2.0","23.2.0.rc2","23.2.0.rc1","23.2.0.beta3","23.2.0.beta2","23.2.0.beta1","23.2.0.alpha2","23.2.0.alpha1","23.1.0.beta1","23.1.0.alpha4","23.1.0.alpha3","23.1.0.alpha2","23.1.0.alpha1","10.0.0.beta1","10.0.0.alpha5","10.0.0.alpha4","10.0.0.alpha3","10.0.0.alpha2","10.0.0.alpha1","9.0.0.rc1","2.7.4","9.0.0.beta4","9.0.0.beta3","2.7.3","9.0.0.beta2","9.0.0.beta1","9.0.0.alpha11","9.0.0.alpha10","2.7.2","9.0.0.alpha9","9.0.0.alpha8","9.0.0.alpha7","9.0.0.alpha6","2.7.1","9.0.0.alpha5","9.0.0.alpha4","2.7.0","2.7.0.rc1","9.0.0.alpha3","2.7.0.beta1","9.0.0.alpha2","2.7.0.alpha2","9.0.0.alpha1","8.0.0.alpha10","8.0.0.alpha9","8.0.0.alpha8","8.0.0.alpha7","8.0.0.alpha6","8.0.0.alpha5","8.0.0.alpha4","8.0.0.alpha3","2.7.0.alpha1","8.0.0.alpha2","8.0.0.alpha1","2.6.0.rc1","7.0.0.beta1","7.0.0.alpha7","7.0.0.alpha6","2.6.0.beta2","7.0.0.alpha5","7.0.0.alpha4","2.6.0.beta1","7.0.0.alpha3","7.0.0.alpha2","2.6.0.alpha1","7.0.0.alpha1","2.5.0.alpha2","6.0.0.beta1","2.5.0.alpha1","6.0.0.alpha5","6.0.0.alpha4","6.0.0.alpha3","6.0.0.alpha2","6.0.0.alpha1","5.0.0.beta1","2.4.0","5.0.0.alpha1","2.4.0.beta2","2.4.0.beta1","2.4.0.alpha1","2.3.4","2.3.3","4.0.0.beta1","2.3.2","4.0.0.alpha3","2.3.1","4.0.0.alpha2","2.3.0","4.0.0.alpha1","2.3.0.beta3","2.3.0.beta2","3.2.0.alpha7","2.3.0.beta1","3.2.0.alpha6","3.2.0.alpha5","3.2.0.alpha4","2.3.0.alpha1","2.2.0.rc1","3.2.0.alpha3","2.2.0.beta2","3.2.0.alpha2","2.2.0.beta1","3.2.0.alpha1","2.2.0.alpha16","2.2.0.alpha15","2.2.0.alpha14","3.0.0.beta2","2.2.alpha14","3.0.0.beta4","3.0.0.beta3","2.2.0.alpha13","3.0.0.beta1","3.0.0.alpha17","2.2.0.alpha12","2.2.0.alpha11","2.2.0.alpha10","2.2.0.alpha9","2.2.0.alpha8","2.2.0.alpha7","2.2.0.alpha6","2.2.0.alpha5","2.2.0.alpha4","2.2.0.alpha3","2.2.0.alpha2","2.2.0.alpha1","2.1.0.beta3","3.0.0.alpha5","2.1.0.beta1","2.1.0.alpha1","2.0.8","2.0.7","2.0.6","2.0.5","2.0.4","2.0.3","2.0.2","2.0.1","2.0.0","2.0.0.rc3","2.0.0.rc2","2.0.0.rc1","2.0.0.beta2","2.0.0.beta1","2.0.0.alpha5","1.5.0.alpha4","1.5.0.alpha3","1.5.0.alpha2","1.5.0.alpha1","1.3.0.alpha3","1.3.0.alpha2","1.2.0","1.2.0.beta2","1.2.0.beta1","1.2.0.alpha1","1.1.0","1.1.0.beta4","1.1.0.beta3","1.1.0.beta2","1.1.0.beta1","1.1.0.alpha3","1.1.0.alpha2","1.1.0.alpha1","1.0.0","14.14.0","14.14.0-beta1","14.13.2","24.9.0-alpha7","14.13.1","14.13.0","14.13.0.alpha1","14.12.8","14.12.7","14.12.6","24.8-SNAPSHOT","23.5.15","14.12.5","14.12.4","23.5.14","24.7-SNAPSHOT","14.12.3","14.12.2","24.6-SNAPSHOT","24.5.0.rc1","24.5.0.beta6","24.5.0.beta5","24.5.0.beta4","24.5.0.beta3","24.