Maven vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2023-33005Highorg.jenkins-ci.plugins:wso2id-oauth: Jenkins WSO2 Oauth Plugin Session Fixation vulnerabilityCVE-2023-32985Mediumorg.jenkins-ci.plugins:sidebar-link: Jenkins Sidebar Link Plugin vulnerable to Path TraversalCVE-2023-32999Mediumcom.rapid7:jenkinsci-appspider-plugin: Jenkins AppSpider Plugin missing permission checkCVE-2023-33004Mediumorg.jenkins-ci.plugins:tag-profiler: Jenkins Tag Profiler Plugin missing permission checkCVE-2023-32996Mediumio.jenkins.plugins:miniorange-saml-sp: Jenkins SAML Single Sign On(SSO) Plugin missing permission checksCVE-2023-32983Mediumorg.jenkins-ci.plugins:ansible: Jenkins Ansible Plugin job configuration form does not mask variablesCVE-2023-33002Highorg.jenkins-ci.plugins:TestComplete: TestComplete support Plugin vulnerable to stored Cross-site ScriptingCVE-2023-32978Mediumorg.jenkins-ci.plugins:ldap: Jenkins LDAP Plugin vulnerable to Cross-Site Request ForgeryCVE-2023-32994Mediumio.jenkins.plugins:miniorange-saml-sp: Jenkins SAML Single Sign On(SSO) Plugin unconditionally disables SSL/TLS certificate validationCVE-2023-32998Mediumcom.rapid7:jenkinsci-appspider-plugin: Jenkins AppSpider Plugin Cross-Site Request Forgery vulnerabilityCVE-2023-32989Mediumorg.jenkins-ci.plugins:azure-vm-agents: Jenkins Azure VM Agents Plugin Cross-site Request Forgery vulnerabilityCVE-2023-32987Mediumorg.jenkins-ci.plugins:reverse-proxy-auth-plugin: Jenkins Reverse Proxy Auth Plugin cross-site request forgery vulnerabilityCVE-2023-32992Highio.jenkins.plugins:miniorange-saml-sp: Jenkins SAML Single Sign On(SSO) Plugin missing permission checksCVE-2023-32988Mediumorg.jenkins-ci.plugins:azure-vm-agents: Jenkins Azure VM Agents Plugin missing permission checksCVE-2023-32980Mediumorg.jenkins-ci.plugins:email-ext: Jenkins Email Extension Plugin Cross-Site Request Forgery vulnerabilityCVE-2023-32984Mediumorg.jenkins-ci.plugins:testng-plugin: Jenkins TestNG Results Plugin Stored Cross-site Scripting vulnerabilityCVE-2023-32982Mediumorg.jenkins-ci.plugins:ansible: Jenkins Ansible Plugin stores and displays secrets in plain textCVE-2023-32981Mediumorg.jenkins-ci.plugins:pipeline-utility-steps: Jenkins Pipeline Utility Steps Plugin arbitrary file write vulnerabilityCVE-2023-32977Highorg.jenkins-ci.plugins.workflow:workflow-job: Jenkins Pipeline: Job Plugin vulnerable to stored Cross-site ScriptingCVE-2023-32979Mediumorg.jenkins-ci.plugins:email-ext: Jenkins Email Extension Plugin missing permission checkCVE-2023-33000Lowio.jenkins.plugins:cavisson-ns-nd-integration: Jenkins NS-ND Integration Performance Publisher Plugin displays credentials without maskingCVE-2023-32993Mediumio.jenkins.plugins:miniorange-saml-sp: Jenkins SAML Single Sign On(SSO) Plugin missing hostname validationCVE-2023-33001Mediumcom.datapipe.jenkins.plugins:hashicorp-vault-plugin: Jenkins HashiCorp Vault Plugin has improper masking of credentialsCVE-2023-32991Highio.jenkins.plugins:miniorange-saml-sp: Jenkins SAML Single Sign On(SSO) Plugin Cross-Site Request Forgery vulnerabilityCVE-2023-31890Criticalcom.glazedlists:glazedlists: glazedlists XML Deserialization vulnerability

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo