Log inSign up
Image
user avatar
HeroDevs
@herodevs
The EOL experts. We let your developers focus on mission-critical work, while we keep your open-source stack running in the background. #LifeAfterEOL
Worldwide
herodevs.com
Joined January 2018
746
Following
2,663
Followers
RepliesMedia
  • user avatar
    HeroDevs
    @herodevs
    Aug 10
    Some racks leave two balls right where they started. 🎱11 CVEs patched in Node 22, 24, and 26 on July 29. Three High — two in HTTP/2, one a --permission sandbox escape.Node 18 and 20 get nothing. In July they pulled 136M downloads.Upgrade, or patch in place. #NodeJS #CVE
    Image
    Made with AI
  • user avatar
    HeroDevs
    @herodevs
    Aug 7
    Most timelines end. This one trails off. 📉 A normal CVE gets disclosed, assigned, patched, closed. A post-EOL CVE gets disclosed, assigned, and then nothing. No upstream fix for the version you run. The finding stays open indefinitely. Scanners miss it because there's no
    Image
  • user avatar
    HeroDevs
    @herodevs
    Aug 6
    Maintainers stop patching. Auditors don't stop asking. 🔒 NES is commercial security support for open source after upstream ends. Keep the version you run, get drop-in patched builds for new CVEs. Buys time to migrate without shipping unpatched code. #OpenSource #EndOfLife
    Image
    00:00
  • user avatar
    HeroDevs
    @herodevs
    Aug 6
    Leave a gap in the outline and the fill goes everywhere. CVE-2026-64645: SSRF in Next.js rewrites() and redirects(). CVSS 8.3, no auth required.Affected: 12.0.0 → 16.x Patched: 15.5.21 · 16.2.11 No OSS patch for 12/13/14.NES ships the fix without the migration. 🎨#NextJS
    Image