Maven vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2023-26049Loworg.eclipse.jetty:jetty-server: Eclipse Jetty's cookie parsing of quoted values can exfiltrate values from other cookiesCVE-2023-24831Criticalorg.apache.iotdb:iotdb-grafana-connector: Apache IoTDB Grafana Connector vulnerable to Improper AuthenticationCVE-2023-22946Criticalorg.apache.spark:spark-core_2.12: Apache Spark vulnerable to Improper Privilege ManagementCVE-2023-30535Highnet.snowflake:snowflake-jdbc: Snowflake JDBC vulnerable to command injection via SSO URL authenticationCVE-2023-20866Mediumorg.springframework.session:spring-session-core: Spring Session session ID can be logged to the standard output streamCVE-2023-20863Highorg.springframework:spring-expression: Spring Framework vulnerable to denial of serviceCVE-2022-45064Highorg.apache.sling:org.apache.sling.engine: Apache Sling Engine vulnerable to cross-site scripting (XSS) that can lead to privilege escalationCVE-2023-29207Highorg.xwiki.platform:xwiki-platform-flamingo-skin-resources: Improper Neutralization of Script-Related HTML Tags (XSS) in the LiveTable MacroCVE-2023-29203Loworg.xwiki.platform:xwiki-platform-web-templates: Unauthenticated user can have information about hidden users on subwikis through uorgsuggest.vm CVE-2023-29206Criticalorg.xwiki.platform:xwiki-platform-skin-skinx: org.xwiki.platform:xwiki-platform-skin-skinx vulnerable to basic Cross-site Scripting by exploiting JSX or SSX pluginsCVE-2023-29205Criticalorg.xwiki.platform:xwiki-platform-rendering-xwiki: org.xwiki.platform:xwiki-platform-rendering-xwiki vulnerable to stored cross-site scripting via HTML and raw macroCVE-2023-29204Mediumorg.xwiki.platform:xwiki-platform-oldcore: org.xwiki.platform:xwiki-platform-oldcore Open Redirect vulnerabilityCVE-2023-29202Criticalorg.xwiki.platform:xwiki-core-rendering-macro-rss: org.xwiki.platform:xwiki-platform-rendering-macro-rss Cross-site Scripting vulnerabilityCVE-2023-29201Criticalorg.xwiki.commons:xwiki-commons-xml: org.xwiki.commons:xwiki-commons-xml Cross-site Scripting vulnerabilityCVE-2023-29511Criticalorg.xwiki.platform:xwiki-platform-administration-ui: xwiki-platform-administration-ui vulnerable to privilege escalationCVE-2023-30537Criticalorg.xwiki.platform:xwiki-platform-flamingo-theme-ui: org.xwiki.platform:xwiki-platform-flamingo-theme-ui vulnerable to privilege escalationCVE-2023-29509Criticalorg.xwiki.platform:xwiki-platform-flamingo-theme-ui: org.xwiki.platform:xwiki-platform-flamingo-theme-ui Eval Injection vulnerabilityCVE-2023-29508Highorg.xwiki.platform:xwiki-platform-livedata-macro: org.xwiki.platform:xwiki-platform-livedata-macro vulnerable to Basic Cross-site ScriptingCVE-2023-29507Criticalorg.xwiki.platform:xwiki-platform-oldcore: org.xwiki.platform:xwiki-platform-oldcore makes Incorrect Use of Privileged APIs with DocumentAuthorsCVE-2023-29506Mediumorg.xwiki.platform:xwiki-platform-security-authentication-default: org.xwiki.platform:xwiki-platform-security-authentication-default XSS with authenticate endpointsCVE-2023-29214Criticalorg.xwiki.platform:xwiki-platform-panels-ui: org.xwiki.platform:xwiki-platform-panels-ui Eval Injection vulnerabilityCVE-2023-29213Criticalorg.xwiki.platform:xwiki-platform-logging-ui: org.xwiki.platform:xwiki-platform-logging-ui Eval Injection vulnerabilityCVE-2023-29212Criticalorg.xwiki.platform:xwiki-platform-panels-ui: xwiki.platform:xwiki-platform-panels-ui Eval Injection vulnerabilityCVE-2023-29211Criticalorg.xwiki.platform:xwiki-platform-wiki-ui-mainwiki: org.xwiki.platform:xwiki-platform-wiki-ui-mainwiki Eval Injection vulnerabilityCVE-2023-29210Criticalorg.xwiki.platform:xwiki-platform-notifications-ui: org.xwiki.platform:xwiki-platform-notifications-ui Eval Injection vulnerability

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo