Vulnerability Directory
If you’re currently using these frameworks in your application’s tech stack, your application could be vulnerable.
Secure drop-in replacements for open source software from HeroDevs helps you stay secure, compliant, and compatible while you migrate.
Switch to Never-Ending Support (NES) from HeroDevs to immediately mitigate these vulnerabilities.
Severity
ID
Technology
Libraries Affected
Category
Version(s) Affected
Published Date
High
Jackson
jackson-dataformat-protobuf
Denial of Service
>=2.0.0 <2.18.12, >=2.19.0 <2.21.8, >=2.22.0 <2.22.4, >=3.0.0 <3.1.8, >=3.2.0 <3.2.4
Oct 23, 2026
Critical
Jackson
jackson-databind
Remote Code Execution
>=2.10.0 <2.18.12, >=2.19.0 <2.21.8, >=2.22.0 <2.22.4, >=3.0.0 <3.1.8, >=3.2.0 <3.2.4
Oct 23, 2026
High
Apache Tomcat
Apache Tomcat
Authorization Bypass
>=11.0.0-M1 <=11.0.26, >=10.1.0-M1 <=10.1.60, >=9.0.0.M1 <=9.0.122, >=8.5.0 <=8.5.100, >=7.0.0 <=7.0.109
Oct 23, 2026
Low
Apache Tomcat
Apache Tomcat
Denial of Service
>=9.0.90 <=9.0.122, >=10.1.25 <=10.1.60, >=11.0.0-M21 <=11.0.26
Oct 23, 2026
Low
Apache Tomcat
Apache Tomcat
Authorization Bypass
>=7.0.0 <=7.0.109, >=8.5.0 <=8.5.100, >=9.0.0.M1 <=9.0.122, >=10.1.0-M1 <=10.1.60, >=11.0.0-M1 <=11.0.26
Oct 23, 2026
Medium
Jackson
jackson-databind
Authorization Bypass
>=2.0.0-RC1 <2.18.9, >=2.19.0 <2.21.5, >=2.22.0 <2.22.1, >=3.0.0 <=3.1.4, >=3.2.0 <3.2.1
Oct 23, 2026
High
Jackson
jackson-dataformat-smile
Denial of Service
< 2.18.12, >= 2.19.0 < 2.21.8, >= 2.22.0 < 2.22.4
Oct 23, 2026
High
Jackson
jackson-dataformat-avro
Denial of Service
<2.18.12, >=2.19.0 <2.21.8, >=2.22.0 <2.22.4
Oct 23, 2026
Medium
Jackson
jackson-dataformat-cbor
Denial of Service
>=2.15.0 <2.18.12, >=2.19.0 <2.21.8, >=2.22.0 <2.22.4
Oct 23, 2026
High
Quarkus
Quarkus
Denial of Service
>=3.17.0.CR1 <3.27.5.3, >=3.28.0.CR1 <3.33.3.3, >=3.34.0.CR1 <3.39.5, >=3.40.0.CR1 <3.40.0
Oct 23, 2026
Medium
Quarkus
Quarkus
Denial of Service
>= 1.8.0.CR1 < 3.27.6.1, >= 3.28.0.CR1 < 3.33.4.1, >= 3.34.0.CR1 < 3.40.1.1
Oct 23, 2026
High
Quarkus
Quarkus
Denial of Service
>=3.9.0 <3.27.5.3, >=3.28.0 <3.33.3.3, >=3.34.0 <3.39.5
Oct 22, 2026
Low
Reactor Netty
io.projectreactor.netty:reactor-netty-core
Incorrectly Configured Access Control
<=1.0.52, >=1.1.0 <=1.2.18, >=1.3.0 <=1.3.6
Oct 21, 2026
Critical
PHP
PHP (php-src)
Remote Code Execution
<8.2.35, >=8.3.0 <8.3.36, >=8.4.0 <8.4.27, >=8.5.0 <8.5.12
Oct 21, 2026
No results found
Please enter a valid Vulnerability ID number or Technology name.