Products

Never-Ending Support for Open Source

The Never-Ending Support product line offers secure drop-in replacements for end-of-life open-source software your team depends on.

Explore Pricing Talk to Sales See All Products

Get a Custom Quote

Featured NES Products

12, 14, 16, 18, 20, 22

Other NES Products

Products Overview

Explore our range of Never-Ending Support Products (20)

All Products

Solutions

Never Ending Support for Open Source.

HeroDevs partners with open-source authors to give companies Never-Ending Support, expert consulting, and engineering for sunsetted open-source packages.

Explore Pricing Consulting Talk to Sales View All Products

Get a Custom Quote

SOLUTIONS BY INDUSTRY

SOLUTIONS BY ROLE

Software Development Managers

Engineers Leaders

Compliance-Focused Decision-Makers

THOUGHT LEADERSHIP

Maximize the Value of Legacy Software Without Adding to Your Tech Debt

How OSS Long-Term Support helps you mitigate risk, reduce costs, and stay compliant—while giving you the freedom to migrate on your own terms.

Professional Services

Unlock the full potential of your HeroDevs solutions with our Professional Services. From expert guidance to complete implementation, get white-glove service tailored to your needs—ensuring seamless performance and peace of mind.

Learn More

Pricing

Developers

Integrate Seamlessly With Your Current Build Process

Switching to NES take minutes and is as simple as pointing to our private repository.

Policies Terms of Service

Service Level Agreements

Vulnerability Directory

NES Documentation

Explore install and release notes for all NES products

NES Documentation

GUIDES

Download Methods Consuming Never-Ending Support Packages Nexus Repository Manager Instructions Artifactory Repository Manager Instructions

TOOLS

HeroDevs CLI Vulnerability Directory Report Vulnerability XEOL

GUIDES

Maximize the Value of Legacy Software Without Adding to Your Tech Debt

How OSS Long-Term Support helps you mitigate risk, reduce costs, and stay compliant—while giving you the freedom to migrate on your own terms.

Resources

Explore the HeroDevs blog, whitepapers, documentation, and more to stay informed.

Blog Shows Case Studies Newsletters White Papers Webinars

Vulnerability Directory

If you’re currently using these frameworks in your application’s tech stack, your application could be vulnerable.

Vulnerability Directory

Company

Careers Customers

Documentation

NES Documentation

Vulnerability Directory

If you’re currently using these frameworks in your application’s tech stack, your application could be vulnerable.

Secure drop-in replacements for open source software from HeroDevs helps you stay secure, compliant, and compatible while you migrate.

Switch to Never-Ending Support (NES) from HeroDevs to immediately mitigate these vulnerabilities.

Talk to Our Experts

Get Pricing

Vulnerability Directory

If you’re currently using these frameworks in your application’s tech stack, your application could be vulnerable.

Secure drop-in replacements for open source software from HeroDevs helps you stay secure, compliant, and compatible while you migrate.

Switch to Never-Ending Support (NES) from HeroDevs to immediately mitigate these vulnerabilities.

Talk to Our Experts

Get Pricing

Filter by Severity

CriticalHighMediumLow

Filter by Technology

AngularJS

Angular

Spring

.NET

Node.js

Apache Struts

Bootstrap

Drupal 7

jQuery

Vuetify

Express

Rails

Next.js

Apache Solr & Lucene

Apache Tomcat

Apache Spark

Filter by Category

Log Injection

Cross-site Request Forgery

Insufficient Verification of Data Authenticity

Privilege Escalation

Incorrectly Configured Access Control

Broken Access

Improper Input Validation (4.16)

Improper Link Resolution Before File Access ('Link Following')

Heap-based Buffer Overflow

Buffer Over-read

Integer Overflow or Wraparound

Creation of Temporary File in Directory with Insecure Permissions

Uncontrolled Resource Consumption

Inefficient Algorithmic Complexity

Improper Handling of Highly Compressed Data (Data Amplification)

Use After Free

Unchecked Input for Loop Condition

Memory Allocation with Excessive Size Value

Access of Resource Using Incompatible Type ('Type Confusion')

