Featured Posts
All Posts
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
.png)
Security
Oct 17, 2025
Critical ASP.NET Vulnerability CVE-2025-55315 Reported, Upgrade Now
A newly disclosed ASP.NET Core flaw (CVE-2025-55315) scored a critical 9.9 CVSS, enabling HTTP Request Smuggling attacks. Here’s why it’s a red alert and what to do now.
Hayden Barnes
Share this post via:
herodevs.com/blog-posts/
critical-asp-net-vulnerability-cve-2025-55315-reported-upgrade-now
.png)
Security
Oct 16, 2025
A Guide to NPM Overrides: Take Control of Your Dependencies
Master dependency management with npm overrides — fix vulnerabilities, resolve version conflicts, and take full control of your Node.js projects.
HeroDevs
Share this post via:
herodevs.com/blog-posts/
a-guide-to-npm-overrides-take-control-of-your-dependencies
.png)
Security
Oct 14, 2025
Two New Next.js Vulnerabilities: Content Injection and Cache Deception in the Image Optimizer
Protecting Next.js apps from data leakage and spoofed content with HeroDevs NES patches
HeroDevs
Share this post via:
herodevs.com/blog-posts/
two-new-next-js-vulnerabilities-content-injection-and-cache-deception-in-the-image-optimizer-2
.png)
Security
Oct 13, 2025
Understanding CVE-2025-59052: What Angular Users Need to Know
Race condition vulnerability in Angular SSR could expose user data across concurrent requests — here’s what developers need to know and how to stay protected.
.jpg){kind=small}
Shelby Kelley
Share this post via:
herodevs.com/blog-posts/
understanding-cve-2025-59052-what-angular-users-need-to-know
.png)
Thought Leadership
Oct 10, 2025
SPDX vs CycloneDX: Choosing the Right SBOM Format for Your Software Supply Chain
A clear, practical guide comparing SPDX and CycloneDX — their strengths, tools, and use cases — so you can pick the SBOM format that fits your workflow.
Anthony Dahanne
Share this post via:
herodevs.com/blog-posts/
spdx-vs-cyclonedx-choosing-the-right-sbom-format-for-your-software-supply-chain
.png)
Products
Oct 9, 2025
Spring Data Redis Exposure to Redis Lua Parser Use-After-Free (CVE-2025-49844)
A critical Redis Lua parser flaw (CVE-2025-49844) could enable remote code execution — here’s what it means for Spring Data Redis users and how to stay protected.
Ryan Murphy
Share this post via:
herodevs.com/blog-posts/
spring-data-redis-exposure-to-redis-lua-parser-use-after-free-cve-2025-49844
Security
Oct 9, 2025
Two New Next.js Vulnerabilities: Content Injection and Cache Deception in the Image Optimizer
Two medium-severity CVEs in Next.js Image Optimization exposed user data and cache leaks — HeroDevs’ NES for Next.js patches both, keeping EOL versions secure without refactoring.
HeroDevs
Share this post via:
herodevs.com/blog-posts/
two-new-next-js-vulnerabilities-content-injection-and-cache-deception-in-the-image-optimizer
.png)
Thought Leadership
Oct 9, 2025
What Does It Mean for Open Source if People Can Just “Stay on Something Forever”?
What long-term support means for open source — and how stability and innovation can coexist.
Allison Vorthmann
Share this post via:
herodevs.com/blog-posts/
what-does-it-mean-for-open-source-if-people-can-just-stay-on-something-forever
.png)
Thought Leadership
Oct 8, 2025
The Danger of Legacy Containers in Open Source
When Bitnami’s container catalog went dark, thousands of open-source deployments were left running unpatched software. Here’s what that means—and how to stay secure.
Hayden Barnes
Share this post via:
herodevs.com/blog-posts/
bitnami-and-the-danger-of-legacy-containers
.png)
Security
Oct 7, 2025
Introducing the Spring End-of-Life Resource Hub — Stay Secure Beyond Support
Track EOL dates, monitor active CVEs, and access expert resources to keep your Spring and Java apps secure and compliant long after official support ends.
HeroDevs
Share this post via:
herodevs.com/blog-posts/
introducing-the-spring-end-of-life-resource-hub----stay-secure-beyond-support
.png)
Thought Leadership
Oct 6, 2025
How Platform Engineering Teams Can Make Peace with EOL Timelines
Why platform teams need a new playbook for managing end-of-life open source without breaking developer velocity.
Parin Shah
Share this post via:
herodevs.com/blog-posts/
how-platform-engineering-teams-can-make-peace-with-eol-timelines
.png)
Products
Oct 2, 2025
Trapped on Django 3.2? How Enterprises Can Balance Compliance and Migration Reality
From Compliance Risk to Migration Reality: Navigating Django 3.2’s End of Life
Isaac Wuest
Share this post via:
herodevs.com/blog-posts/
trapped-on-django-3-2-how-enterprises-can-balance-compliance-and-migration-reality
Press Release
Oct 1, 2025
HeroDevs and IBM Collaborate to Protect Enterprises from Open-Source Risks
New integration is designed to deliver security, compliance, and flexibility for enterprises running end-of-life versions of Spring and Struts frameworks.
HeroDevs
Share this post via:
herodevs.com/blog-posts/
herodevs-and-ibm-collaborate-to-protect-enterprises-from-open-source-risks
.png)
Products
Oct 1, 2025
Why IBM Chose HeroDevs to Secure the Future of Open-Source Software
IBM chooses HeroDevs to secure enterprises running on end-of-life frameworks like Spring and Struts, proving organizations no longer need to choose between security and innovation.
HeroDevs
Share this post via:
herodevs.com/blog-posts/
why-ibm-chose-herodevs-to-secure-the-future-of-legacy-software
.png)
Security
Sep 30, 2025
HeroDevs Reaffirms Commitment: OSS Pledge for 2025 with over $160K in Support
HeroDevs renews its Open Source Pledge for 2025 with $160K in support, funding foundations, maintainers, and ecosystems like Vue and Bootstrap to strengthen the future of OSS.
HeroDevs
Share this post via:
herodevs.com/blog-posts/
herodevs-reaffirms-commitment-oss-pledge-for-2025-with-over-160k-in-support