SWS Vulnerability Watch
Overall statusAction needed

3 actively exploited vulnerabilities affect software we use and need patching.

Patch the items below before CISA's deadlines. Updated November 4, 2026, last scan 01:42 UTC.

3
Actively exploited, open
First week of tracking
16
Urgent items, open
First week of tracking
–
Average days to fix
Shown once items are fixed
0
Closed this week
812 new this week

12-week trend

Open items at the end of each week, since tracking began 2026-11-05. The line fills in as weeks pass.

Actively exploitedUrgent
0 5 10 15 20 Nov 5

What needs doing first

Ranked by active exploitation, then number of urgent issues fixed.

  1. Update .NET 6 runtime from 6.* to 6.0.26 or later
    Fixes 4 urgent issues, 2 actively exploited. App / API.
  2. Update Node.js from 22.16.0 to 22.23.4 or later
    Fixes 4 urgent issues, 1 actively exploited. App / API.
  3. Update Next.js from 16.1.1 to 16.4.1 or later
    Fixes 5 urgent issues. App / API.
  4. Update ASP.NET Core 8 from 8.* to 8.0.32 or later
    Fixes 2 urgent issues. App / API.
  5. Update NextAuth.js from 4.24.13 to 4.24.15 or later
    Fixes 1 urgent issue. App / API.

Past end of support

No security fixes are published for these anymore.

  • .NET 6 runtime 6.*
    Out of Microsoft support since November 2024 – no security fixes
  • OpenJDK 24.*
    JDK 24 was a short-term release and no longer receives updates

15 items are not monitored yet because version details are missing.

To share this page, use your browser's Print, then Save as PDF.