Report a CVE to HeroDevs

Committed to Security and Confidentiality

At HeroDevs, safeguarding the security of open-source software and its ecosystem is our priority. As a Certified Numbering Authority (CNA), we ensure your vulnerability reports are handled with utmost confidentiality and professionalism.

Search tool icon

Report a Vulnerability

When you report a CVE, you can trust that:
  • Your submission is reviewed promptly and securely by our team of security experts.
  • Details of the vulnerability will not be disclosed until appropriate patches are developed and coordinated with the necessary stakeholders.
  • Your role as the reporter will be respected, with attribution provided as per your preference.
Every vulnerability we address strengthens the open-source ecosystem and ensures the continued security of end-of-life software. At HeroDevs, we actively track, assess, and address vulnerabilities to safeguard the security of open source software and protect the businesses that rely on it.

By clicking “submit” I acknowledge receipt of our Privacy Policy.

Thank you! Your submission has been received!
Please enter a company email.
Early Detection and CVE Remediation

187 Security Issues Fixed
(and always looking for more)

Below is a snapshot of the most recent 10 of 75 vulnerabilities in our database, demonstrating our commitment to transparency and proactive security.
Severity
ID
Technology
Libraries Affected
Category
Version(s) Affected
Published Date
High
Spring
Spring Integration
Information Exposure
>=7.1.0 <7.1.1, >=7.0.0 <7.0.6, >=5.1.0 <=6.5.10
Aug 21, 2026
Medium
Spring
Spring AMQP
Denial of Service
>=4.1.0 <4.1.1, >=4.0.0 <4.0.5, >=3.0.0 <=3.2.12, >=2.1.0 <=2.4.18
Aug 20, 2026
Medium
Spring
Spring Integration
Information Exposure
>=7.1.0 <7.1.1, >=7.0.0 <7.0.6, >=6.5.0 <=6.5.10, >=6.0.0 <=6.4.12
Aug 20, 2026
High
Apache Struts
Apache Struts
Denial of Service
>=2.1.8 <=2.3.37, >=2.5.0 <=2.5.33, >=6.0.0 <=6.10.0, >=7.0.0 <=7.2.1
Aug 19, 2026
High
.NET
.NET SDK
Resource Injection
Microsoft.Build.Tasks.Core >= 17.0.0 <= 17.8.3; as bundled in the .NET 6 SDK through NES for .NET 6.0.44
Aug 19, 2026
High
.NET
.NET SDK
Improper Link Resolution Before File Access ('Link Following')
Microsoft.Build.Tasks.Core >= 17.8.0 <= 17.14.8; as bundled in the .NET 6 SDK through NES for .NET 6.0.44
Aug 19, 2026
High
.NET
ASP.NET Core
Allocation of Resources Without Limits or Throttling
Microsoft.AspNetCore.App >= 6.0.0 <= 6.0.44
Aug 19, 2026
Medium
.NET
.NET
Cryptographic Weakness
Microsoft.NETCore.App >= 6.0.0 <= 6.0.44
Aug 19, 2026
High
.NET
.NET
Remote Code Execution
Microsoft.NETCore.App >= 6.0.0 <= 6.0.44
Aug 19, 2026
High
Apache Struts
Apache Struts
Denial of Service
>=2.0.0 <2.3.38, >=2.5.0 <2.5.34, >=6.0.0 <6.11.0, >=7.0.0 <7.3.0
Aug 19, 2026
For more details on CVEs found in end-of-life software, visit our vulnerability directory.