5.0.beta2","14.12.1","14.12.0","14.12.0.rc1","14.12.0.beta1","14.12.0.alpha1","14.11.11","14.11.10","24.5-SNAPSHOT","14.11.9","14.11.8","14.11.7","14.11.6","14.11.5","14.11.4","14.11.3","14.11.2","14.11.1","14.11.0","24.4.x.branch","24.3.0","24.4-SNAPSHOT","14.11.0.alpha2","24.3.0.rc1","23.3.26","23.3.25","24.3-SNAPSHOT","14.11.0.alpha1","24.2.0.alpha11","24.2.0.alpha10","14.10.3","14.10.2","14.10.1","24.1.0.beta3","24.2-SNAPSHOT","24.1.0.beta2","14.10.0","14.10.0.beta1","14.10.0.alpha3","14.10.0.alpha2","14.10.0.alpha1","14.9.4","14.9.3","14.9.2","14.9.1","24.0.0.alpha2","14.9.0","14.9.0.rc1","14.9.0.beta1","14.9.0.alpha1","14.8.17","14.8.16","23.2.0.beta4","14.8.15","23.2.0.alpha3","14.8.14","14.8.13","14.8.12","14.8.11","14.8.10","14.8.9","14.8.8","14.8.7","14.8.6","14.8.5","23.0.0","23.0.0.rc1","23.0.0.beta4","23.0.0.beta3","23.0.0.beta2","14.8.4","23.0.0.beta1","23.0.0.alpha4","14.8.3","23.0.0.alpha3","14.8.2","23.0.0.alpha2","14.8.1","23.0.0.alpha1","14.8.0","14.8.0.beta1","14.8.0.alpha1","22.0.0.beta3","22.0.0.beta2","22.0.0.beta1","22.0.0.alpha9","22.0.0.alpha8","22.0.0.alpha7","22.0.0.alpha6","22.0.0.alpha5","22.0.0.alpha4","14.7.0","22.0.0.alpha3","14.7.0.rc1","22.0.0.alpha2","14.7.0.beta1","22.0.0.alpha1","14.7.0.alpha3","21.0.0.alpha10","21.0.0.alpha9","21.0.0.alpha8","21.0.0.alpha7","14.7.0.alpha2","21.0.0.alpha6","21.0.0.alpha5","21.0.0.alpha4","21.0.0.alpha3","21.0.0.alpha2","21.0.0.alpha1","14.7.0.alpha1","14.6.0.beta2","20.0.0.alpha8","14.6.0.beta1","20.0.0.alpha7","14.6.0.alpha2","20.0.0.alpha6","20.0.0.alpha5","20.0.0.alpha4","14.6.0.alpha1","14.5.0.rc1","20.0.0.alpha3","14.5.0.beta1","19.0.0.beta4","19.0.0.beta3","19.0.0.beta2","19.0.0.beta1","14.5.0.alpha3","14.5.0.alpha2","14.5.0.alpha1","19.0.0.alpha5","19.0.0.alpha4","19.0.0.alpha3","19.0.0.alpha2","19.0.0.alpha1","18.0.0.beta2","18.0.0.beta1","18.0.0.alpha1","14.4.0","14.4.0.rc1","14.4.0.beta2","14.4.0.beta1","14.4.0.alpha1","17.0.0","17.0.0.rc2","17.0.0.rc1","17.0.0.beta3","17.0.0.beta2","17.0.0.beta1","17.0.0.alpha7","17.0.0.alpha6","16.0.1","14.3.0.rc1","14.3.0","14.3.0.beta3","17.0.0.alpha5","14.3.0.beta2","14.3.0.beta1","17.0.0.alpha4","17.0.0.alpha3","17.0.0.alpha2","14.3.0.alpha1","14.2.0","14.2.0.rc1","14.2.0.beta1","16.0.0.alpha3","16.0.0.alpha2","14.2.0.alpha11","16.0.0.alpha1","14.2.0.alpha10","14.2.0.alpha9","14.2.0.alpha8","14.2.0.alpha7","14.2.0.alpha6","15.0.0.rc1","15.0.0","14.2.0.alpha5","14.2.0.alpha4","14.2.0.alpha3","14.2.0.alpha2","14.2.0.alpha1","14.1.2","14.1.1","14.1.0","14.1.0.beta2","14.1.0.beta1","