Products

Never-Ending Support for Open Source

The Never-Ending Support product line offers secure drop-in replacements for end-of-life open-source software your team depends on.

Secure what you need.
Skip what you don’t.

Get a Custom Quote

Featured NES Products

JavaScriptJava.NETPHPPythonDatabaseOther

Thank you! Your submission has been received!

Oops! Something went wrong while submitting the form.

View All Products

Explore Pricing

Supported Products

Thank you! Your submission has been received!

Oops! Something went wrong while submitting the form.

Featured NES Products

Featured NES ProductsFrontendBackendInfrastructure

Thank you! Your submission has been received!

Oops! Something went wrong while submitting the form.

AngularJS

AngularJS

1.4.x, 1.5.x, 1.8.x

Angular

v4 - v19

Spring

Spring

Various

.NET

.NET

6, 8, 9

Node.js

Node.js

12, 14, 16, 18, 20

Apache Struts

Apache Struts

Various versions

Bootstrap

Bootstrap

2 - 4

Vue 2

Vue 2

2.x

PostgreSQL

PostgreSQL

12.x, 13.x, 14.x

Apache Grails

Apache Grails

6.2, 7

Apache Solr & Lucene

Apache Solr & Lucene

8.11.x

Apache Tapestry

Apache Tapestry

4.1.x

Apache Tomcat

Apache Tomcat

8.5

CometD

CometD

5, 6, 7

Django

Django

3.2, 4.2

Drupal 7

Drupal 7

7.x

ESLint

ESLint

8.x

Express

Express

3.x

Fastify

3.x

Grunt

Grunt

v0.4 - 1.5

Hazelcast

Hazelcast

5.1.x, 5.2.x, 5.3.x

Hibernate

Hibernate

5.6

Ingress NGINX

Ingress NGINX

1.15.1

Jackson

Jackson

2.x

Jetty

Jetty

9, 10, 11

jQuery

jQuery

1.3.x, 1.5.x, 1.6.x, 1.7.x, 1.12.x, 2.1.x, 2.2.x, 3.5.x

Knockout.js

Knockout.js

3.5.1, 3.4.2, 2.3.0

Lodash

Lodash

3.x, 4.x

NestJS

NestJS

9

Next.js

Next.js

12.3.5

NumPy

NumPy

1.26.x

Nuxt

Nuxt

2.x, 3.x

Protractor

Protractor

7.0.0

PHP

7.2, 7.3, 7.4, 8.0, 8.1, 8.2

Quarkus

Quarkus

2.16, 3.20

Rails

Rails

2.3, 3.2, 4.2, 5.2, 6.1

React

React

16, 17

Vuetify

Vuetify

2.x

Featured NES Products

Featured NES ProductsFrontendBackendInfrastructure

Thank you! Your submission has been received!

Oops! Something went wrong while submitting the form.

View All Products

Explore Pricing

No NES Products available for Product Name

Do you need support for open source software not listed yet? Tell us what you need!

Request Support

EOL Dataset Pricing

Developers

Integrate Seamlessly With Your Current Build Process

Switching to NES takes minutes

Policies Terms of Service

Service Level Agreements

Vulnerability Directory

NES Documentation

Explore install and release notes for all NES products

NES Documentation

GUIDES

Download Methods Consuming Never-Ending Support Packages Nexus Repository Manager Instructions Artifactory Repository Manager Instructions

TOOLS

HeroDevs CLI Spring Boot 4 Migration Calculator EU Cyber Resilience Act Readiness Checker Vulnerability Directory Report Vulnerability Open Source Sustainability Fund

GUIDES

The Developer’s Guide to Security Compliance

The Developer’s Guide to Security Compliance

What Developer Teams Need to Know About End-of-Life Open Source Software across the Top 20 Global Security Standards, Frameworks, and Regulations

SOLUTIONS BY INDUSTRY

Financial Services

SOLUTIONS BY ROLE

IT Security Managers

Software Development Managers

Engineering Leaders

Compliance-Focused Decision-Makers

WHITE PAPERS

Quantifying the Real Risks of Unsupported Open Source Software

Quantifying the Real Risks of Unsupported Open Source Software

A data-backed look at the security, compliance, and operational risks created by unsupported open source—and how long-term support models like NES help organizations stay secure and audit-ready.

Partners

Partner with HeroDevs

The HeroDevs APEX Partner Program is your path to the top. APEX rewards every step of the climb with escalating margins and support as your practice grows.

Become a Partner

Our Partners

From global platforms to trusted consultants, our partner network spans resale, integration, and advisory.

Meet our Partners

Resources

Vulnerability Directory

If you’re currently using these frameworks in your application’s tech stack, your application could be vulnerable.

View Vulnerabilities

Spring End-of-Life Resource Hub

End of life doesn’t have to mean end of support. Find strategies, resources, and solutions for keeping your Spring applications stable, secure, and compliant.

Resources

Company

Open Source Sustainability Fund

Resources

NES Documentation

Vulnerability Directory

If you’re currently using these frameworks in your application’s tech stack, your application could be vulnerable.

Secure drop-in replacements for open source software from HeroDevs helps you stay secure, compliant, and compatible while you migrate.

Switch to Never-Ending Support (NES) from HeroDevs to immediately mitigate these vulnerabilities.

Talk to Our Experts

Codey gradient

Filter by Severity

CriticalHighMediumLow

Filter by Technology

Angular

AngularJS

Apache Kafka

Apache Solr & Lucene

Apache Spark

Apache Struts

Apache Tapestry

Apache Tomcat

Bootstrap

Dojo

Drupal 7

Elliptic

Express

Hibernate

Ingress NGINX

Jackson

Jetty

jQuery

TinyMCE

.NET

Next.js

Node.js

Nuxt

Rails

Spring

Vue 2

Vuetify

Filter by Category

Access of Resource Using Incompatible Type ('Type Confusion')

Allocation of Resources Without Limits or Throttling

Authentication Bypass by Assumed-Immutable Data

Authorization Bypass

Broken Access

Buffer Over-read

Cache Deception

Cache Poisoning

CBC Mode

Code Injection

Command Injection

Concurrent Execution using Shared Resource with Improper Synchronization

Content Spoofing

Creation of Temporary File in Directory with Insecure Permissions

Cross-site Request Forgery

Cross-Site Scripting

Cryptanalysis

Cryptographic Weakness

CWE-502: Deserialization of Untrusted Data

Denial of Service

Deserialization of Untrusted Data

Heap-based Buffer Overflow

HTTP Request Smuggling

Improper Certificate Validation

Improper Control of Generation of Code ('Code Injection')

Improper Encoding or Escaping of Output

Improper Handling of Highly Compressed Data (Data Amplification)

Improper Input Validation (4.16)

Improper Link Resolution Before File Access ('Link Following')

Improper Neutralization of Special Elements

Improper Output Neutralization for Logs

Improper Restriction of XML External Entity Reference

Improper Session Handling

Improper Verification of Cryptographic Signature

Inconsistent Interpretation of HTTP Requests

Incorrect Authorization

Incorrect Implementation of Authentication Algorithm

Incorrectly Configured Access Control

Inefficient Algorithmic Complexity

Information Disclosure

Information Exposure

Initialization of a Resource with an Insecure Default

Insufficiently Protected Credentials

Insufficient Verification of Data Authenticity

Integer Overflow or Wraparound

Log Injection

Memory Allocation with Excessive Size Value

Path Traversal

Predictable Initialization Vector

Privilege Abuse

Privilege Escalation

Protection Mechanism Failure

Prototype Pollution

ReDoS Vulnerability

Regular Expression Denial of Service

Remote Code Execution

Resource Injection

Search Injection

Security Misconfiguration

Server-Side Request Forgery

Signature Forgery

SQL Injection

Stack-based Buffer Overflow

Unchecked Input for Loop Condition

Uncontrolled Recursion

Uncontrolled Resource Consumption

URL Redirect/Open Redirect

Use After Free

Use of Externally-Controlled Input to Select Classes or Code

Use of Unmaintained Third Party

Use of Weak Hash

Weak Authentication

Filtering by:

Severity

=

Text for Severity

Severity

ID

Technology

Libraries Affected

Category

Version(s) Affected

Published Date

Medium

Spring

Apache ActiveMQ Artemis

Content Spoofing

>=2.16.0 <2.24.0

Aug 17, 2026

Low

Spring

Apache ActiveMQ Artemis

Authorization Bypass

>=2.0.0 <=2.39.0

Aug 17, 2026

Critical

Spring

Apache ActiveMQ Artemis

Authorization Bypass

>=2.11.0 <=2.44.0

Aug 17, 2026

High

.NET

SkiaSharp

Integer Overflow or Wraparound

SkiaSharp < 4.148.0

Aug 14, 2026

High

Jackson

jackson-core

Denial of Service

>=2.9.0 <2.18.8, >=2.19.0 <2.21.4

Aug 14, 2026

High

Node.js

Node.js

Incorrect Authorization

22.x <= 22.23.1; 24.x <= 24.18.0; 26.x <= 26.5.0; 20.x (End-of-Life, all versions)

