Vulnerability Directory
If you’re currently using these frameworks in your application’s tech stack, your application could be vulnerable.
Secure drop-in replacements for open source software from HeroDevs helps you stay secure, compliant, and compatible while you migrate.
Switch to Never-Ending Support (NES) from HeroDevs to immediately mitigate these vulnerabilities.
Severity
ID
Technology
Libraries Affected
Category
Version(s) Affected
Published Date
High
Apache Tomcat
Apache Tomcat
Denial of Service
>=9.0.0.M1 <9.0.108, >=10.1.0-M1 <10.1.44, >=11.0.0-M1 <11.0.10
Nov 3, 2026
Critical
Spring
Spring Security
Authorization Bypass
>=5.6.0 <5.6.12, >=5.7.0 <5.7.10, >=5.8.0 <5.8.5, >=6.0.0 <6.0.5, >=6.1.0 <6.1.2
Nov 3, 2026
Medium
MariaDB Connector/J
MariaDB Connector/J
Denial of Service
>=3.0.0 <3.3.7, >=3.4.0 <3.4.5, >=3.5.0 <3.5.11
Nov 2, 2026
Medium
MariaDB Connector/J
MariaDB Connector/J
Denial of Service
>=3.0.0 <3.3.7, >=3.4.0 <3.4.5
Nov 2, 2026
Medium
MariaDB Connector/J
MariaDB Connector/J
Denial of Service
>=3.0.0 <3.3.7, >=3.4.0 <3.4.5, >=3.5.0 <3.5.11
Nov 2, 2026
Medium
MariaDB Connector/J
MariaDB Connector/J
Information Exposure
>=3.0.0 <3.3.7, >=3.4.0 <3.4.5, >=3.5.0 <3.5.11
Nov 2, 2026
Medium
MariaDB Connector/J
MariaDB Connector/J
Content Spoofing
>=3.0.0 <3.3.7, >=3.4.0 <3.4.5, >=3.5.0 <3.5.11
Nov 2, 2026
Medium
MariaDB Connector/J
MariaDB Connector/J
Denial of Service
>=3.0.0 <3.3.7, >=3.4.0 <3.4.5, >=3.5.0 <3.5.10
Nov 2, 2026
Low
MariaDB Connector/J
org.mariadb.jdbc:mariadb-java-client
Denial of Service
>=3.0.0 <3.3.7, >=3.4.0 <3.4.5, >=3.5.0 <3.5.11
Nov 2, 2026
High
Project Reactor
io.projectreactor:reactor-core
Denial of Service
>=3.5.7 <=3.7.19, >=3.8.0 <=3.8.6
Nov 2, 2026
Medium
Project Reactor
io.projectreactor:reactor-core
Denial of Service
<=3.4.41, >=3.5.0 <=3.7.19, >=3.8.0 <=3.8.6
Nov 2, 2026
Medium
MariaDB Connector/R2DBC
MariaDB Connector/R2DBC
Command Injection
<1.2.3, >=1.3.0 <1.3.1, >=1.4.0 <1.4.1
Oct 30, 2026
High
Angular
Angular
Denial of Service
<=19.2.25, >=20.0.0 <20.3.33, >=21.0.0 <21.2.25, >=22.0.0 <22.2.1
Oct 30, 2026
Medium
Angular
Angular
URL Redirect/Open Redirect
<=19.2.25, >=20.0.0 <20.3.33, >=21.0.0 <21.2.25, >=22.0.0 <22.2.1
Oct 30, 2026
High
Angular
Angular
Information Exposure
<=19.2.25, >=20.0.0 <20.3.34, >=21.0.0 <21.0.3
Oct 30, 2026
No results found
Please enter a valid Vulnerability ID number or Technology name.