Vulnerability Directory
If you’re currently using these frameworks in your application’s tech stack, your application could be vulnerable.
Secure drop-in replacements for open source software from HeroDevs helps you stay secure, compliant, and compatible while you migrate.
Switch to Never-Ending Support (NES) from HeroDevs to immediately mitigate these vulnerabilities.
Severity
ID
Technology
Libraries Affected
Category
Version(s) Affected
Published Date
Low
Reactor Netty
io.projectreactor.netty:reactor-netty-core
Incorrectly Configured Access Control
<=1.0.52, >=1.1.0 <=1.2.18, >=1.3.0 <=1.3.6
Oct 21, 2026
Critical
PHP
PHP (php-src)
Remote Code Execution
<8.2.35, >=8.3.0 <8.3.36, >=8.4.0 <8.4.27, >=8.5.0 <8.5.12
Oct 21, 2026
Critical
PHP
PHP
Remote Code Execution
<8.2.35, >=8.3.0 <8.3.36, >=8.4.0 <8.4.27, >=8.5.0 <8.5.12
Oct 21, 2026
Low
Reactor Netty
io.projectreactor.netty:reactor-netty-http-brave
Information Exposure
<=1.0.52, >=1.1.0 <=1.2.18, >=1.3.0 <=1.3.6
Oct 21, 2026
Medium
Reactor Netty
io.projectreactor.netty:reactor-netty-http
Authorization Bypass
<=1.0.52, >=1.1.0 <=1.2.18, >=1.3.0 <=1.3.6
Oct 21, 2026
Medium
Reactor Netty
io.projectreactor.netty:reactor-netty-http
Information Exposure
>=1.3.0 <1.3.7, >=1.1.0 <1.2.19, <1.0.53
Oct 21, 2026
High
PostgreSQL JDBC Driver
PostgreSQL JDBC Driver
Denial of Service
>=42.2.0 <42.7.11
Oct 16, 2026
High
Microsoft JDBC Driver for SQL Server
Microsoft JDBC Driver for SQL Server
Information Exposure
<10.2.4, >=11.2.0 <11.2.4, >=12.2.0 <12.2.1, >=12.4.0 <12.4.3, >=12.6.0 <12.6.5, >=12.8.0 <12.8.2, >=12.10.0 <12.10.2, >=13.2.0 <13.2.1
Oct 16, 2026
Medium
Reactor Netty
io.projectreactor.netty:reactor-netty-http
Denial of Service
<=1.0.52, >=1.1.0 <=1.2.18, >=1.3.0 <=1.3.6
Oct 16, 2026
Medium
Jetty
Eclipse Jetty
Information Exposure
>=9.4.0 <=9.4.64, >=10.0.0 <=10.0.32, >=11.0.0 <=11.0.32, >=12.0.0 <=12.0.38, >=12.1.0 <=12.1.12
Oct 16, 2026
High
Jetty
jetty-client
Information Exposure
>=9.4.0 <=9.4.64, >=10.0.0 <=10.0.32, >=11.0.0 <=11.0.32, >=12.0.0 <=12.0.38, >=12.1.0 <=12.1.12
Oct 15, 2026
Medium
Jetty
Eclipse Jetty
Authorization Bypass
>=7.6.13 <=9.4.64, >=10.0.0 <=10.0.32, >=11.0.0 <=11.0.32, >=12.0.0 <=12.0.38, >=12.1.0 <=12.1.11
Oct 15, 2026
No results found
Please enter a valid Vulnerability ID number or Technology name.