Vulnerability Directory
If you’re currently using these frameworks in your application’s tech stack, your application could be vulnerable.
Secure drop-in replacements for open source software from HeroDevs helps you stay secure, compliant, and compatible while you migrate.
Switch to Never-Ending Support (NES) from HeroDevs to immediately mitigate these vulnerabilities.
Severity
ID
Technology
Libraries Affected
Category
Version(s) Affected
Published Date
Low
Node.js
Node.js
Stack-based Buffer Overflow
>=4.0.0 <=4.9.1 >=5.0.0 <=5.12.0 >=6.0.0 <=6.17.1 >=7.0.0 <=7.10.1 >=8.0.0 <=8.17.0 >=9.0.0 <=9.11.2 >=10.0.0 <=10.24.1 >=11.0.0 <=11.15.0 >=12.0.0 <=12.22.12 >=13.0.0 <=13.14.0 >=14.0.0 <=14.21.3 >=15.0.0 <=15.14.0 >=16.0.0 <16.20.1 >=17.0.0 <=17.9.1 >=18.0.0 <18.16.0 >=19.0.0 <19.7.0
Oct 7, 2026
Critical
Apache Struts
Apache Struts
Remote Code Execution
>=2.0.0 <=2.3.37, >=2.5.0 <=2.5.33, >=6.0.0 <=6.11.0, >=7.0.0 <=7.3.0
Oct 6, 2026
High
Apache Struts
Apache Struts
Denial of Service
>=2.5.14 <=2.5.33, >=6.0.0 <=6.11.0, >=7.0.0 <=7.3.0
Oct 6, 2026
Medium
Apache Struts
Apache Struts
Denial of Service
>=2.1.8 <=2.3.37, >=2.5.0 <=2.5.33, >=6.0.0 <=6.11.0, >=7.0.0 <=7.3.0
Oct 6, 2026
High
Apache Struts
Apache Struts
Information Exposure
>=2.0.0 <=2.3.37, >=2.5.0 <=2.5.33, >=6.0.0 <=6.11.0, >=7.0.0 <=7.3.0
Oct 6, 2026
High
Quarkus
Quarkus
Authorization Bypass
>=3.20.6.2 <3.21.0.CR1, >=3.27.4.1 <3.27.5.3, >=3.33.2.1 <3.33.3.3, >=3.36.3 <3.37.0.CR1, >=3.37.0 <3.38.0.CR1, >=3.38.1 <3.39.5, >=3.40.0.CR1 <3.40.0
Oct 5, 2026
Medium
Spring
Micrometer (io.micrometer:micrometer-core, io.micrometer:micrometer-registry-statsd)
Content Spoofing
<=1.9.18, >=1.10.0 <=1.14.16, >=1.15.0 <=1.15.12, >=1.16.0 <=1.16.6, 1.17.0
Oct 5, 2026
Medium
Angular
Angular
Path Traversal
<=19.2.27, >=20.0.0 <20.3.36, >=21.0.0 <21.2.23, >=22.0.0 <22.1.7
Oct 5, 2026
Medium
Spring
Micrometer
Denial of Service
>=1.4.0 <=1.9.18, >=1.10.0 <=1.14.16, >=1.15.0 <=1.15.12, >=1.16.0 <=1.16.6, 1.17.0
Oct 5, 2026
Medium
Spring
Micrometer Tracing (io.micrometer:micrometer-tracing-bridge-brave)
Denial of Service
<=1.4.13, >=1.5.0 <=1.5.12, >=1.6.0 <=1.6.6, 1.7.0
Oct 5, 2026
Medium
Apache ActiveMQ Artemis
Apache ActiveMQ Artemis
Regular Expression Denial of Service
>=1.0.0 <=2.44.0, >=2.50.0 <=2.56.0
Oct 5, 2026
Critical
Apache ActiveMQ Artemis
Apache ActiveMQ Artemis
Information Exposure
>=1.0.0 <=2.44.0, >=2.50.0 <=2.56.0
Oct 5, 2026
High
Apache ActiveMQ Artemis
Apache ActiveMQ Artemis
Information Exposure
>=1.0.0 <=2.44.0, >=2.50.0 <=2.56.0
Oct 5, 2026
High
Apache ActiveMQ Artemis
Apache ActiveMQ Artemis
Authorization Bypass
>=1.0.0 <=2.44.0, >=2.50.0 <=2.56.0
Oct 5, 2026
No results found
Please enter a valid Vulnerability ID number or Technology name.