Weak Authentication

Prototype Pollution

Server-Side Request Forgery

Improper Output Neutralization for Logs

Improper Session Handling

Use of Unmaintained Third Party

CBC Mode

Predictable Initialization Vector

Cryptographic Weakness

Search Injection

Authorization Bypass

Resource Injection

Remote Code Execution

Denial of Service

Information Exposure

HTTP Request Smuggling

Command Injection

URL Redirect/Open Redirect

Signature Forgery

Path Traversal

Content Spoofing

ReDoS Vulnerability

Cross-Site Scripting

Filtering by:

Severity

Text for Severity

Clear Filters

Severity

Technology

Libraries Affected

Category

Version(s) Affected

Published Date

High

CVE-2024-22234

Spring

Spring Security

Authorization Bypass

<6.1.7, >=6.2.0 <6.2.2

Feb 19, 2024

Medium

CVE-2024-22025

Node.js

Denial of Service

<21.6.2, <20.11.1, <v18.19.1, <= 16.20.2

Feb 14, 2024

High

CVE-2024-22019

Node.js

Denial of Service

<21.6.2, <20.11.1, <v18.19.1, <= 16.20.2, <=v14.21.3, <= v12.22.12

Feb 14, 2024

High

CVE-2024-21490

AngularJS

ReDoS Vulnerability

>=1.3.0

Feb 10, 2024

High

CVE-2014-0114

Struts

Apache Commons BeanUtils

Remote Code Execution

<=1.9.2

Feb 1, 2024

High

CVE-2016-1182

Struts

Apache Struts

Cross-Site Scripting

>=1.0.0 <=1.3.10

Feb 1, 2024

High

CVE-2016-1181

Struts

Apache Struts

Authorization Bypass

>=1.0.0 <=1.3.10

Feb 1, 2024

High

CVE-2015-0899

Struts

Apache Struts

Authorization Bypass

>=1.1.0 <=1.3.10

Feb 1, 2024

Low

CVE-2012-1007

Struts

Apache Struts

Cross-Site Scripting

<=1.3.10

Feb 1, 2024

Medium

CVE-2023-30590

Node.js

Cryptographic Weakness

4.0 < 16.20.1, 18 < 18.16.1, 20 < 20.3.1

Nov 28, 2023

Medium

CVE-2023-30588

Node.js

Uncontrolled Resource Consumption

4.0 < 16.20.1 , 18 < 18.16.1, 20 < 20.3.1

Nov 28, 2023

Medium

CVE-2023-38552

Node.js

Insufficient Verification of Data Authenticity

4.0 <= 18.18.1, 20 < 20.8.1

Oct 18, 2023

Medium

CVE-2023-32559

Node.js

Privilege Escalation

4 <= 16.20.1, 0 <= 18.17.0, 0 <= 20.5.0

Aug 24, 2023

High

CVE-2023-32002

Node.js

Privilege Escalation

4 <= 16.20.1, 18 <= 18.17.0, 20 <= 20.5.0

Aug 21, 2023

Medium

CVE-2023-32006

Node.js

Privilege Escalation

Information Exposure

4.0 < 16.20.2, 18 < 18.17.1, 20 < 20.5.1

Aug 15, 2023

No results found

Please enter a valid Vulnerability ID number or Technology name.

Subscribe via RSS

First Name *

Last Name *

Work Email *

Thanks for signing up for our Newsletter! We look forward to connecting with you.

Oops! Something went wrong while submitting the form.

Drop-in replacements for deprecated open source software that keeps you secure and compliant.

+1 877-586-1965

hello@herodevs.com

8850 S 700 E #2437 Sandy, UT 84070

Overview

Never-Ending Support (NES) Products

Apache Solr & Lucene NES

Solutions

Software Development Managers

Engineers Leaders

Compliance-Focused Decision-Makers

Company

Resources

Vulnerability Directory

Partners

Cookies Preferences

By clicking "Accept", you agree to the storing of cookies on your device to enhance site navigation, analyze site usage, and assist in our marketing efforts. View our Privacy Policy for more information.

Preferences Reject Accept

Manage Consent Preferences by Category

Essentials

Always active

Necessary for the site to function. Always On.

Marketing

Used for targeted advertising.

Personalization

Remembers your preferences and provides enhanced features.

Analytics

Measures usage and improves your experience.

Reject All Accept All

Thank you! Your submission has been received!

Oops! Something went wrong while submitting the form.