Maven vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2023-25158Criticalorg.geotools:gt-jdbc: GeoTools OGC Filter SQL Injection Vulnerabilities CVE-2023-25157Criticalorg.geoserver.community:gs-jdbcconfig: GeoServer OGC Filter SQL Injection Vulnerabilities CVE-2023-25613Criticalorg.apache.kerby:ldap-backend: Apache Kerby LdapIdentityBackend LDAP Injection vulnerability CVE-2023-24998Highcommons-fileupload:commons-fileupload: Apache Commons FileUpload denial of service vulnerability CVE-2016-15026Highcom.googlecode.plist:dd-plist: dd-plist XML External Entitly vulnerability CVE-2014-125087Criticalcom.jamesmurty.utils:java-xmlbuilder: java-xmlbuilder vulnerable to XML External Entity Reference CVE-2023-23926Mediumorg.neo4j.procedure:apoc-core: XML External Entity (XXE) vulnerability in apoc.import.graphml GHSA-MHGM-52VG-PVVCMediumcom.schibsted.security:strongbox-sdk: Privilege escalation in Strongbox CVE-2023-23850Mediumorg.jenkins-ci.plugins:synopsys-coverity: Synopsys Jenkins Coverity Plugin has Incorrect Default Permissions CVE-2023-23848Mediumorg.jenkins-ci.plugins:synopsys-coverity: CSRF vulnerability in Jenkins Coverity Plugin allow capturing credentials CVE-2023-23847Loworg.jenkins-ci.plugins:synopsys-coverity: CSRF vulnerability in Synopsys Jenkins Coverity Plugin CVE-2023-25762Mediumorg.jenkins-ci.plugins:pipeline-build-step: Cross-site Scripting in Jenkins Pipeline: Build Step Plugin CVE-2023-25761Mediumorg.jenkins-ci.plugins:junit: Cross-site Scripting in Jenkins JUnit Plugin CVE-2023-25763Mediumorg.jenkins-ci.plugins:email-ext: Cross-site Scripting in Jenkins Email Extension Plugin CVE-2023-25764Mediumorg.jenkins-ci.plugins:email-ext: Cross-site Scripting in Jenkins Email Extension Plugin CVE-2023-25766Mediumorg.jenkins-ci.plugins:azure-credentials: Missing Authorization in Jenkins Azure Credentials Plugin CVE-2023-25767Highorg.jenkins-ci.plugins:azure-credentials: Cross-Site Request Forgery in Jenkins Azure Credentials Plugin CVE-2023-25768Mediumorg.jenkins-ci.plugins:azure-credentials: Missing Authorization in Jenkins Azure Credentials Plugin CVE-2023-25765Criticalorg.jenkins-ci.plugins:email-ext: Sandbox escape in Jenkins Email Extension Plugin CVE-2022-42735Highorg.apache.shenyu:shenyu-admin: Privilege escalation in Apache ShenYu CVE-2023-25141Highorg.apache.sling:org.apache.sling.jcr.base: Command injection in Apache Sling CVE-2023-24187Highcom.bstek.ureport:ureport2-core: XML External Entity Reference in ureport CVE-2023-24188Criticalcom.bstek.ureport:ureport2-core: Arbitrary file deletion in ureport CVE-2024-23681Highde.tum.in.ase:artemis-java-test-sandbox: Arbitrary code execution in de.tum.in.ase:artemis-java-test-sandbox CVE-2022-4903Criticalcom.codenameone:codenameone-core: CodenameOne Pending Intent vulnerability

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo