Vulnerability Directory
If you’re currently using these frameworks in your application’s tech stack, your application could be vulnerable.
Secure drop-in replacements for open source software from HeroDevs helps you stay secure, compliant, and compatible while you migrate.
Switch to Never-Ending Support (NES) from HeroDevs to immediately mitigate these vulnerabilities.
Severity
ID
Technology
Libraries Affected
Category
Version(s) Affected
Published Date
Medium
Drupal 7
Webform Multiple File Upload
Cross-Site Scripting
>=7.1.0 <=7.1.6
Jan 27, 2026
High
Struts
Apache Struts
Remote Code Execution
>=2.0.0 <=2.3.37, >=2.5.0 <=2.5.33, >=6.0.0 <6.1.1,
Jan 16, 2026
Medium
Drupal 7
Form Builder Drupal Module
Cross-Site Scripting
>=7.1.0 <=7.1.22
Jan 15, 2026
Medium
Drupal 7
Webform Multiple File Upload
Cross-Site Scripting
>=7.1.0 <=7.1.6
Jan 13, 2026
High
Angular
Angular
Cross-Site Scripting
<=18.2.14, >=19.0.0-next.0 <19.2.18, >=20.0.0-next.0 <20.3.16, >=21.0.0-next.0 <21.0.7, >=21.1.0-next.0 <21.1.0-rc.0
Jan 9, 2026
Medium
Drupal 7
IFrame Remove Filter Module
Cross-Site Scripting
>=7.0.x <=7.1.5
Jan 8, 2026
No results found
Please enter a valid Vulnerability ID number or Technology name.