Report a CVE to HeroDevs

Committed to Security and Confidentiality

At HeroDevs, safeguarding the security of open-source software and its ecosystem is our priority. As a Certified Numbering Authority (CNA), we ensure your vulnerability reports are handled with utmost confidentiality and professionalism.

Search tool icon

Report a Vulnerability

When you report a CVE, you can trust that:
  • Your submission is reviewed promptly and securely by our team of security experts.
  • Details of the vulnerability will not be disclosed until appropriate patches are developed and coordinated with the necessary stakeholders.
  • Your role as the reporter will be respected, with attribution provided as per your preference.
Every vulnerability we address strengthens the open-source ecosystem and ensures the continued security of end-of-life software. At HeroDevs, we actively track, assess, and address vulnerabilities to safeguard the security of open source software and protect the businesses that rely on it.

By clicking "submit" I acknowledge receipt of our Privacy Policy.

Thank you! Your submission has been received!
Please enter a company email.
Early Detection and CVE Remediation

187 Security Issues Fixed
(and always looking for more)

Below is a snapshot of the most recent 10 of 75 vulnerabilities in our database, demonstrating our commitment to transparency and proactive security.
Severity
ID
Technology
Libraries Affected
Category
Version(s) Affected
Published Date
High
H2 Database
Information Exposure
>= 1.4.198, < 2.2.220
Jan 5, 2026
Low
Google Guava
Incorrectly Configured Access Control
<32.0.0
Jan 5, 2026
Medium
Google Guava
Incorrectly Configured Access Control
<32.0.0
Jan 5, 2026
Medium
GraphQL Java
Improper Input Validation (4.16)
<19.11, >=20.0 <20.9, >=21.0 <21.5
Jan 5, 2026
High
Apache Log4j
Code Injection
>= 1.0,1, <= 1.2.17
Jan 5, 2026
Critical
Apache Log4j
Code Injection
>= 1.2, <= 1.2.17
Jan 5, 2026
High
Apache Log4j
SQL Injection
>= 1.2, <= 1.2.17
Jan 5, 2026
Low
Apache Log4j
Improper Certificate Validation
>= 1.0, <= 1.2.17
Jan 5, 2026
High
Apache Log4j
Code Injection
>= 1.2, <= 1.2.17
Jan 5, 2026
High
Apache Log4j
Code Injection
>= 1.2, <= 1.2.17
Jan 5, 2026
For more details on CVEs found in end-of-life software, visit our vulnerability directory.

By clicking "Accept", you agree to the storing of cookies on your device to enhance site navigation, analyze site usage, and assist in our marketing efforts. View our Privacy Policy for more information.

Manage Consent Preferences by Category
Essentials
Always active

Necessary for the site to function. Always On.

Used for targeted advertising.

Remembers your preferences and provides enhanced features.

Measures usage and improves your experience.

Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.

AltStyle によって変換されたページ (->オリジナル) /