Vulnerability Directory
If you’re currently using these frameworks in your application’s tech stack, your application could be vulnerable.
Secure drop-in replacements for open source software from HeroDevs helps you stay secure, compliant, and compatible while you migrate.
Switch to Never-Ending Support (NES) from HeroDevs to immediately mitigate these vulnerabilities.
Severity
ID
Technology
Libraries Affected
Category
Version(s) Affected
Published Date
High
Struts
Apache Struts
Denial of Service
>=2.0.0 <=2.3.37, >=2.5.0 <=2.5.33, >=6.0.0 <6.8.0, >=7.0.0 <7.1.1, >=2.5.33-struts, 2-2.5.34 <2.5.33-struts 2-2.5.38
Dec 15, 2025
High
Struts
Apache Struts
Denial of Service
>=2.0.0 <=2.3.37, >=2.5.0 <=2.5.33, >=6.0.0 <6.8.0, >=7.0.0 <7.1.1
Dec 9, 2025
Low
Dojo
Dojo
Cross-Site Scripting
<1.11.10, >=1.12.0 <1.12.9, >=1.13.0 <1.13.8, >=1.14.0 <1.14.7, >=1.15.0 <1.15.4, >=1.16.0 <1.16.3
Dec 3, 2025
Medium
Dojo
Dojo
Cross-Site Scripting
<1.11.10, >=1.12.0 <1.12.8, >=1.13.0 <1.13.7, >=1.14.0 <1.14.6, >=1.15.0 <1.15.3, >=1.16.0 <1.16.1
Dec 3, 2025
Medium
Dojo
Dojo
Cross-Site Scripting
<1.10.10, >=1.11.0 <1.11.6, >=1.12.0 <1.12.4, >=1.13.0 <1.13.1
Dec 3, 2025
High
Dojo
Dojo
Prototype Pollution
<1.11.13, >=1.12.0 <1.12.11, >=1.13.0 <1.13.10, >=1.14.0 <1.14.9, >=1.15.0 <1.15.6, >=1.16.0 <1.16.5
Dec 3, 2025
Low
Dojo
Dojo
Prototype Pollution
<1.11.10, >=1.12.0 <1.12.8, >=1.13.0 <1.13.7, >=1.14.0 <1.14.6, >=1.15.0 <1.15.3, >=1.16.0 <1.16.2
Dec 3, 2025
High
Angular
Angular
Cross-Site Scripting
>=21.0.0-next.0 <21.0.2, >=20.0.0-next.0 <20.3.15, >=19.0.0-next.0 <19.2.17, <=18.2.14
Dec 2, 2025
High
Angular
Angular
Information Exposure
>=21.0.0-next.0 <21.0.1, >=20.0.0-next.0 <20.3.14, >=19.0.0-next.0 <19.2.16, <=18.2.14
Dec 2, 2025
No results found
Please enter a valid Vulnerability ID number or Technology name.