Vulnerability Directory
If you’re currently using these frameworks in your application’s tech stack, your application could be vulnerable.
Secure drop-in replacements for open source software from HeroDevs helps you stay secure, compliant, and compatible while you migrate.
Switch to Never-Ending Support (NES) from HeroDevs to immediately mitigate these vulnerabilities.
Severity
ID
Technology
Libraries Affected
Category
Version(s) Affected
Published Date
Medium
Spring
Spring Cloud AWS
Signature Forgery
>=2.2.0 <=2.2.8, >=3.0.0 <4.0.2
Nov 7, 2026
High
Node.js
Node.js
Improper Certificate Validation
>=22.0.0 <22.23.4, >=24.0.0 <24.22.1, >=26.0.0 <26.12.1
Nov 6, 2026
Medium
Node.js
Node.js
Improper Certificate Validation
>=22.0.0 <22.23.4, >=24.0.0 <24.22.1, >=26.0.0 <26.12.1
Nov 6, 2026
Medium
Node.js
Node.js
Concurrent Execution using Shared Resource with Improper Synchronization
<=21.7.3, >=22.0.0 <22.23.4, >=23.0.0 <=23.11.1, >=24.0.0 <24.22.1, >=25.0.0 <=25.9.0, >=26.0.0 <26.12.1
Nov 6, 2026
High
Node.js
Node.js
Improper Input Validation (4.16)
<=21.7.3 >=22.0.0 <22.23.4 >=23.0.0 <=23.11.1 >=24.0.0 <24.22.1 >=25.0.0 <=25.9.0 >=26.0.0 <26.12.1
Nov 6, 2026
Medium
Node.js
Node.js
Cryptographic Weakness
>=18.8.0 <=21.7.3, >=22.0.0 <22.23.4, >=23.0.0 <=23.11.1, >=24.0.0 <24.22.1, >=25.0.0 <=25.9.0, >=26.0.0 <26.12.1
Nov 6, 2026
Low
Node.js
Node.js
Incorrectly Configured Access Control
>=20.0.0 <=21.7.3, >=22.0.0 <22.23.4, >=23.0.0 <=23.11.1, >=24.0.0 <24.22.1, >=25.0.0 <=25.9.0, >=26.0.0 <26.12.1
Nov 6, 2026
High
Apache Kafka
Apache Kafka
Denial of Service
>=2.4.0 <=4.1.2, >=4.2.0 <=4.2.1, >=4.3.0 <=4.3.1
Nov 6, 2026
High
Apache Kafka
Apache Kafka
Denial of Service
>=3.3.0 <=4.1.2, >=4.2.0 <=4.2.1, >=4.3.0 <=4.3.1
Nov 6, 2026
Medium
Apache Kafka
Apache Kafka
Incorrectly Configured Access Control
>=3.1.0 <4.4.0
Nov 6, 2026
High
Apache Kafka
Apache Kafka
Denial of Service
>=0.11.0.0 <=4.1.2, >=4.2.0 <=4.2.1, >=4.3.0 <=4.3.1
Nov 6, 2026
High
Apache Kafka
Apache Kafka
Denial of Service
>=0.10.0.0 <=4.1.2, >=4.2.0 <=4.2.1, >=4.3.0 <=4.3.1
Nov 6, 2026
Medium
Apache Kafka
Apache Kafka
Information Exposure
>=2.4.0 <4.2.2, >=4.3.0 <4.3.2
Nov 6, 2026
Low
Apache Kafka
Apache Kafka
Authorization Bypass
>=2.4.0 <4.2.2, >=4.3.0 <4.3.2
Nov 6, 2026
No results found
Please enter a valid Vulnerability ID number or Technology name.