Vulnerability Directory
If you’re currently using these frameworks in your application’s tech stack, your application could be vulnerable.
Secure drop-in replacements for open source software from HeroDevs helps you stay secure, compliant, and compatible while you migrate.
Switch to Never-Ending Support (NES) from HeroDevs to immediately mitigate these vulnerabilities.
Severity
ID
Technology
Libraries Affected
Category
Version(s) Affected
Published Date
Medium
Spring
Apache Kafka
Inconsistent Interpretation of HTTP Requests
>=2.3.0 <=3.5.2 >=3.6.0 <=3.6.2 =3.7.0
Dec 16, 2025
Medium
Spring
Apache Kafka
Incorrectly Configured Access Control
>=0.10.2.0 <3.7.2 =3.8.0
Dec 16, 2025
High
Struts
Apache Struts
Denial of Service
>=2.0.0 <=2.3.37, >=2.5.0 <=2.5.33, >=6.0.0 <6.8.0, >=7.0.0 <7.1.1, >=2.5.33-struts 2-2.5.34 <2.5.33-struts 2-2.5.38
Dec 15, 2025
High
Struts
Apache Struts
Denial of Service
>=2.0.0 <=2.3.37, >=2.5.0 <=2.5.33, >=6.0.0 <6.8.0, >=7.0.0 <7.1.1
Dec 9, 2025
No results found
Please enter a valid Vulnerability ID number or Technology name.