Aug 13, 2026

High

.NET

.NET

Remote Code Execution

Microsoft.WindowsDesktop.App >= 6.0.0 <= 6.0.43

Aug 13, 2026

Medium

.NET

.NET

Incorrectly Configured Access Control

Microsoft.NETCore.App >= 6.0.0 <= 6.0.43

Aug 13, 2026

Medium

.NET

.NET

Server-Side Request Forgery

Protection Mechanism Failure

Information Disclosure

Microsoft.WindowsDesktop.App >= 6.0.0 <= 6.0.43

Aug 13, 2026

High

.NET

.NET

Unchecked Input for Loop Condition

Denial of Service

Microsoft.NETCore.App >= 6.0.0 <= 6.0.43

Aug 13, 2026

Medium

.NET

.NET

Inconsistent Interpretation of HTTP Requests

Microsoft.NETCore.App >= 6.0.0 <= 6.0.43

Aug 13, 2026

High

.NET

.NET

Integer Overflow or Wraparound

Remote Code Execution

Microsoft.WindowsDesktop.App >= 6.0.0 <= 6.0.43

Aug 13, 2026

High

.NET

.NET

Heap-based Buffer Overflow

Microsoft.WindowsDesktop.App >= 6.0.0 <= 6.0.43

Aug 13, 2026

High

.NET

.NET

Integer Overflow or Wraparound

Heap-based Buffer Overflow

Microsoft.WindowsDesktop.App >= 6.0.0 <= 6.0.43

Aug 13, 2026

High

Node.js

Node.js

Use After Free

22.x <= 22.23.1; 24.x <= 24.18.0; 26.x <= 26.5.0; All End-of-Life release lines, including 16.x, 18.x, and 20.x

Aug 13, 2026

No results found

Please enter a valid Vulnerability ID number or Technology name.

Sign up for the latest vulnerability alerts

Subscribe via RSS

or

First Name *

Last Name *

Work Email *

By submitting the form I acknowledge receipt of our Privacy Policy.

Thanks for signing up for our Newsletter! We look forward to connecting with you.

Oops! Something went wrong while submitting the form.

Never-Ending Support

Drop-in replacements for deprecated open source software that keep you secure, compliant, and compatible.

View All Products

Get a Custom Quote

Never-Ending Support (NES) Products

JavaScript

AngularJS jQuery Angular Knockout.js Node.js Lodash Bootstrap NestJS Vue 2 Next.js ESLint Nuxt Express Protractor Fastify Vuetify Grunt

Java

Spring Struts Apache Grails Apache Solr & Lucene Apache Tapestry Apache Tomcat CometD Hibernate Jetty

Python

Databases

Other

.NET PHP Ruby on Rails

Resources

Vulnerability Directory EOL Dataset Blog OSS Sustainability Fund Shows Case Studies Webinars Newsletters Whitepapers Ebooks NES Documentation What is EOL Security?

Solutions

Financial Services Healthcare Technology Government IT Security Managers Software Development Managers Engineering Leaders Compliance-Focused Decision-Makers

Company

About Us Contact We are Hiring!HeroDevs Partner Program Branding Legal

HeroDevs gives engineering companies and security teams the only platform built to manage the risk from using unsupported, end-of-life open source.

+1 877-586-1965

hello@herodevs.com

8850 S 700 E #2437 Sandy, UT 84070

© 2026 herodevs.com | All Rights Reserved

Never-Ending Support

Drop-in replacements for deprecated open source software that keep you secure, compliant, and compatible.

View All Products

Get a Custom Quote

JavaScript

AngularJS jQuery Angular Knockout.js Node.js Lodash Bootstrap NestJS Vue 2 Next.js ESLint Nuxt Express Protractor React Fastify Vuetify Grunt

Java

Apache Grails Apache Solr & Lucene Apache Tapestry Apache Tomcat CometD Hazelcast Hibernate Jackson Jetty Quarkus Struts Spring

Python

Databases

Other

.NET PHP Drupal Ruby on Rails Ingress NGINX

Resources

Vulnerability Directory EOL Dataset Blog OSS Sustainability Fund Shows Case Studies Webinars White Papers Ebooks NES Documentation What is EOL Security?

HeroDevs gives engineering companies and security teams the only platform built to manage the risk from using unsupported, end-of-life open source.

+1 877-586-1965

hello@herodevs.com

8850 S 700 E #2437 Sandy, UT 84070

© 2026 herodevs.com | All Rights Reserved

Company

About Us Contact We are Hiring!HeroDevs Partner Program Media Kit Legal

Solutions

Financial Services Healthcare Technology Government IT Security Managers Engineering Leaders Software Development Managers Compliance-Focused Decision-Makers