Vulnerability Directory
If you’re currently using these frameworks in your application’s tech stack, your application could be vulnerable.
Secure drop-in replacements for open source software from HeroDevs helps you stay secure, compliant, and compatible while you migrate.
Switch to Never-Ending Support (NES) from HeroDevs to immediately mitigate these vulnerabilities.
Severity
ID
Technology
Libraries Affected
Category
Version(s) Affected
Published Date
High
io.projectreactor.netty:reactor-netty-http
Information Exposure
<1.2.8, >=1.3.0-M1 <1.3.0-M5
Sep 21, 2026
High
io.projectreactor.netty:reactor-netty-http
Information Exposure
<1.2.18, >=1.3.0 <1.3.6
Sep 21, 2026
High
Angular
Angular
Cross-Site Scripting
>=5.0.0-beta.6 <=19.2.25, >=20.0.0 <20.3.30, >=21.0.0 <21.2.22, >=22.0.0 <22.1.4
Sep 16, 2026
High
Angular
Angular
Cross-Site Scripting
>=5.0.0-beta.6 <=19.2.25, >=20.0.0 < 20.3.30, >=21.0.0 < 21.2.22, >=22.0.0 < 22.1.4
Sep 16, 2026
Medium
Angular
Angular
Information Exposure
>=16.0.0-next.7 <=19.2.25, >=20.0.0 <20.3.28, >=21.0.0 <21.2.20, >=22.0.0 <22.1.1
Sep 16, 2026
Medium
Angular
Angular
Cross-Site Scripting
<=19.2.25, >=20.0.0 <20.3.28, >=21.0.0 <21.2.20, >=22.0.0 <22.1.0
Sep 16, 2026
High
Angular
Angular
Server-Side Request Forgery
>=8.0.0-rc.0 <=19.2.25, >=20.0.0 <20.3.30, >=21.0.0 <21.2.22, >=22.0.0 <22.1.4
Sep 16, 2026
Medium
Node.js
Node.js
Improper Certificate Validation
<=26.5.0; <=24.18.0; <=22.23.1 (active lines); and the End-of-Life Node.js 12.x, 14.x, 16.x, 18.x, and 20.x lines (all versions, addressed via Node.js NES)
Sep 12, 2026
Medium
Node.js
Node.js
Incorrect Authorization
Node.js 22.x <=22.22.3; 24.x <=24.16.0; 26.x <=26.3.0
Sep 11, 2026
No results found
Please enter a valid Vulnerability ID number or Technology name.