Vulnerability Directory
If you’re currently using these frameworks in your application’s tech stack, your application could be vulnerable.
Secure drop-in replacements for open source software from HeroDevs helps you stay secure, compliant, and compatible while you migrate.
Switch to Never-Ending Support (NES) from HeroDevs to immediately mitigate these vulnerabilities.
Severity
ID
Technology
Libraries Affected
Category
Version(s) Affected
Published Date
High
Angular
Angular
Cross-Site Scripting
<=18.2.14, >=19.0.0-next.0 <19.2.18, >=20.0.0-next.0 <20.3.16, >=21.0.0-next.0 <21.0.7, >=21.1.0-next.0 <21.1.0-rc.0
Jan 9, 2026
Medium
Drupal 7
IFrame Remove Filter Module
Cross-Site Scripting
>=7.0.x <=7.1.5
Jan 8, 2026
Medium
GraphQL Java
GraphQL Java
Improper Input Validation (4.16)
<19.11, >=20.0 <20.9, >=21.0 <21.5
Jan 5, 2026
No results found
Please enter a valid Vulnerability ID number or Technology name.