Maven vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2023-33940Mediumcom.liferay.portal:release.portal.bom: Cross-site scripting in Liferay PortalCVE-2023-33939Mediumcom.liferay.portal:release.portal.bom: Cross-site scripting in Liferay PortalCVE-2023-33942Mediumcom.liferay.portal:release.portal.bom: Cross-site scripting in Liferay PortalCVE-2023-33938Mediumcom.liferay.portal:release.portal.bom: Cross-site scripting in Liferay PortalCVE-2023-33943Mediumcom.liferay.portal:release.portal.bom: Cross-site scripting in Liferay PortalCVE-2023-33941Mediumcom.liferay.portal:release.portal.bom: Cross-site scripting in Liferay PortalCVE-2023-33937Mediumcom.liferay.portal:release.portal.bom: Cross-site scripting in Liferay PortalCVE-2023-32697Highorg.xerial:sqlite-jdbc: Sqlite-jdbc vulnerable to remote code execution when JDBC url is attacker controlledCVE-2023-32315Highorg.igniterealtime.openfire:xmppserver: Administration Console authentication bypass in openfire xmppserverCVE-2023-31826Highorg.skyscreamer:nevado-jms: Command injection in nevado-jmsCVE-2023-31101Mediumorg.apache.inlong:manager-dao: User data exposure in Apache InLongCVE-2023-33264Mediumcom.hazelcast:hazelcast: Hazelcast vulnerable to unmasked password exposureCVE-2023-31544Mediumorg.opencms:opencms-core: alkacon-OpenCMS vulnerable to stored Cross-site ScriptingCVE-2023-2195Mediumorg.jenkins-ci.plugins:codedx: Jenkins Code Dx Plugin cross-site request forgery vulnerabilityCVE-2023-2631Mediumorg.jenkins-ci.plugins:codedx: Jenkins Code Dx Plugin missing permission checksCVE-2023-33003Mediumorg.jenkins-ci.plugins:tag-profiler: Jenkins Tag Profiler Plugin vulnerable to Cross-Site Request ForgeryCVE-2023-33006Mediumorg.jenkins-ci.plugins:wso2id-oauth: Jenkins WSO2 Oauth Plugin cross-site request forgery vulnerabilityCVE-2023-32997Highorg.jenkins-ci.plugins:cas-plugin: Jenkins CAS Plugin Session Fixation vulnerabilityCVE-2023-2632Mediumorg.jenkins-ci.plugins:codedx: Jenkins Code Dx Plugin stores API keys in plain textCVE-2023-32995Mediumio.jenkins.plugins:miniorange-saml-sp: Jenkins SAML Single Sign On(SSO) Plugin Cross-Site Request Forgery vulnerabilityCVE-2023-33007Highorg.jenkins-ci.plugins:loadcomplete: Jenkins LoadComplete support Plugin Cross-site Scripting vulnerabilityCVE-2023-32990Mediumorg.jenkins-ci.plugins:azure-vm-agents: Jenkins Azure VM Agents Plugin missing permission checksCVE-2023-2633Mediumorg.jenkins-ci.plugins:codedx: Jenkins Code Dx Plugin displays API keys in plain textCVE-2023-32986Highio.jenkins.plugins:file-parameters: Jenkins File Parameter Plugin arbitrary file write vulnerabilityCVE-2023-2196Mediumorg.jenkins-ci.plugins:codedx: Jenkins Code Dx Plugin missing permission checks

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo