Pink arrow right
Back to all posts
Javier Perez
Javier Perez
Technical Product Owner & Manager - Javascript

With over 25 years of experience in technology, Javier is a seasoned product leader with deep expertise in application development, open source, SaaS, and AI. As Technical Product Leader at HeroDevs, he steers strategy and innovation for post–end-of-life open source solutions. His track record includes key product leadership roles at both startups and global innovators such as IBM, Veracode, and Red Hat. A frequent speaker and blogger, Javier is passionate about advancing innovation, security, and open source collaboration across the tech community.

. . .
Application Security in 2026: Why jQuery CVEs Still Dominate Codebases
Security
Apr 29, 2026
Application Security in 2026: Why jQuery CVEs Still Dominate Codebases
Why outdated jQuery versions continue to dominate security reports—and what enterprises must do to reduce risk.
Drupal 7 Security Roundup: Eight CVEs Resolved in Contrib Modules (April 2026)
Security
Apr 24, 2026
Drupal 7 Security Roundup: Eight CVEs Resolved in Contrib Modules (April 2026)
OpenID Connect, Protected Pages, CAPTCHA, and five more: what changed, who is affected, and what Drupal 7 sites on end-of-life support need to know
Express 3 is EOL, Express 4 is Next: The 2026 Support Reference
Security
Apr 23, 2026
Express 3 is EOL, Express 4 is Next: The 2026 Support Reference
A reference for Express support timelines, and what end-of-life means for organizations still running older versions in production.
The Realities of Upgrading: What You Need to Know Before Migrating from End-of-Life Angular 18
Security
Apr 21, 2026
The Realities of Upgrading: What You Need to Know Before Migrating from End-of-Life Angular 18
Why upgrading from Angular 18 isn’t a simple version bump—and what enterprises must plan for across testing, dependencies, and security.
CVE-2025-9551: Brute Force Vulnerability in Drupal's Protected Pages Module
Security
Apr 17, 2026
CVE-2025-9551: Brute Force Vulnerability in Drupal's Protected Pages Module
How a Missing Rate Limit in Drupal 7 Creates Real Security and Compliance Risk
Node.js v20 Goes EOL April 30 — and Your Cloud Provider Is Pulling the Plug the Next Day
Security
Apr 9, 2026
Node.js v20 Goes EOL April 30 — and Your Cloud Provider Is Pulling the Plug the Next Day
Two deadlines, one week apart. Most teams running Node.js v20 in production only know about one of them.
Node.js 20 Goes EOL: How to Stay Secure Without a Full Migration
Products
Mar 25, 2026
Node.js 20 Goes EOL: How to Stay Secure Without a Full Migration
What Node.js 20 end-of-life means for security, compliance, and how to stay protected without rushing a migration
CVE-2026-29057 and CVE-2026-27980: Two New Vulnerabilities Affecting End-of-Life Next.js
Security
Mar 25, 2026
CVE-2026-29057 and CVE-2026-27980: Two New Vulnerabilities Affecting End-of-Life Next.js
How HeroDevs NES secures end-of-life Next.js applications against DoS and request smuggling threats
HeroDevs Announces Never-Ending-Support (NES) for Angular 19
Products
Mar 18, 2026
HeroDevs Announces Never-Ending-Support (NES) for Angular 19
Ensuring Security and Compliance for End-of-Life Angular 19 Applications