CVE-2026-2742

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-2742
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-2742.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-2742
Aliases
Published
2026-03-10T12:08:48.738Z
Modified
2026-07-08T08:12:41.279432739Z
Severity
  • 5.3 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/S:N/AU:Y/R:A/V:D/RE:L/U:Amber CVSS Calculator
Summary
Unauthorized session creation via reserved framework path access
Details

An authentication bypass vulnerability exists in Vaadin 14.0.0 through 14.14.0, 23.0.0 through 23.6.6, 24.0.0 through 24.9.7 and 25.0.0 through 25.0.1, applications using Spring Security due to inconsistent path pattern matching of reserved framework paths.

Accessing the /VAADIN endpoint without a trailing slash bypasses security filters, and allowing unauthenticated users to trigger framework initialization and create sessions without proper authorization.

Users of affected versions using Spring Security should upgrade as follows: 14.0.0-14.14.0 upgrade to 14.14.1, 23.0.0-23.6.6 to 23.6.7, 24.0.0 - 24.9.7 to 24.9.8, and 25.0.0-25.0.1 upgrade to 25.0.2 or newer.

Please note that Vaadin versions 10-13 and 15-22 are no longer supported and you should update either to the latest 14, 23, 24, 25 version.

Database specific 
{
    "cna_assigner": "Vaadin",
    "cwe_ids": [
        "CWE-284"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/2xxx/CVE-2026-2742.json"
}
References

Affected packages

Git / github.com/vaadin/flow

Affected ranges

Type
GIT
Repo
https://github.com/vaadin/flow
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Introduced
f5bd08834302a4f461b920dea6d0be8808e88a50
Introduced
d3e5f6448dd0563cd62137836ea4fd5be69c9067
Fixed
dc64bafff1d2bf12e73ce433941c484b8d123d53
Introduced
3cd0c02025aba6de6fd78a8ea65c67483a721b4e
Introduced
4b6ca4330163c4e976b32d03880fe2154a9d1ca7
Database specific 
{
    "extracted_events": [
        {
            "introduced": "15.0.0"
        },
        {
            "last_affected": "23.6.6"
        },
        {
            "introduced": "24.0.0"
        },
        {
            "last_affected": "24.9.7"
        },
        {
            "introduced": "25.0.0"
        },
        {
            "last_affected": "25.0.1"
        },
        {
