HeroDevs Security Advisories: Enhancing Your Software Security Beyond CVEs

At HeroDevs, we’re dedicated to providing continuous support for end-of-life legacy software. A big part of that commitment means keeping your software secure, even when official updates might no longer be available. That’s why we’re excited to introduce HeroDevs Security Advisories — a new initiative focused on tackling security vulnerabilities that go beyond the limitations of standard CVEs.

What Are HeroDevs Security Advisories?

In the world of software, CVEs (Common Vulnerabilities and Exposures) are a widely recognized way to catalog and address security vulnerabilities. They pinpoint issues directly tied to the main software products. But what happens when the vulnerability doesn’t fit neatly into the CVE definition such as vulnerabilities that are included with project dependencies? 

That’s where HeroDevs Security Advisories come in.

Our advisories focus on improving the security and stability of our products including resolving dependency issues, even when the root cause or CVE isn’t directly in the main software. These are vulnerabilities that might not get their own CVE because, according to the guidelines, they’re attributed to the dependency itself. However, they still have a significant impact on the security of your applications, which means they can’t be ignored.

What to Expect from Our Security Advisories

When you see a HeroDevs Security Advisory, here's what it means:

• Transparency: We will clearly reference the CVE numbers of the dependencies involved, giving you a full view of what vulnerabilities we are addressing.
• Product Impact: We’ll explain how these vulnerabilities manifest within your main product and how they can pose risks to your applications.
• Action Taken: You'll see a summary of the fixes and improvements we've implemented to keep your software secure.

Going Beyond Standard Support

At HeroDevs, our mission is to deliver never-ending support for your legacy software, extending its lifespan while keeping it secure in an ever-evolving threat landscape. By addressing both core and dependency-based vulnerabilities, we aim to provide you with a more comprehensive level of protection that goes beyond the standard security practices.