Vulnerability Directory
If you’re currently using these frameworks in your application’s tech stack, your application could be vulnerable.
Secure drop-in replacements for open source software from HeroDevs helps you stay secure, compliant, and compatible while you migrate.
Switch to Never-Ending Support (NES) from HeroDevs to immediately mitigate these vulnerabilities.
Severity
ID
Technology
Libraries Affected
Category
Version(s) Affected
Published Date
High
.NET
.NET SDK
Improper Link Resolution Before File Access ('Link Following')
>=6.0.100 <=6.0.437 (Windows)
Oct 13, 2026
Medium
.NET
.NET SDK
Insufficient Verification of Data Authenticity
>=6.0.100 <=6.0.437
Oct 13, 2026
High
.NET
.NET SDK
Insufficient Verification of Data Authenticity
>=6.0.100 <=6.0.437
Oct 13, 2026
High
.NET
.NET (Windows Presentation Foundation)
Buffer Over-read
>=6.0.0 <=6.0.46
Oct 13, 2026
Medium
.NET
.NET (Windows Presentation Foundation)
Insufficiently Protected Credentials
>=6.0.0 <=6.0.46
Oct 13, 2026
High
.NET
.NET
Uncontrolled Resource Consumption
Microsoft.AspNetCore.App, Microsoft.WindowsDesktop.App >= 6.0.0 <= 6.0.46; System.Security.Cryptography.Xml >= 6.0.0 <= 6.0.2.2
Oct 13, 2026
High
.NET
.NET
Improper Certificate Validation
Microsoft.AspNetCore.App, Microsoft.WindowsDesktop.App >= 6.0.0 <= 6.0.46; System.Security.Cryptography.Xml >= 6.0.0 <= 6.0.2.2
Oct 13, 2026
High
.NET
.NET
Inefficient Algorithmic Complexity
Microsoft.AspNetCore.App, Microsoft.WindowsDesktop.App >= 6.0.0 <= 6.0.46; System.Security.Cryptography.Pkcs >= 6.0.0 <= 6.0.5
Oct 13, 2026
High
.NET
.NET (Windows Presentation Foundation)
Heap-based Buffer Overflow
>=6.0.0 <=6.0.46
Oct 13, 2026
High
.NET
.NET (Windows Presentation Foundation)
Deserialization of Untrusted Data
>=6.0.0 <=6.0.46
Oct 13, 2026
High
.NET
.NET (Windows Presentation Foundation)
Deserialization of Untrusted Data
>=6.0.0 <=6.0.46
Oct 13, 2026
Medium
.NET
.NET
Uncontrolled Resource Consumption
Microsoft.AspNetCore.App, Microsoft.WindowsDesktop.App >= 6.0.0 <= 6.0.46 (Windows); System.Security.Cryptography.Pkcs >= 6.0.0 <= 6.0.5 (Windows)
Oct 13, 2026
Medium
Node.js
Node.js
Improper Certificate Validation
<=21.7.3 >=22.0.0 <22.23.0 >=23.0.0 <=23.11.1 >=24.0.0 <24.17.0 >=25.0.0 <=25.9.0 >=26.0.0 <26.3.1
Oct 13, 2026
High
Node.js
Node.js
Integer Overflow or Wraparound
>=15.0.0 <=21.7.3 >=22.0.0 <22.23.0 >=23.0.0 <=23.11.1 >=24.0.0 <24.17.0 >=25.0.0 <=25.9.0 >=26.0.0 <26.3.1
Oct 13, 2026
No results found
Please enter a valid Vulnerability ID number or Technology name.