            "fixed": "25.0.1"
        },
        {
            "introduced": "1.0.0"
        },
        {
            "last_affected": "2.13.0"
        },
        {
            "introduced": "3.0.0"
        },
        {
            "last_affected": "23.6.7"
        }
    ],
    "source": "AFFECTED_FIELD"
}
Type
GIT
Repo
https://github.com/vaadin/platform
Events
Introduced
8e1b5f1a3f9bb984108d172f19d4d2df4a1987f5
Fixed
ecdbd581aa8f05d30390b791c53a3d61a25fda3c
Introduced
354ad0186b5e61b548adad84de03af297dc6f2a6
Fixed
e576f406b9f7f28cc7df549145e7983cd4efb25c
Introduced
6aea8fa5fdf6b2c7645a54e1bc38978ee40b26df
Fixed
e4a10d57d219a197451591c596fe19334ba7ddb1
Introduced
f7582b4be60fe9100489237bb8b022783a288766
Fixed
e5c34fb3b0b6606502ccd91a25514f44b1672859
Database specific 
{
    "extracted_events": [
        {
            "introduced": "10.0.0"
        },
        {
            "fixed": "14.14.1"
        },
        {
            "introduced": "15.0.0"
        },
        {
            "fixed": "23.6.7"
        },
        {
            "introduced": "24.0.0"
        },
        {
            "fixed": "24.9.8"
        },
        {
            "introduced": "25.0.0"
        },
        {
            "fixed": "25.0.2"
        }
    ],
    "cpe": "cpe:2.3:a:vaadin:vaadin:*:*:*:*:*:*:*:*",
    "source": "CPE_RANGE"
}
Type
GIT
Repo
https://github.com/vaadin/vaadin
Events
Introduced
7ac406600a3c1a228e15ba253fe844f7e13771a0
Fixed
2fb28ea68d4354625468e8d53dd87e892e466057
Introduced
9efda1b1e0a27769eef9292dd7799d8fea77e633
Fixed
220a7e475d06b7442c8f6f45ce4b08c78f19e828
Introduced
a45cc881358732b3d594b20750f1369a65d7237a
Fixed
a3ea95049825d8510cdb110cb9e6a663182e084b
Introduced
1bbe0e9e6b57f11d3fbb7b58810f72fbf106ef43
Fixed
321adece24930836170106a4b719a3c5c55a2362
Database specific 
{
    "extracted_events": [
        {
            "introduced": "10.0.0"
        },
        {
            "fixed": "14.14.1"
        },
        {
            "introduced": "15.0.0"
        },
        {
            "fixed": "23.6.7"
        },
        {
            "introduced": "24.0.0"
        },
        {
            "fixed": "24.9.8"
        },
        {
            "introduced": "25.0.0"
        },
        {
            "fixed": "25.0.2"
        }
    ],
    "cpe": "cpe:2.3:a:vaadin:vaadin:*:*:*:*:*:*:*:*",
    "source": "CPE_RANGE"
}

Affected versions

10.*
10.0.0
10.0.1
10.0.2
11.*
11.0.0.alpha1
11.0.0.beta1
12.*
12.0.0.alpha1
12.0.0.alpha2
12.0.0.alpha3
12.0.0.alpha4
12.0.0.alpha5
12.0.0.beta1
12.0.0.beta2
13.*
13.0.0
13.0.0.alpha1
13.0.0.alpha2
13.0.0.alpha3
13.0.0.alpha4
13.0.0.beta1
13.0.0.beta2
13.0.0.beta3
13.0.1
14.*
14.0.0
14.0.0.alpha1
14.0.0.alpha2
14.0.0.alpha3
14.0.0.alpha4
14.0.0.beta1
14.0.0.beta2
14.0.0.beta3
14.0.0.rc1
14.0.0.rc2
14.0.0.rc3
14.0.0.rc4
14.0.0.rc5
14.0.0.rc6
14.0.0.rc7
14.0.0.rc9
14.0.1
14.0.2
14.1.0
14.1.0.alpha1
14.1.0.alpha3
14.1.0.beta1
14.1.0.beta2
14.1.1
14.1.2
14.10.0
14.10.0.alpha1
14.10.0.alpha2
14.10.0.alpha3
14.10.0.beta1
14.10.1
14.10.2
14.10.3
14.11.0
14.11.0.alpha1
14.11.0.alpha2
14.11.1
14.11.10
14.11.11
14.11.2
14.11.3
14.11.4
14.11.5
14.11.6
14.11.7
14.11.8
14.11.9
14.12.0
14.12.0.alpha1
14.12.0.beta1
14.12.0.rc1
14.12.1
14.12.2
14.12.3
14.12.4
14.12.5
14.12.6
14.12.7
14.12.8
14.13.0
14.13.0.alpha1
14.13.1
14.13.2
14.14.0
14.14.0-beta1
14.2.0
14.2.0.alpha1
14.2.0.alpha10
14.2.0.alpha11
14.2.0.alpha2
14.2.0.alpha3
14.2.0.alpha4
14.2.0.alpha5
14.2.0.alpha6
14.2.0.alpha7
14.2.0.alpha8
14.2.0.alpha9
14.2.0.beta1
14.2.0.rc1
14.3.0
14.3.0.alpha1
14.3.0.beta1
14.3.0.beta2
14.3.0.beta3
14.3.0.rc1
14.4.0
14.4.0.alpha1
14.4.0.beta1
14.4.0.beta2
14.4.0.rc1
14.5.0.alpha1
14.5.0.alpha2
14.5.0.alpha3
14.5.0.beta1
14.5.0.rc1
14.6.0.alpha1
14.6.0.alpha2
14.6.0.beta1
14.6.0.beta2
14.7.0
14.7.0.alpha1
14.7.0.alpha2
14.7.0.alpha3
14.7.0.beta1
14.7.0.rc1
14.8.0
14.8.0.alpha1
14.8.0.beta1
14.8.1
14.8.10
14.8.11
14.8.12
14.8.13
14.8.14
14.8.15
14.8.16
14.8.17
14.8.2
14.8.3
14.8.4
14.8.5
14.8.6
14.8.7
14.8.8
14.8.9
14.9.0
14.9.0.alpha1
14.9.0.beta1
14.9.0.rc1
14.9.1
14.9.2
14.9.3
14.9.4
15.*
15.0.0
15.0.0.rc1
16.*
16.0.0.alpha1
16.0.0.alpha2
16.0.0.alpha3
16.0.1
17.*
17.0.0
17.0.0.alpha2
17.0.0.alpha3
17.0.0.alpha4
17.0.0.alpha5
17.0.0.alpha6
17.0.0.alpha7
17.0.0.beta1
17.0.0.beta2
17.0.0.beta3
17.0.0.rc1
17.0.0.rc2
18.*
18.0.0.alpha1
18.0.0.beta1
18.0.0.beta2
19.*
19.0.0.alpha1
19.0.0.alpha2
19.0.0.alpha3
19.0.0.alpha4
19.0.0.alpha5
19.0.0.beta1
19.0.0.beta2
19.0.0.beta3
19.0.0.beta4
20.*
20.0.0.alpha3
20.0.0.alpha4
20.0.0.alpha5
20.0.0.alpha6
20.0.0.alpha7
20.0.0.alpha8
21.*
21.0.0.alpha1
21.0.0.alpha10
21.0.0.alpha2
21.0.0.alpha3
21.0.0.alpha4
21.0.0.alpha5
21.0.0.alpha6
21.0.0.alpha7
21.0.0.alpha8
21.0.0.alpha9
22.*
22.0.0.alpha1
22.0.0.alpha2
22.0.0.alpha3
22.0.0.alpha4
22.0.0.alpha5
22.0.0.alpha6
22.0.0.alpha7
22.0.0.alpha8
22.0.0.alpha9
22.0.0.beta1
22.0.0.beta2
22.0.0.beta3
23.*
23.0.0
23.0.0.alpha1
23.0.0.alpha2
23.0.0.alpha3
23.0.0.alpha4
23.0.0.beta1
23.0.0.beta2
23.0.0.beta3
23.0.0.beta4
23.0.0.rc1
23.1.0.alpha1
23.1.0.alpha2
23.1.0.alpha3
23.1.0.alpha4
23.1.0.beta1
23.2.0
23.2.0.alpha1
23.2.0.alpha3
23.2.0.beta1
23.2.0.beta2
23.2.0.beta3
23.2.0.beta4
23.2.0.rc1
23.3.0
23.3.0.alpha1
23.3.0.alpha2
23.3.0.alpha3
23.3.0.beta1
23.3.0.beta2
23.3.0.rc1
23.3.1
23.3.10
23.3.11
23.3.12
23.3.13
23.3.14
23.3.15
23.3.16
23.3.17
23.3.18
23.3.19
23.3.2
23.3.20
23.3.21
23.3.22
23.3.23
23.3.24
23.3.25
23.3.26
23.3.3
23.3.4
23.3.5
23.3.6
23.3.7
23.3.8
23.3.9
23.4.0
23.4.0.alpha1
23.4.0.alpha2
23.4.0.beta1
23.5.0
23.5.0.alpha1
23.5.1
23.5.10
23.5.11
23.5.12
23.5.13
23.5.14
23.5.15
23.5.2
23.5.3
23.5.4
23.5.5
23.5.6
23.5.7
23.5.8
23.5.9
23.6.0
23.6.0.alpha1
23.6.1
23.6.2
23.6.3
23.6.4
23.6.5
23.6.6
24.*
24.0.0.alpha10
24.0.0.alpha2
24.0.0.alpha4
24.0.0.alpha5
24.0.0.alpha6
24.0.0.alpha7
24.0.0.alpha8
24.0.0.alpha9
24.0.0.beta1
24.1.0.alpha1
24.1.0.alpha2
24.1.0.alpha3
24.1.0.alpha4
24.1.0.alpha5
24.1.0.alpha6
24.1.0.beta1
24.1.0.beta2
24.1.0.beta3
24.2-SNAPSHOT
24.2.0.alpha1
24.2.0.alpha10
24.2.0.alpha11
24.2.0.alpha2
24.2.0.alpha3
24.2.0.alpha4
24.2.0.alpha5
24.2.0.alpha6
24.2.0.alpha7
24.2.0.alpha8
24.2.0.alpha9
24.3-SNAPSHOT
24.3.0
24.3.0.alpha1
24.3.0.alpha2
24.3.0.alpha3
24.3.0.alpha4
24.3.0.alpha5
24.3.0.alpha6
24.3.0.beta1
24.3.0.rc1
24.4-SNAPSHOT
24.4.0.alpha1
24.4.0.alpha10
24.4.0.alpha11
24.4.0.alpha13
24.4.0.alpha14
24.4.0.alpha15
24.4.0.alpha16
24.4.0.alpha17
24.4.0.alpha18
24.4.0.alpha19
24.4.0.alpha2
24.4.0.alpha20
24.4.0.alpha21
24.4.0.alpha22
24.4.0.alpha23
24.4.0.alpha24
24.4.0.alpha25
24.4.0.alpha3
24.4.0.alpha4
24.4.0.alpha5
24.4.0.alpha7
24.4.0.alpha8
24.4.0.alpha9
24.4.0.beta1
24.4.x.branch
24.5-SNAPSHOT
24.5.0.alpha1
24.5.0.alpha10
24.5.0.alpha12
24.5.0.alpha13
24.5.0.alpha14
24.5.0.alpha15
24.5.0.alpha16
24.5.0.alpha17
24.5.0.alpha2
24.5.0.alpha3
24.5.0.alpha4
24.5.0.alpha5
24.5.0.alpha6
24.5.0.alpha7
24.5.0.alpha8
24.5.0.alpha9
24.5.0.beta1
24.5.0.beta2
24.5.0.beta3
24.5.0.beta4
24.5.0.beta5
24.5.0.beta6
24.5.0.rc1
24.6-SNAPSHOT
24.6.0.alpha1
24.6.0.alpha2
24.6.0.alpha3
24.6.0.alpha4
24.6.0.beta1
24.6.0.beta3
24.7-SNAPSHOT
24.7.0.alpha1
24.7.0.alpha10
24.7.0.alpha11
24.7.0.alpha12
24.7.0.alpha2
24.7.0.alpha3
24.7.0.alpha4
24.7.0.alpha5
24.7.0.alpha6
24.7.0.alpha7
24.7.0.alpha8
24.7.0.alpha9
24.7.0.beta1
24.8-SNAPSHOT
24.8.0
24.8.0.alpha1
24.8.0.alpha2
24.8.0.alpha3
24.8.0.alpha4
24.8.0.alpha5
24.8.0.alpha6
24.8.0.alpha7
24.8.0.alpha8
24.8.0.beta1
24.8.0.beta2
24.8.0.beta3
24.8.0.rc1
24.8.0.rc2
24.9.0
24.9.0-alpha1
24.9.0-alpha2
24.9.0-alpha3
24.9.0-alpha4
24.9.0-alpha5
24.9.0-alpha6
24.9.0-alpha7
24.9.0-beta1
24.9.0-beta2
24.9.0-beta3
24.9.0-rc1
24.9.0-rc2
24.9.1
24.9.2
24.9.3
24.9.4
24.9.5
24.9.6
24.9.7
25.*
25.0.0
v10.*
v10.0.0
v10.0.1
v10.0.2
v11.*
v11.0.0-alpha1
v11.0.0-beta1
v12.*
v12.0.0
v12.0.0-alpha1
v12.0.0-alpha2
v12.0.0-alpha3
v12.0.0-alpha4
v12.0.0-alpha5
v12.0.0-beta1
v12.0.0-beta2
v12.0.1
v12.0.2
v13.*
v13.0.0
v13.0.0-alpha1
v13.0.0-alpha2
v13.0.0-alpha3
v13.0.0-alpha4
v13.0.0-beta1
v13.0.0-beta2
v13.0.0-beta3
v13.0.1
v14.*
v14.0.0
v14.0.0-alpha1
v14.0.0-alpha2
v14.0.0-alpha3
v14.0.0-alpha4
v14.0.0-beta1
v14.0.0-beta2
v14.0.0-beta3
v14.0.0-rc1
v14.0.0-rc2
v14.0.0-rc3
v14.0.0-rc4
v14.0.0-rc5
v14.0.0-rc6
v14.0.0-rc7
v14.0.0-rc8
v14.0.0-rc9
v14.0.1
v14.0.2
v14.1.0
v14.1.0-alpha1
v14.1.0-alpha2
v14.1.0-alpha3
v14.1.0-alpha4
v14.1.0-alpha5
v14.1.0-beta1
v14.1.0-beta2
v14.1.0-beta3
v14.1.0-rc1
v14.1.1
v14.1.2
v14.10.0
v14.10.0-alpha1
v14.10.0-alpha2
v14.10.0-alpha3
v14.10.0-beta1
v14.10.1
v14.10.2
v14.10.3
v14.11.0
v14.11.0-alpha1
v14.11.0-alpha2
v14.11.1
v14.11.10
v14.11.11
v14.11.2
v14.11.3
v14.11.4
v14.11.5
v14.11.6
v14.11.7
v14.11.8
v14.11.9
v14.12.0
v14.12.0-alpha1
v14.12.0-beta1
v14.12.0-rc1
v14.12.1
v14.12.2
v14.12.3
v14.12.4
v14.12.5
v14.12.6
v14.12.7
v14.12.8
v14.13.0
v14.13.0-alpha1
v14.13.1
v14.13.2
v14.14.0
v14.14.0-beta1
v14.2.0
v14.2.0-alpha1
v14.2.0-alpha10
v14.2.0-alpha11
v14.2.0-alpha2
v14.2.0-alpha3
v14.2.0-alpha4
v14.2.0-alpha5
v14.2.0-alpha6
v14.2.0-alpha7
v14.2.0-alpha8
v14.2.0-alpha9
v14.2.0-beta1
v14.2.0-rc1
v14.3.0
v14.3.0-alpha1
v14.3.0-beta1
v14.3.0-beta2
v14.3.0-beta3
v14.3.0-rc1
v14.4.0
v14.4.0-alpha1
v14.4.0-beta1
v14.4.0-beta2
v14.4.0-rc1
v14.5.0-alpha1
v14.5.0-alpha2
v14.5.0-alpha3
v14.5.0-beta1
v14.5.0-rc1
v14.6.0-alpha1
v14.6.0-alpha2
v14.6.0-beta1
v14.6.0-beta2
v14.7.0-alpha1
v14.7.0-alpha2
v14.7.0-alpha3
v14.7.0-beta1
v14.7.0-rc1
v14.8.0
v14.8.0-alpha1
v14.8.0-beta1
v14.8.1
v14.8.10
v14.8.11
v14.8.12
v14.8.13
v14.8.14
v14.8.15
v14.8.16
v14.8.17
v14.8.2
v14.8.3
v14.8.4
v14.8.5
v14.8.6
v14.8.7
v14.8.8
v14.8.9
v14.9.0
v14.9.0-alpha1
v14.9.0-beta1
v14.9.0-rc1
v14.9.1
v14.9.2
v14.9.3
v14.9.4
v15.*
v15.0.0-alpha1
v15.0.0-alpha10
v15.0.0-alpha11
v15.0.0-alpha12
v15.0.0-alpha13
v15.0.0-alpha14
v15.0.0-alpha15
v15.0.0-alpha2
v15.0.0-alpha3
v15.0.0-alpha4
v15.0.0-alpha5
v15.0.0-alpha6
v15.0.0-alpha7
v15.0.0-alpha8
v15.0.0-alpha9
v15.0.0-beta1
v15.0.0-beta2
v15.0.0-beta3
v15.0.0-beta4
v15.0.0-beta5
v15.0.0-rc1
v16.*
v16.0.0-alpha1
v16.0.0-alpha2
v16.0.0-alpha3
v17.*
v17.0.0
v17.0.0-alpha1
v17.0.0-alpha2
v17.0.0-alpha3
v17.0.0-alpha4
v17.0.0-alpha5
v17.0.0-alpha6
v17.0.0-alpha7
v17.0.0-beta1
v17.0.0-beta2
v17.0.0-beta3
v17.0.0-rc1
v17.0.0-rc2
v18.*
v18.0.0-alpha1
v18.0.0-beta1
v18.0.0-beta2
v19.*
v19.0.0-alpha1
v19.0.0-alpha2
v19.0.0-alpha3
v19.0.0-alpha4
v19.0.0-alpha5
v19.0.0-beta1
v19.0.0-beta2
v19.0.0-beta3
v20.*
v20.0.0-alpha1
v20.0.0-alpha2
v20.0.0-alpha3
v20.0.0-alpha4
v20.0.0-alpha5
v20.0.0-alpha6
v20.0.0-alpha7
v20.0.0-alpha8
v21.*
v21.0.0-alpha0
v21.0.0-alpha1
v21.0.0-alpha10
v21.0.0-alpha2
v21.0.0-alpha3
v21.0.0-alpha4
v21.0.0-alpha5
v21.0.0-alpha6
v21.0.0-alpha7
v21.0.0-alpha8
v21.0.0-alpha9
v22.*
v22.0.0-alpha1
v22.0.0-alpha2
v22.0.0-alpha3
v22.0.0-alpha4
v22.0.0-alpha5
v22.0.0-alpha6
v22.0.0-alpha7
v22.0.0-alpha8
v22.0.0-alpha9
v22.0.0-beta1
v22.0.0-beta2
v22.0.0-beta3
v23.*
v23.0.0
v23.0.0-alpha1
v23.0.0-alpha2
v23.0.0-alpha3
v23.0.0-alpha4
v23.0.0-beta1
v23.0.0-beta2
v23.0.0-beta3
v23.0.0-beta4
v23.0.0-rc1
v23.1.0-alpha1
v23.1.0-alpha2
v23.1.0-alpha3
v23.1.0-alpha4
v23.1.0-beta1
v23.2.0
v23.2.0-alpha1
v23.2.0-alpha3
v23.2.0-beta1
v23.2.0-beta2
v23.2.0-beta3
v23.2.0-beta4
v23.2.0-rc1
v23.3.0
v23.3.0-alpha1
v23.3.0-alpha2
v23.3.0-alpha3
v23.3.0-beta1
v23.3.0-beta2
v23.3.0-rc1
v23.3.1
v23.3.10
v23.3.11
v23.3.12
v23.3.13
v23.3.14
v23.3.15
v23.3.16
v23.3.17
v23.3.18
v23.3.19
v23.3.2
v23.3.20
v23.3.21
v23.3.22
v23.3.23
v23.3.24
v23.3.25
v23.3.26
v23.3.3
v23.3.4
v23.3.5
v23.3.6
v23.3.7
v23.3.8
v23.3.9
v23.4.0
v23.4.0-alpha1
v23.4.0-alpha2
v23.4.0-beta1
v23.5.0
v23.5.0-alpha1
v23.5.1
v23.5.10
v23.5.11
v23.5.12
v23.5.13
v23.5.14
v23.5.15
v23.5.2
v23.5.3
v23.5.4
v23.5.5
v23.5.6
v23.5.7
v23.5.8
v23.5.9
v23.6.0
v23.6.0-alpha1
v23.6.1
v23.6.2
v23.6.3
v23.6.4
v23.6.5
v23.6.6
v24.*
v24.0.0-alpha10
v24.0.0-alpha2
v24.0.0-alpha4
v24.0.0-alpha5
v24.0.0-alpha6
v24.0.0-alpha7
v24.0.0-alpha8
v24.0.0-alpha9
v24.0.0-beta1
v24.1.0-alpha1
v24.1.0-alpha2
v24.1.0-alpha3
v24.1.0-alpha4
v24.1.0-alpha5
v24.1.0-alpha6
v24.1.0-beta1
v24.1.0-beta2
v24.1.0-beta3
v24.2.0-alpha1
v24.2.0-alpha10
v24.2.0-alpha11
v24.2.0-alpha2
v24.2.0-alpha3
v24.2.0-alpha4
v24.2.0-alpha5
v24.2.0-alpha6
v24.2.0-alpha7
v24.2.0-alpha8
v24.2.0-alpha9
v24.3.0
v24.3.0-alpha1
v24.3.0-alpha2
v24.3.0-alpha3
v24.3.0-alpha4
v24.3.0-alpha5
v24.3.0-alpha6
v24.3.0-beta1
v24.3.0-rc1
v24.4.0-alpha1
v24.4.0-alpha10
v24.4.0-alpha11
v24.4.0-alpha13
v24.4.0-alpha14
v24.4.0-alpha15
v24.4.0-alpha16
v24.4.0-alpha17
v24.4.0-alpha18
v24.4.0-alpha19
v24.4.0-alpha2
v24.4.0-alpha20
v24.4.0-alpha21
v24.4.0-alpha22
v24.4.0-alpha23
v24.4.0-alpha24
v24.4.0-alpha25
v24.4.0-alpha3
v24.4.0-alpha4
v24.4.0-alpha5
v24.4.0-alpha7
v24.4.0-alpha8
v24.4.0-alpha9
v24.4.0-beta1
v24.5.0-alpha1
v24.5.0-alpha10
v24.5.0-alpha12
v24.5.0-alpha13
v24.5.0-alpha14
v24.5.0-alpha15
v24.5.0-alpha16
v24.5.0-alpha17
v24.5.0-alpha2
v24.5.0-alpha3
v24.5.0-alpha4
v24.5.0-alpha5
v24.5.0-alpha6
v24.5.0-alpha7
v24.5.0-alpha8
v24.5.0-alpha9
v24.5.0-beta1
v24.5.0-beta2
v24.5.0-beta3
v24.5.0-beta4
v24.5.0-beta5
v24.5.0-beta6
v24.5.0-rc1
v24.6.0-alpha1
v24.6.0-alpha2
v24.6.0-alpha3
v24.6.0-alpha4
v24.6.0-beta1
v24.6.0-beta3
v24.7.0-alpha1
v24.7.0-alpha10
v24.7.0-alpha11
v24.7.0-alpha12
v24.7.0-alpha2
v24.7.0-alpha3
v24.7.0-alpha4
v24.7.0-alpha5
v24.7.0-alpha6
v24.7.0-alpha7
v24.7.0-alpha8
v24.7.0-alpha9
v24.7.0-beta1
v24.8.0
v24.8.0-alpha1
v24.8.0-alpha2
v24.8.0-alpha3
v24.8.0-alpha4
v24.8.0-alpha5
v24.8.0-alpha6
v24.8.0-alpha7
v24.8.0-alpha8
v24.8.0-beta1
v24.8.0-beta2
v24.8.0-beta3
v24.8.0-rc1
v24.8.0-rc2
v24.9.0
v24.9.0-alpha1
v24.9.0-alpha2
v24.9.0-alpha3
v24.9.0-alpha4
v24.9.0-alpha5
v24.9.0-alpha6
v24.9.0-alpha7
v24.9.0-beta1
v24.9.0-beta2
v24.9.0-beta3
v24.9.0-rc1
v24.9.0-rc2
v24.9.1
v24.9.2
v24.9.3
v24.9.4
v24.9.5
v24.9.6
v24.9.7
v25.*
v25.0.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-2742.json"