Maven vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2023-24437Mediumorg.jenkins-ci.plugins:jira-steps: Cross-site request forgery vulnerability in Jenkins JIRA Pipeline Steps PluginCVE-2023-24429Criticalorg.jenkins-ci.plugins:semantic-versioning-plugin: Agent-to-controller security bypass in Jenkins Semantic Versioning Plugin CVE-2023-24424Highorg.jenkins-ci.plugins:oic-auth: Session fixation vulnerability in Jenkins OpenId Connect Authentication Plugin CVE-2023-24442Mediumorg.jenkins-ci.plugins:github-pr-coverage-status: Plaintext storage of Access Token in Jenkins GitHub Pull Request Coverage Status PluginCVE-2023-24435Mediumorg.jenkins-ci.plugins:ghprb: Missing permission checks in Jenkins GitHub Pull Request Builder PluginCVE-2023-24428Mediumorg.jenkins-ci.plugins:bitbucket-oauth: Cross-site request forgery vulnerability in Jenkins Bitbucket OAuth Plugin CVE-2023-24430Criticalorg.jenkins-ci.plugins:semantic-versioning-plugin: XML external entity reference vulnerability on agents in Jenkins Semantic Versioning Plugin CVE-2023-24432Highio.jenkins.plugins:macstadium-orka: CSRF vulnerability in Jenkins Orka Plugin allow capturing credentialsCVE-2023-24436Mediumorg.jenkins-ci.plugins:ghprb: Jenkins GitHub Pull Request Builder Plugin missing permission check allows enumerating credentials IDsCVE-2023-24445Mediumorg.jenkins-ci.plugins:openid: Open redirect vulnerability in Jenkins OpenID Plugin CVE-2023-24443Criticalorg.jenkins-ci.plugins:TestComplete: XML Entity Expansion in Jenkins TestComplete support PluginCVE-2023-24444Highorg.jenkins-ci.plugins:openid: Session fixation vulnerability in Jenkins OpenID Plugin CVE-2023-24440Mediumorg.jenkins-ci.plugins:jira-steps: Cleartext Transmission of Sensitive Information in Jenkins JIRA Pipeline Steps PluginCVE-2023-24447Highorg.jenkins-ci.plugins:rabbitmq-consumer: Cross-site request forgery vulnerability in Jenkins RabbitMQ Consumer PluginCVE-2023-24451Mediumorg.jenkins-ci.plugins:cisco-spark-notifier-plugin: Cisco Spark Notifier Jenkins Plugin contains Missing AuthorizationCVE-2023-24446Highorg.jenkins-ci.plugins:openid: Cross-site request forgery vulnerability in Jenkins OpenID PluginCVE-2023-24448Mediumorg.jenkins-ci.plugins:rabbitmq-consumer: Missing permission check in Jenkins RabbitMQ Consumer PluginCVE-2023-24450Mediumorg.jenkins-ci.plugins:view-cloner: Passwords stored in plain text by Jenkins view-cloner Plugin CVE-2023-24425Mediumcom.cloudbees.jenkins.plugins:kubernetes-credentials-provider: Exposure of system-scoped Kubernetes credentials in Jenkins Kubernetes Credentials Provider PluginCVE-2023-24423Mediumcom.sonyericsson.hudson.plugins.gerrit:gerrit-trigger: Cross-site request forgery in Jenkins Gerrit Trigger PluginCVE-2023-24434Highorg.jenkins-ci.plugins:ghprb: CSRF vulnerability in Jenkins GitHub Pull Request Builder PluginCVE-2023-24433Mediumio.jenkins.plugins:macstadium-orka: Missing permission checks in Jenkins Orka Plugin allow capturing credentialsCVE-2023-24449Mediumorg.jvnet.hudson.plugins:pwauth: Path traversal vulnerability in Jenkins PWauth Security Realm PluginCVE-2023-24453Mediumorg.jenkins-ci.plugins:testquality-updater: Missing permission check in Jenkins TestQuality Updater Plugin CVE-2023-24454Mediumorg.jenkins-ci.plugins:testquality-updater: Plaintext Storage of a Password in Jenkins TestQuality Updater Plugin

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo