Vulnerability Directory
If you’re currently using these frameworks in your application’s tech stack, your application could be vulnerable.
Secure drop-in replacements for open source software from HeroDevs helps you stay secure, compliant, and compatible while you migrate.
Switch to Never-Ending Support (NES) from HeroDevs to immediately mitigate these vulnerabilities.
Severity
ID
Technology
Libraries Affected
Category
Version(s) Affected
Published Date
Medium
Infinispan
Infinispan
Denial of Service
Uncontrolled Recursion
>=9.0.0.Final
Nov 9, 2026
High
Apache ActiveMQ
Apache ActiveMQ Classic
Denial of Service
<5.19.12, >=6.0.0 <6.3.3
Nov 9, 2026
High
Apache ActiveMQ
Apache ActiveMQ Classic
Authorization Bypass
<5.19.12, >=6.0.0 <6.3.3
Nov 9, 2026
Medium
Infinispan
Infinispan
Denial of Service
<14.0.31.Final, >=15.0.0.Dev01 <15.0.6.Final, =15.1.0.Dev01
Nov 9, 2026
Medium
Infinispan
Infinispan
Information Exposure
<14.0.18.Final, >=15.0.0.Dev01 <15.0.0.Dev04
Nov 9, 2026
Medium
Infinispan
Infinispan
Information Exposure
<14.0.34.Final, >=15.0.0.Dev01 <15.0.13.Final, >=15.1.0.Dev01 <15.1.5.Final
Nov 9, 2026
High
Infinispan
org.infinispan:infinispan-client-hotrod, org.infinispan:infinispan-cachestore-remote
Information Exposure
<14.0.18.Final
Nov 9, 2026
Medium
Infinispan
Infinispan
Information Exposure
<15.0.17.Final, >=15.1.0.Dev01 <15.2.5.Final, =16.0.0.Dev01
Nov 9, 2026
Medium
Infinispan
Infinispan
Information Exposure
<14.0.25.Final, >=15.0.0.Dev01 <15.0.0.Dev07
Nov 9, 2026
Medium
Spring
Spring Cloud AWS
Signature Forgery
>=2.2.0 <=2.2.8, >=3.0.0 <4.0.2
Nov 7, 2026
High
Node.js
Node.js
Improper Certificate Validation
>=22.0.0 <22.23.4, >=24.0.0 <24.22.1, >=26.0.0 <26.12.1
Nov 6, 2026
Medium
Node.js
Node.js
Improper Certificate Validation
>=22.0.0 <22.23.4, >=24.0.0 <24.22.1, >=26.0.0 <26.12.1
Nov 6, 2026
Medium
Node.js
Node.js
Concurrent Execution using Shared Resource with Improper Synchronization
<=21.7.3, >=22.0.0 <22.23.4, >=23.0.0 <=23.11.1, >=24.0.0 <24.22.1, >=25.0.0 <=25.9.0, >=26.0.0 <26.12.1
Nov 6, 2026
No results found
Please enter a valid Vulnerability ID number or Technology name.