Skip to content

Vaadin Framework 8.32.2

Choose a tag to compare

@thevaadinman thevaadinman released this 12 Oct 12:12
· 1 commit to master since this release
eb162ee

Vaadin Framework 8.32.2 is an Extended Maintenance update release with the following changes:

  • Disabled Atmosphere's CORS header interceptor for security. Backport of Flow PR #26215. Fixes issue #26214.
  • Prevented session lock from leaking if an invalid UI ID was provided in a request from the client to the server to eliminate a potential denial of service vector.