14.1.0.alpha3","14.1.0.alpha1","14.0.2","14.0.1","14.0.0","14.0.0.rc9","14.0.0.rc7","14.0.0.rc6","14.0.0.rc5","14.0.0.rc4","14.0.0.rc3","14.0.0.rc2","14.0.0.rc1","14.0.0.beta3","14.0.0.beta2","14.0.0.beta1","14.0.0.alpha4","14.0.0.alpha3","14.0.0.alpha2","14.0.0.alpha1","13.0.1","13.0.0","13.0.0.beta3","13.0.0.beta2","13.0.0.beta1","13.0.0.alpha4","13.0.0.alpha3","13.0.0.alpha2","13.0.0.alpha1","12.0.0.beta2","12.0.0.beta1","12.0.0.alpha5","12.0.0.alpha4","12.0.0.alpha3","12.0.0.alpha2","12.0.0.alpha1","11.0.0.beta1","11.0.0.alpha1","10.0.2","10.0.1","10.0.0","v23.6.3","v14.14.0","v23.6.6","v25.0.0","v24.9.7","v23.6.5","v24.9.6","v24.9.5","v23.6.4","v14.14.0-beta1","v24.9.4","v14.13.2","v24.9.3","v24.9.2","v24.9.1","v24.9.0","v24.9.0-rc2","v24.9.0-rc1","v24.9.0-beta3","v24.9.0-beta2","v23.6.2","v24.9.0-beta1","v24.9.0-alpha7","v24.9.0-alpha6","v14.13.1","v24.9.0-alpha5","v24.9.0-alpha4","v23.6.1","v23.6.0","v14.13.0","v24.9.0-alpha3","v24.9.0-alpha2","v24.9.0-alpha1","v24.8.0-alpha7","v24.8.0","v24.8.0-rc2","v24.8.0-rc1","v24.8.0-beta3","v24.8.0-beta2","v23.6.0-alpha1","v14.13.0-alpha1","v24.8.0-beta1","v24.8.0-alpha8","v14.12.8","v23.5.15","v24.8.0-alpha6","v24.8.0-alpha5","v14.12.7","v24.8.0-alpha4","v24.8.0-alpha3","v24.8.0-alpha2","v14.12.6","v24.8.0-alpha1","v24.7.0-beta1","v24.7.0-alpha12","v24.7.0-alpha11","v14.12.5","v24.7.0-alpha10","v24.7.0-alpha9","v24.7.0-alpha8","v23.5.14","v14.12.4","v24.7.0-alpha7","v24.7.0-alpha6","v24.7.0-alpha5","v24.7.0-alpha4","v24.7.0-alpha3","v24.7.0-alpha2","v24.7.0-alpha1","v14.12.3","v24.6.0-beta3","v23.5.13","v23.5.12","v24.6.0-beta1","v23.5.11","v24.6.0-alpha4","v24.6.0-alpha3","v23.5.10","v24.6.0-alpha2","v23.5.9","v23.5.8","v24.6.0-alpha1","v14.12.2","v23.5.7","v14.12.1","v24.5.0-rc1","v24.5.0-beta6","v24.5.0-beta5","v24.5.0-beta4","v24.5.0-beta3","v23.5.6","v24.5.0-beta2","v24.5.0-beta1","v23.5.5","v24.5.0-alpha17","v23.5.4","v14.12.0","v24.5.0-alpha16","v24.5.0-alpha15","v24.5.0-alpha14","v24.5.0-alpha13","v24.5.0-alpha12","v24.5.0-alpha10","v24.5.0-alpha9","v14.12.0-rc1","v24.5.0-alpha8","v23.5.3","v14.12.0-beta1","v14.12.0-alpha1","v24.5.0-alpha7","v24.5.0-alpha6","v24.5.0-alpha5","v23.5.2","v14.11.11","v24.5.0-alpha4","v24.5.0-alpha3","v24.5.0-alpha2","v23.5.1","v24.5.0-alpha1","v14.11.10","v24.4.0-beta1","v23.5.0","v23.4.0","v14.11.9","v24.4.0-alpha25","v24.4.0-alpha24","v24.4.0-alpha23","v14.11.8","v24.4.0-alpha22","v24.4.0-alpha21","v14.11.7","v23.5.0-alpha1","v24.4.0-alpha20","v24.4.0-alpha19","v24.4.0-alpha18","v24.4.0-alpha17","v24.4.0-alpha16","v24.4.0-alpha15","v24.4.0-alpha14","v14.11.6","v14.11.5","v24.4.0-alpha13","v24.4.0-alpha11","v24.4.0-alpha10","v24.4.0-alpha9","v23.4.0-beta1","v24.4.0-alpha8","v14.11.4","v14.11.3","v24.4.0-alpha7","v23.4.0-alpha2","v24.4.0-alpha5","v24.4.0-alpha4","v24.4.0-alpha3","v24.4.0-alpha2","v14.11.2","v23.4.0-alpha1","v24.4.0-alpha1","v14.11.1","v24.3.0","v14.11.0","v23.3.26","v14.11.0-alpha2","v24.3.0-rc1","v14.11.0-alpha1","v24.3.0-beta1","v24.3.0-alpha6","v24.3.0-alpha5","v24.3.0-alpha4","v24.3.0-alpha3","v24.3.0-alpha2","v24.3.0-alpha1","v24.2.0-alpha11","v23.3.25","v23.3.24","v14.10.3","v23.3.23","v24.2.0-alpha10","v23.3.22","v23.3.21","v24.2.0-alpha9","v24.2.0-alpha8","v24.2.0-alpha7","v23.3.20","v24.2.0-alpha6","v23.3.19","v24.2.0-alpha5","v24.2.0-alpha4","v23.3.18","v23.3.17","v24.2.0-alpha3","v23.3.16","v24.2.0-alpha2","v24.2.0-alpha1","v23.3.15","v14.10.2","v24.1.0-beta3","v23.3.14","v23.3.13","v14.10.1","v23.3.12","v14.10.0","v24.1.0-beta2","v24.1.0-beta1","v24.1.0-alpha6","v24.1.0-alpha5","v24.1.0-alpha4","v14.10.0-beta1","v23.3.11","v24.1.0-alpha3","v14.10.0-alpha3","v24.1.0-alpha2","v14.10.0-alpha2","v23.3.10","v23.3.9","v24.1.0-alpha1","v23.3.8","v24.0.0-beta1","v23.3.7","v14.10.0-alpha1","v23.3.6","v23.3.5","v24.0.0-alpha10","v24.0.0-alpha9","v14.9.4","v23.3.4","v24.0.0-alpha8","v23.3.3","v24.0.0-alpha7","v23.3.2","v24.0.0-alpha6","v23.3.1","v14.9.3","v23.3.0","v24.0.0-alpha5","v14.9.2","v23.3.0-rc1","v23.3.0-beta2","v23.3.0-beta1","v14.9.1","v24.0.0-alpha4","v23.3.0-alpha3","v23.3.0-alpha2","v24.0.0-alpha2","v23.3.0-alpha1","v14.9.0","v14.9.0-rc1","v14.9.0-beta1","v14.9.0-alpha1","v14.8.17","v23.2.0","v14.8.16","v23.2.0-rc1","v23.2.0-beta4","v23.2.0-beta3","v23.2.0-beta2","v14.8.15","v23.2.0-beta1","v23.2.0-alpha3","v14.8.14","v23.2.0-alpha1","v14.8.13","v23.1.0-beta1","v14.8.12","v14.8.11","v14.8.10","v14.8.9","v23.1.0-alpha4","v23.1.0-alpha3","v14.8.8","v23.1.0-alpha2","v23.1.0-alpha1","v14.8.7","v23.0.0","v14.8.6","v14.8.5","v14.8.4","v23.0.0-rc1","v23.0.0-beta4","v23.0.0-beta3","v23.0.0-beta2","v23.0.0-beta1","v14.8.3","v23.0.0-alpha4","v23.0.0-alpha3","v14.8.2","v23.0.0-alpha2","v14.8.1","v23.0.0-alpha1","v22.0.0-beta3","v14.8.0","v14.8.0-beta1","v14.8.0-alpha1","v14.7.0-rc1","v22.0.0-beta2","v22.0.0-beta1","v22.0.0-alpha9","v22.0.0-alpha8","v22.0.0-alpha7","v22.0.0-alpha6","v22.0.0-alpha5","v22.0.0-alpha4","v22.0.0-alpha3","v22.0.0-alpha2","v14.7.0-beta1","v22.0.0-alpha1","v14.7.0-alpha3","v14.7.0-alpha2","v21.0.0-alpha10","v21.0.0-alpha0","v21.0.0-alpha9","v21.0.0-alpha8","