Vulnerability Directory
If you’re currently using these frameworks in your application’s tech stack, your application could be vulnerable.
Secure drop-in replacements for open source software from HeroDevs helps you stay secure, compliant, and compatible while you migrate.
Switch to Never-Ending Support (NES) from HeroDevs to immediately mitigate these vulnerabilities.
Severity
ID
Technology
Libraries Affected
Category
Version(s) Affected
Published Date
High
Moodle
Moodle, IOMAD
Incorrect Authorization
<4.5.12, >=5.0.0 <5.0.8, >=5.1.0 <5.1.5, >=5.2.0 <5.2.1
Oct 14, 2026
High
Moodle
Moodle, IOMAD
Cross-Site Scripting
<4.5.12, >=5.0.0 <5.0.8, >=5.1.0 <5.1.5, >=5.2.0 <5.2.1
Oct 14, 2026
Medium
Moodle
Moodle, IOMAD
Authorization Bypass
<4.1.22, >=4.2.0 <4.4.12, >=4.5.0 <4.5.8, >=5.0.0 <5.0.4, >=5.1.0 <5.1.1
Oct 14, 2026
Low
Moodle
Moodle, IOMAD
Cross-Site Scripting
<4.5.12, >=5.0.0 <5.0.8, >=5.1.0 <5.1.5, >=5.2.0 <5.2.1
Oct 14, 2026
High
Moodle
Moodle, IOMAD
Path Traversal
<4.5.12, >=5.0.0 <5.0.8, >=5.1.0 <5.1.5, >=5.2.0 <5.2.1
Oct 14, 2026
Low
Moodle
Moodle, IOMAD
Incorrect Authorization
<4.1.20, >=4.2.0 <4.4.10, >=4.5.0 <4.5.6, >=5.0.0 <5.0.2
Oct 14, 2026
Low
Moodle
Moodle, IOMAD
Cross-site Request Forgery
<4.5.12, >=5.0.0 <5.0.8, >=5.1.0 <5.1.5, >=5.2.0 <5.2.1
Oct 14, 2026
Medium
Moodle
Moodle, IOMAD
Cross-Site Scripting
<4.1.22, >=4.2.0 <4.4.12, >=4.5.0 <4.5.8, >=5.0.0 <5.0.4, >=5.1.0 <5.1.1
Oct 14, 2026
High
Moodle
Moodle, IOMAD
Information Exposure
<4.1.19, >=4.2.0 <4.4.9, >=4.5.0 <4.5.5, >=5.0.0 <5.0.1
Oct 14, 2026
Low
Moodle
Moodle, IOMAD
Cross-site Request Forgery
<4.5.12, >=5.0.0 <5.0.8, >=5.1.0 <5.1.5, >=5.2.0 <5.2.1
Oct 14, 2026
Low
Moodle
Moodle, IOMAD
Incorrect Authorization
<4.1.22, >=4.2.0 <4.4.12, >=4.5.0 <4.5.8, >=5.0.0 <5.0.4, >=5.1.0 <5.1.1
Oct 14, 2026
High
Moodle
Moodle, IOMAD
Weak Authentication
<4.1.22, >=4.2.0 <4.4.12, >=4.5.0 <4.5.8, >=5.0.0 <5.0.4, >=5.1.0 <5.1.1
Oct 14, 2026
High
Moodle
Moodle, IOMAD
Server-Side Request Forgery
<4.1.19, >=4.2.0 <4.4.9, >=4.5.0 <4.5.5, >=5.0.0 <5.0.1
Oct 14, 2026
Low
Moodle
Moodle, IOMAD
Information Exposure
<4.1.19, >=4.2.0 <4.4.9, >=4.5.0 <4.5.5, >=5.0.0 <5.0.1
Oct 14, 2026
Low
Apache CXF
Apache CXF
Denial of Service
<3.6.13, >=4.0.0 <4.1.9, >=4.2.0 <4.2.4
Oct 14, 2026
No results found
Please enter a valid Vulnerability ID number or Technology name.