Vulnerability Directory
If you’re currently using these frameworks in your application’s tech stack, your application could be vulnerable.
Secure drop-in replacements for open source software from HeroDevs helps you stay secure, compliant, and compatible while you migrate.
Switch to Never-Ending Support (NES) from HeroDevs to immediately mitigate these vulnerabilities.
Severity
ID
Technology
Libraries Affected
Category
Version(s) Affected
Published Date
Medium
Spring
Spring Batch
Remote Code Execution
>=5.0.0 <=5.2.6, >=6.0.0 <=6.0.4
Aug 26, 2026
Critical
Spring
Spring Batch
Remote Code Execution
>= 6.0.0 <= 6.0.4, >= 5.0.0 <= 5.2.6
Aug 26, 2026
Medium
Spring
Spring Cloud Config
Denial of Service
>=5.0.0 <=5.0.4, >=4.3.0 <=4.3.4, >=4.0.0 <=4.2.8, <=3.1.14
Aug 26, 2026
Medium
Apache Tomcat
Apache Tomcat
Authorization Bypass
>=8.5.104 <=8.5.109 (NES for Apache Tomcat releases; stock Apache Tomcat 8.5.x is not affected)
Aug 25, 2026
Low
Spring
Spring Cloud Stream
Denial of Service
>=4.0.4 <=4.0.5, >=4.1.0 <=4.1.6, >=4.2.0 <=4.2.3, >=4.3.0 <=4.3.3, >=5.0.0 <5.0.3
Aug 25, 2026
Low
Spring
Spring Cloud Stream
Denial of Service
>=4.2.0 <=4.2.6, >=4.3.0 <=4.3.3, >=5.0.0 <=5.0.2
Aug 25, 2026
Low
Spring
Spring Cloud Stream
Incorrectly Configured Access Control
>=3.0.0.RELEASE <=3.0.13.RELEASE, >=3.1.0 <=3.1.6, >=3.2.0 <=3.2.10, >=4.0.0 <=4.0.5, >=4.1.0 <=4.1.6, >=4.2.0 <=4.2.3, >=4.3.0 <=4.3.3, >=5.0.0 <5.0.3
Aug 25, 2026
No results found
Please enter a valid Vulnerability ID number or Technology name.