v21.0.0-alpha7","v21.0.0-alpha6","v21.0.0-alpha5","v21.0.0-alpha4","v21.0.0-alpha3","v21.0.0-alpha2","v21.0.0-alpha1","v14.7.0-alpha1","v20.0.0-alpha8","v14.6.0-beta2","v20.0.0-alpha7","v14.6.0-beta1","v14.6.0-alpha2","v20.0.0-alpha6","v20.0.0-alpha5","v14.6.0-alpha1","v20.0.0-alpha4","v20.0.0-alpha3","v14.5.0-rc1","v14.5.0-beta1","v20.0.0-alpha2","v20.0.0-alpha1","v14.5.0-alpha3","v19.0.0-beta3","v19.0.0-beta2","v19.0.0-beta1","v19.0.0-alpha5","v14.5.0-alpha2","v14.5.0-alpha1","v14.4.0","v19.0.0-alpha4","v19.0.0-alpha3","v19.0.0-alpha2","v19.0.0-alpha1","v18.0.0-beta2","v18.0.0-beta1","v18.0.0-alpha1","v17.0.0","v14.4.0-rc1","v14.4.0-beta2","v14.4.0-beta1","v14.4.0-alpha1","v17.0.0-rc1","v14.3.0","v17.0.0-rc2","v17.0.0-beta3","v17.0.0-beta2","v17.0.0-beta1","v17.0.0-alpha7","v17.0.0-alpha6","v17.0.0-alpha5","v14.3.0-rc1","v14.3.0-beta3","v17.0.0-alpha4","v14.3.0-beta2","v14.3.0-beta1","v14.3.0-alpha1","v17.0.0-alpha3","v14.2.0","v17.0.0-alpha2","v17.0.0-alpha1","v16.0.0-alpha3","v14.2.0-rc1","v14.2.0-beta1","v14.2.0-alpha11","v16.0.0-alpha2","v16.0.0-alpha1","v14.2.0-alpha10","v15.0.0-rc1","v14.2.0-alpha9","v14.2.0-alpha8","v14.2.0-alpha7","v14.2.0-alpha6","v14.2.0-alpha5","v15.0.0-beta5","v14.2.0-alpha4","v15.0.0-beta4","v15.0.0-beta3","v15.0.0-beta2","v15.0.0-beta1","v14.2.0-alpha3","v15.0.0-alpha15","v15.0.0-alpha14","v15.0.0-alpha13","v15.0.0-alpha12","v15.0.0-alpha11","v14.2.0-alpha2","v15.0.0-alpha10","v14.2.0-alpha1","v14.1.2","v15.0.0-alpha9","v15.0.0-alpha8","v15.0.0-alpha7","v14.1.1","v15.0.0-alpha6","v15.0.0-alpha5","v14.1.0","v14.1.0-rc1","v15.0.0-alpha4","v14.1.0-beta3","v14.1.0-beta2","v14.1.0-beta1","v15.0.0-alpha3","v14.1.0-alpha5","v15.0.0-alpha2","v14.1.0-alpha4","v14.1.0-alpha3","v14.1.0-alpha2","v15.0.0-alpha1","v14.1.0-alpha1","v14.0.2","v14.0.1","v14.0.0","v14.0.0-rc9","v14.0.0-rc8","v14.0.0-rc7","v14.0.0-rc6","v14.0.0-rc5","v14.0.0-rc4","v14.0.0-rc3","v14.0.0-rc2","v14.0.0-rc1","v14.0.0-beta3","v14.0.0-beta2","v14.0.0-beta1","v14.0.0-alpha4","v14.0.0-alpha3","v14.0.0-alpha2","v14.0.0-alpha1","v13.0.1","v13.0.0","v13.0.0-beta3","v13.0.0-beta2","v13.0.0-beta1","v13.0.0-alpha4","v13.0.0-alpha3","v13.0.0-alpha2","v13.0.0-alpha1","v12.0.2","v12.0.1","v12.0.0","v12.0.0-beta2","v12.0.0-beta1","v12.0.0-alpha5","v12.0.0-alpha4","v12.0.0-alpha3","v12.0.0-alpha2","v12.0.0-alpha1","v10.0.2","v11.0.0-beta1","v11.0.0-alpha1","v10.0.1","v10.0.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-2742.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/S:N/AU:Y/R:A/V:D/RE:L/U:Amber"}]}