Vulnerability Directory

If you’re currently using these frameworks in your application’s tech stack, your application could be vulnerable.

Secure drop-in replacements for open source software from HeroDevs helps you stay secure, compliant, and compatible while you migrate.

Switch to Never-Ending Support (NES) from HeroDevs to immediately mitigate these vulnerabilities.

Talk to Our Experts
Get Pricing
Codey gradient
Filter by Severity
Filter by Technology
Filter by Category
Filtering by:
Severity
=
Text for Severity
Close icon
Clear Filters
Severity
ID
Technology
Libraries Affected
Category
Version(s) Affected
Published Date
High
Open in new tab icon
CVE-2026-59324
Spring
Spring Integration
Information Exposure
>=7.1.0 <7.1.1, >=7.0.0 <7.0.6, >=5.1.0 <=6.5.10
Aug 21, 2026
Medium
Open in new tab icon
CVE-2026-59275
Spring
Spring AMQP
Denial of Service
>=4.1.0 <4.1.1, >=4.0.0 <4.0.5, >=3.0.0 <=3.2.12, >=2.1.0 <=2.4.18
Aug 20, 2026
Medium
Open in new tab icon
CVE-2026-59293
Spring
Spring Integration
Information Exposure
>=7.1.0 <7.1.1, >=7.0.0 <7.0.6, >=6.5.0 <=6.5.10, >=6.0.0 <=6.4.12
Aug 20, 2026
High
Open in new tab icon
CVE-2026-73633
Apache Struts
Apache Struts
Denial of Service
>=2.1.8 <=2.3.37, >=2.5.0 <=2.5.33, >=6.0.0 <=6.10.0, >=7.0.0 <=7.2.1
Aug 19, 2026
High
Open in new tab icon
CVE-2025-26646
.NET
.NET SDK
Resource Injection
Microsoft.Build.Tasks.Core >= 17.0.0 <= 17.8.3; as bundled in the .NET 6 SDK through NES for .NET 6.0.44
Aug 19, 2026
High
Open in new tab icon
CVE-2025-55247
.NET
.NET SDK
Improper Link Resolution Before File Access ('Link Following')
Microsoft.Build.Tasks.Core >= 17.8.0 <= 17.14.8; as bundled in the .NET 6 SDK through NES for .NET 6.0.44
Aug 19, 2026
High
Open in new tab icon
CVE-2025-26682
.NET
ASP.NET Core
Allocation of Resources Without Limits or Throttling
Microsoft.AspNetCore.App >= 6.0.0 <= 6.0.44
Aug 19, 2026
Medium
Open in new tab icon
CVE-2025-55248
.NET
.NET
Cryptographic Weakness
Microsoft.NETCore.App >= 6.0.0 <= 6.0.44
Aug 19, 2026
High
Open in new tab icon
CVE-2025-30399
.NET
.NET
Remote Code Execution
Microsoft.NETCore.App >= 6.0.0 <= 6.0.44
Aug 19, 2026
High
Open in new tab icon
CVE-2026-73635
Apache Struts
Apache Struts
Denial of Service
>=2.0.0 <2.3.38, >=2.5.0 <2.5.34, >=6.0.0 <6.11.0, >=7.0.0 <7.3.0
Aug 19, 2026
Medium
Open in new tab icon
CVE-2022-35278
Apache ActiveMQ Artemis
Apache ActiveMQ Artemis
Content Spoofing
>=2.16.0 <2.24.0
Aug 17, 2026
Low
Open in new tab icon
CVE-2025-27427
Apache ActiveMQ Artemis
Apache ActiveMQ Artemis
Authorization Bypass
>=2.0.0 <=2.39.0
Aug 17, 2026
Critical
Open in new tab icon
CVE-2026-27446
Apache ActiveMQ Artemis
Apache ActiveMQ Artemis
Authorization Bypass
>=2.11.0 <=2.44.0
Aug 17, 2026
High
Open in new tab icon
CVE-2026-58641
.NET
SkiaSharp
Integer Overflow or Wraparound
SkiaSharp < 4.148.0
Aug 14, 2026
High
Open in new tab icon
CVE-2026-68494
Jackson
jackson-core
Denial of Service
>=2.9.0 <2.18.8, >=2.19.0 <2.21.4
Aug 14, 2026
Exclamation icon
No results found

Please enter a valid Vulnerability ID number or Technology name.

Sign up for the latest vulnerability alerts
Rss feed icon
Subscribe via RSS
or

By submitting the form I acknowledge receipt of our Privacy Policy.

Thanks for signing up for our Newsletter! We look forward to connecting with you.
Oops! Something went wrong while submitting the form.