Maven vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2022-45868Highcom.h2database:h2: Password exposure in H2 Database CVE-2022-45462Criticalorg.apache.dolphinscheduler:dolphinscheduler-alert-plugins: Command injection in Apache DolphinScheduler Alert PluginsCVE-2022-4116Criticalio.quarkus:quarkus-vertx-http-deployment: Code injection in quarkus dev ui config editorCVE-2022-41937Criticalorg.xwiki.platform:xwiki-platform-filter-ui: Missing Authorization in Filter Stream Converter Application of XWiki-platformCVE-2022-41936Mediumorg.xwiki.platform:xwiki-platform-rest-server: Exposure of Private Personal Information to an Unauthorized Actor in org.xwiki.platform:xwiki-platform-rest-serverCVE-2022-41935Mediumorg.xwiki.platform:xwiki-platform-livetable-ui: Exposure of Sensitive Information to an Unauthorized Actor in org.xwiki.platform:xwiki-platform-livetable-uiCVE-2022-41934Criticalorg.xwiki.platform:xwiki-platform-menu-ui: Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') in org.xwiki.platform:xwiki-platform-menu-uiCVE-2022-41933Mediumorg.xwiki.platform:xwiki-platform-security-authentication-default: Plaintext storage of password after a reset in org.xwiki.platform:xwiki-platform-security-authentication-defaultCVE-2022-41932Highorg.xwiki.platform:xwiki-platform-oldcore: Creation of new database tables through login form on PostgreSQLCVE-2022-41931Criticalorg.xwiki.platform:xwiki-platform-icon-ui: Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') in xwiki-platform-icon-uiCVE-2022-41930Criticalorg.xwiki.platform:xwiki-platform-user-profile-ui: Missing Authorization to enable or disable users in org.xwiki.platform:xwiki-platform-user-profile-uiCVE-2022-41929Mediumorg.xwiki.platform:xwiki-platform-oldcore: Missing Authorization in User#setDisabledStatus in org.xwiki.platform:xwiki-platform-oldcoreCVE-2022-41928Criticalorg.xwiki.platform:xwiki-platform-attachment-ui: Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') in AttachmentSelector.xmlCVE-2022-41927Highorg.xwiki.platform:xwiki-platform-tag-ui: Cross-Site Request Forgery (CSRF) allowing to delete or rename tagsCVE-2022-45470Highorg.apache.hama:hama-core: Cross-site Scripting in Apache HamaCVE-2022-45146Mediumorg.bouncycastle:bc-fips: Garbage collection issue in BC-FJA in Java 13 and laterCVE-2022-4065Highorg.testng:testng: TestNG is vulnerable to Path TraversalCVE-2022-43183Highcom.xuxueli:xxl-job-core: XXL-JOB vulnerable to Server-Side Request Forgery (SSRF)CVE-2022-45391Mediumio.jenkins.plugins:cavisson-ns-nd-integration: Jenkins NS-ND Integration Performance Publisher Plugin disables SSL/TLS certificate validation globally and unconditionallyCVE-2022-45384Mediumorg.jenkins-ci.main:reverse-proxy-auth-plugin: Jenkins Reverse Proxy Auth Plugin vulnerable due to plaintext storage of passwordsCVE-2022-45396Mediumcom.thalesgroup.hudson.plugins:sourcemonitor: XXE vulnerability on agents in Jenkins SourceMonitor PluginCVE-2022-45397Mediumorg.jenkins-ci:update-center2: XXE vulnerability on agents in Jenkins OSF Builder Suite : : XML Linter PluginCVE-2022-45389Mediumcom.cloudbees.jenkins.plugins:xpdev: Missing Authorization in Jenkins XP-Dev PluginCVE-2022-45390Mediumio.loader:loaderio-jenkins-plugin: Missing permission check in Jenkins loader.io Plugin allows enumerating credentials IDsCVE-2022-45399Mediumorg.zeroturnaround:cluster-stats: Jenkins Cluster Statistics Plugin Missing Authorization vulnerability

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo