Security teams must patch Vaadin 22 through 25 to address high-severity flaws in bundled Highcharts that allow cross-site scripting and object prototype manipulation.
A high-severity cross-site scripting issue in OPNsense OpenVPN widgets enables attackers to execute code in administrator browsers and take full control of the firewall.
