Vulnerability Directory
If you’re currently using these frameworks in your application’s tech stack, your application could be vulnerable.
Secure drop-in replacements for open source software from HeroDevs helps you stay secure, compliant, and compatible while you migrate.
Switch to Never-Ending Support (NES) from HeroDevs to immediately mitigate these vulnerabilities.
Severity
ID
Technology
Libraries Affected
Category
Version(s) Affected
Published Date
High
Spring
Spring Security
Improper Session Handling
>=5.7.0 <5.7.8, >=5.8.0 <5.8.3, >=6.0.0 <6.0.3
Apr 19, 2023
Medium
Spring
Spring Framework
Denial of Service
<5.2.24, >=5.3.0 <5.3.27, >=6.0.0 <6.0.8
Apr 13, 2023
Medium
Spring
Spring Framework
Denial of Service
<5.2.23, >=5.3.0 <5.3.26, >=6.0.0 <6.0.7
Mar 23, 2023
High
Rails
Ruby on Rails Framework
Remote Code Execution
<=6.0.6.0 <=6.1.7.0 <=7.0.4.0
Feb 9, 2023
Medium
Node.js
Node.js
HTTP Request Smuggling
4.0 < 14.20.1, 16 < 16.17.1, 18 < 18.9.1
Dec 5, 2022
Critical
Rails
Ruby on Rails Framework
Remote Code Execution
2.2.0.0 - <=2.2.3.0 2.1.0.0 - <=2.1.4.0 2.0.0.0 - <=2.0.9.0
Dec 5, 2022
High
Spring
Spring Security
Authorization Bypass
>=5.6.0 <5.6.9, >=5.7.0 <5.7.5
Oct 31, 2022
Critical
Struts
Apache Struts
Remote Code Execution
>=2.3.0 <2.3.35, >=2.5.0 <2.5.17
Aug 18, 2022
High
Node.js
Node.js
Resource Injection
4.0 < 14.20.0, 16 < 16.20.0, 18 < 18.5.0
Jul 14, 2022
No results found
Please enter a valid Vulnerability ID number or Technology name.