March 2025

🚨 Critical Alert: Next.js Middleware Vulnerability

CVE-2025-29927 is a serious vulnerability that allows attackers to bypass authentication in Next.js middleware. Left unaddressed, it could lead to unauthorized access and potential system compromise.

HeroDevs now offers Next.js NES, providing long-term security patches and compliance support for affected versions—so you can stay protected without a full migration.

🎙️ Everyday Heroes Podcast: Season 1 Finale

Catch the last two episodes of our debut season, packed with insights and stories of heroes in tech.

🔍 The Hidden Risks of End-of-Life Software

The Black Duck report exposes the critical challenges of running outdated open-source software:

• 90% of codebases contain open-source components over four years old
• 50% of codebases run software at least 10 versions behind the latest release
• Critical frameworks like Vue 2, AngularJS, Express.js 3, and Node.js 16 remain widely used despite lacking official support

New Apache NES Products!

We’ve expanded our Never-Ending Support lineup to include more critical open-source technologies. Now available:

AngularJS: Still Standing Strong

With 419,000 weekly downloads in 2025 and 7 critical vulnerabilities addressed, your legacy Angular apps aren't going anywhere—and neither are we.

Find us on G2