Vulnerability Directory
If you’re currently using these frameworks in your application’s tech stack, your application could be vulnerable.
Secure drop-in replacements for open source software from HeroDevs helps you stay secure, compliant, and compatible while you migrate.
Switch to Never-Ending Support (NES) from HeroDevs to immediately mitigate these vulnerabilities.
Severity
ID
Technology
Libraries Affected
Category
Version(s) Affected
Published Date
Low
Apache CXF
Apache CXF
Regular Expression Denial of Service
<3.6.13, >=4.0.0 <4.1.9, >=4.2.0 <4.2.4
Oct 14, 2026
Medium
Apache CXF
Apache CXF
Denial of Service
<3.6.13, >=4.0.0 <4.1.9, >=4.2.0 <4.2.4
Oct 14, 2026
Medium
Apache CXF
Apache CXF
Signature Forgery
<3.6.13, >=4.0.0 <4.1.9, >=4.2.0 <4.2.4
Oct 14, 2026
High
Apache CXF
org.apache.cxf:cxf-rt-rs-security-sso-oidc
URL Redirect/Open Redirect
<3.6.13, >=4.0.0 <4.1.9, >=4.2.0 <4.2.4
Oct 14, 2026
High
Apache CXF
Apache CXF (org.apache.cxf:cxf-rt-ws-security)
Authorization Bypass
<3.6.13, >=4.0.0 <4.1.9, >=4.2.0 <4.2.4
Oct 14, 2026
Low
Apache CXF
Apache CXF (org.apache.cxf:cxf-rt-rs-security-oauth2)
Authorization Bypass
<3.6.13, >=4.0.0 <4.1.9, >=4.2.0 <4.2.4
Oct 14, 2026
High
Apache CXF
Apache CXF (org.apache.cxf:cxf-rt-transports-http-netty-client)
Improper Certificate Validation
<3.6.13, >=4.0.0 <4.1.9, >=4.2.0 <4.2.4
Oct 14, 2026
High
Apache ActiveMQ
ActiveMQ
Integer Overflow or Wraparound
<5.19.2, >=6.0.0 <6.1.9, >=6.2.0 <6.2.1
Oct 14, 2026
High
Apache ActiveMQ
Apache ActiveMQ Classic
Remote Code Execution
<5.19.6, >=6.0.0 <6.2.5
Oct 14, 2026
No results found
Please enter a valid Vulnerability ID number or Technology name.