Vulnerability Directory
If you’re currently using these frameworks in your application’s tech stack, your application could be vulnerable.
Secure drop-in replacements for open source software from HeroDevs helps you stay secure, compliant, and compatible while you migrate.
Switch to Never-Ending Support (NES) from HeroDevs to immediately mitigate these vulnerabilities.
Severity
ID
Technology
Libraries Affected
Category
Version(s) Affected
Published Date
High
Struts
Apache Struts
Remote Code Execution
>=2.0.0 <=2.3.37, >=2.5.0 <=2.5.33, >=6.0.0 <6.1.1,
Jan 16, 2026
Medium
Drupal 7
Form Builder Drupal Module
Cross-Site Scripting
>=7.1.0 <=7.1.22
Jan 15, 2026
High
Node.js
nodejs/node
Uncontrolled Resource Consumption
v4 < v20.20.0, v22 < v22.22.0, v24 < v24.13.0, v25 < v25.3.0
Jan 13, 2026
High
Angular
Angular
Cross-Site Scripting
<=18.2.14, >=19.0.0-next.0 <19.2.18, >=20.0.0-next.0 <20.3.16, >=21.0.0-next.0 <21.0.7, >=21.1.0-next.0 <21.1.0-rc.0
Jan 9, 2026
Medium
Drupal 7
IFrame Remove Filter Module
Cross-Site Scripting
>=7.0.x <=7.1.5
Jan 8, 2026
Medium
GraphQL Java
GraphQL Java
Improper Input Validation (4.16)
<19.11, >=20.0 <20.9, >=21.0 <21.5
Jan 5, 2026
No results found
Please enter a valid Vulnerability ID number or Technology name.