Vulnerability Directory

If you’re currently using these frameworks in your application’s tech stack, your application could be vulnerable.

Secure drop-in replacements for open source software from HeroDevs helps you stay secure, compliant, and compatible while you migrate.

Switch to Never-Ending Support (NES) from HeroDevs to immediately mitigate these vulnerabilities.
Arrow down

Vulnerability Directory

If you’re currently using these frameworks in your application’s tech stack, your application could be vulnerable.

Secure drop-in replacements for open source software from HeroDevs helps you stay secure, compliant, and compatible while you migrate.

Switch to Never-Ending Support (NES) from HeroDevs to immediately mitigate these vulnerabilities.

Codey gradient
Search here
Clear
Filter by Severity
Clear
Filter by Technology
Sign up for the latest vulnerability alerts
Rss feed icon
Subscribe via RSS
or
Thanks for signing up for our Newsletter! We look forward to connecting with you.
Oops! Something went wrong while submitting the form.
Severity
ID
Technology
Libraries Affected
Category
Version(s) Affected
Published Date
Medium
Drupal 7
View Bulk Operations module
Broken Access
>= 7.x-3.0
May 16, 2025
Medium
Drupal 7
GDPR
Cross-site Request Forgery
>7.0.0 <=7.1.x-alpha12
May 16, 2025
Medium
Drupal 7
SpamSpan
Cross-Site Scripting
>=7.0.0 <7.2.1
May 16, 2025
Low
Spring
Spring Framework
Authorization Bypass
>=4.3.0 <=4.3.30, >=5.3.0 <=5.3.42, >=6.0.0 <=6.0.27, >=6.1.0 <6.1.20, >=6.2.0 <6.2.7
May 15, 2025
Medium
Bootstrap
Bootstrap
Cross-Site Scripting
>=3.4.1 <4.0.0
May 15, 2025
High
Struts
Apache Struts
Path Traversal
<1.3.10, >=2.0.0
May 12, 2025
Medium
Struts
Apache Struts
Denial of Service
<1.3.10, >=2.0.5 <2.5.31, >=6.0.0 <6.1.2.1
May 12, 2025
Low
Struts
Apache Struts
Cross-Site Scripting
<1.2.9
May 12, 2025
Low
Struts
Apache Struts
Cross-Site Scripting
<1.2.9
May 12, 2025
High
Struts
Apache Struts
Denial of Service
<1.2.9
May 12, 2025
High
Struts
Apache Struts
Authorization Bypass
<1.2.9
May 12, 2025
High
Spring
Spring Security
Authorization Bypass
>=5.7.0 <5.7.12, >=5.8.0 <5.8.11, >=6.0.0 <6.0.10, >=6.1.0 <6.1.8, >=6.2.0 <6.2.3
May 8, 2025
Medium
AngularJS
AngularJS
Content Spoofing
>=0.0.0
Apr 29, 2025
Medium
Spring
Spring Boot
Incorrectly Configured Access Control
<2.7.0, >=2.7.0 <2.7.25, >=3.1.0 <3.1.16, >=3.2.0 <3.2.14, >=3.3.0 <3.3.11, >=3.4.0 <3.4.5
Apr 25, 2025
Medium
Spring
Spring Security
Information Exposure
=5.7.16, =5.8.18, =6.0.16, =6.1.14, =6.2.10, =6.3.8, =6.4.4
Apr 22, 2025
Exclamation icon
No results found

Please enter a valid Vulnerability ID number or Technology name.