Vulnerability Directory

If you’re currently using these frameworks in your application’s tech stack, your application could be vulnerable.

Secure drop-in replacements for open source software from HeroDevs helps you stay secure, compliant, and compatible while you migrate.

Switch to Never-Ending Support (NES) from HeroDevs to immediately mitigate these vulnerabilities.

Codey gradient
Filtering by:
Severity
=
Text for Severity
Close icon
Clear Filters
Severity
ID
Technology
Libraries Affected
Category
Version(s) Affected
Published Date
Low
Django
Django
Security Misconfiguration
<=3.2.25, <=4.2.28, <=5.2.12, <=6.0.2
Jun 2, 2026
Medium
Django
Django
Denial of Service
<=3.2.25, <=4.2.28, <=5.2.11, <=6.0.2
Jun 2, 2026
Low
Django
Django
Authorization Bypass
<=3.2.25, <=4.2.29, <=5.2.13, <=6.0.4
Jun 2, 2026
Django
Django
Authorization Bypass
<=3.2.25, <=4.2.29, <=5.2.13, <=6.0.4
Jun 2, 2026
Low
Django
Django
Content Spoofing
<=3.2.25, <=4.2.29, <=5.2.13, <=6.0.4
Jun 2, 2026
High
Django
Django
SQL Injection
<=3.2.25, <=4.2.27, <=5.2.10, <=6.0.1
Jun 2, 2026
High
Django
Django
SQL Injection
<=3.2.25, <=4.2.27, <=5.2.10, <=6.0.1
Jun 2, 2026
High
Angular
Angular
Server-Side Request Forgery
<=18.2.14, >=19.0.0-next.0 <19.2.22, >=20.0.0-next.0 <20.3.21, >=21.0.0-next.0 <21.2.13, >=22.0.0-next.0 <22.0.0-next.12
May 27, 2026
Medium
Next.js
Next.js
Denial of Service
>=10.0.0 <15.5.16, >=16.0.0 <16.2.5
May 20, 2026
Medium
Apache Tomcat
Apache Tomcat
Authorization Bypass
>=8.5.0 <=8.5.100, >=9.0.0-M1 <=9.0.117, >=10.1.0-M1 <=10.1.54, >=11.0.0-M1 <=11.0.21
May 19, 2026
High
Next.js
Next.js
Broken Access
>=12.2.0 <15.5.16, >=16.0.0 <16.2.5
May 18, 2026
Low
Next.js
Next.js
Cache Poisoning
>=12.2.0 <15.5.16, >=16.0.0 <16.2.5
May 18, 2026
Low
Apache Tomcat
Apache Tomcat
Denial of Service
>=8.5.0 <=8.5.100, >=9.0.0.M1 <=9.0.117, >=10.1.0-M1 <=10.1.54, >=11.0.0-M1 <=11.0.21
May 18, 2026
Low
Apache Tomcat
Apache Tomcat
Content Spoofing
>=8.5.0 <=8.5.100, >=9.0.2 <=9.0.117, >=10.1.0-M1 <=10.1.54, >=11.0.0-M1 <=11.0.21
May 18, 2026
Low
Apache Tomcat
Apache Tomcat
Content Spoofing
>=8.5.0 <=8.5.100, >=9.0.0.M1 <=9.0.117, >=10.1.0-M1 <=10.1.54, >=11.0.0-M1 <=11.0.21
May 18, 2026
Exclamation icon
No results found

Please enter a valid Vulnerability ID number or Technology name.

Sign up for the latest vulnerability alerts
Rss feed icon
Subscribe via RSS
or
Thanks for signing up for our Newsletter! We look forward to connecting with you.
Oops! Something went wrong while submitting the form.