Maven vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2022-43411Loworg.jenkins-ci.plugins:gitlab-plugin: Non-constant time webhook token comparison in Jenkins GitLab PluginCVE-2022-43409Highorg.jenkins-ci.plugins.workflow:workflow-support: Stored XSS vulnerability in Jenkins Pipeline: Supporting APIs PluginCVE-2022-43423Mediumcom.compuware.jenkins:compuware-scm-downloader: Agent-to-controller security bypass vulnerability in Jenkins BMC Compuware Source Code Download for Endevor, PDS, and ISPW PluginCVE-2022-43431Mediumcom.compuware.jenkins:compuware-strobe-measurement: Jenkins Compuware Strobe Measurement Plugin Missing Authorization vulnerabilityCVE-2022-43428Highcom.compuware.jenkins:compuware-topaz-for-total-test: Agent-to-controller security bypass vulnerabilities in Jenkins Compuware Topaz for Total Test PluginCVE-2022-43429Highcom.compuware.jenkins:compuware-topaz-for-total-test: Jenkins Compuware Topaz for Total Test Plugin vulnerable to Protection Mechanism FailureCVE-2022-43425Highio.jenkins.plugins:custom-checkbox-parameter: Stored XSS vulnerability in Jenkins Custom Checkbox Parameter PluginCVE-2022-43424Mediumcom.compuware.jenkins:compuware-xpediter-code-coverage: Agent-to-controller security bypass vulnerability in Jenkins Compuware Xpediter Code Coverage PluginCVE-2022-43405Highio.jenkins.plugins:pipeline-groovy-lib: Sandbox bypass vulnerability in Jenkins Pipeline: Groovy Libraries Plugin and Pipeline: Deprecated Groovy Libraries PluginCVE-2022-43401Highorg.jenkins-ci.plugins:script-security: Sandbox bypass vulnerabilities in Jenkins Script Security Plugin and in Pipeline: Groovy PluginCVE-2022-43402Criticalorg.jenkins-ci.plugins.workflow:workflow-cps: Jenkins Pipeline: Groovy Plugin allows sandbox protection bypass and arbitrary code executionCVE-2022-43406Highorg.jenkins-ci.plugins.workflow:workflow-cps-global-lib: Sandbox bypass vulnerability in Jenkins Pipeline: Deprecated Groovy Libraries PluginCVE-2022-43403Criticalorg.jenkins-ci.plugins:script-security: Jenkins Script Security Plugin sandbox bypass vulnerabilityCVE-2022-43404Highorg.jenkins-ci.plugins:script-security: Sandbox bypass vulnerabilities in Jenkins Script Security Plugin and in Pipeline: Groovy PluginCVE-2022-43417Mediumorg.jenkins-ci.plugins:katalon: Missing permission checks in Jenkins Katalon Plugin allow capturing credentialsCVE-2022-43410Mediumorg.jenkins-ci.plugins:mercurial: Webhook endpoint discloses job names to unauthorized users in Jenkins Mercurial PluginCVE-2022-43419Mediumorg.jenkins-ci.plugins:katalon: API keys stored in plain text by Jenkins Katalon PluginCVE-2022-43408Highorg.jenkins-ci.plugins.pipeline-stage-view:pipeline-stage-view: Jenkins Pipeline: Stage View Plugin allows CSRF protection bypass of any target URL in JenkinsCVE-2022-43434Highio.jenkins.plugins:neuvector-vulnerability-scanner: Content-Security-Policy protection for user content disabled by Jenkins NeuVector Vulnerability Scanner PluginCVE-2022-43416Highorg.jenkins-ci.plugins:katalon: Jenkins Katalon Plugin vulnerable to Protection Mechanism FailureCVE-2022-43418Mediumorg.jenkins-ci.plugins:katalon: CSRF vulnerability in Jenkins Katalon Plugin allows capturing credentialsCVE-2022-43415Highorg.jenkins-ci.plugins:repo: XXE vulnerability in Jenkins REPO PluginCVE-2022-43426Lowio.jenkins.plugins:s3explorer: AWS secrets displayed without masking by Jenkins S3 Explorer PluginCVE-2022-43435Highorg.jenkins-ci.plugins.plugin:fireline: Content-Security-Policy protection for user content can be disabled in Jenkins 360 FireLine PluginCVE-2022-43427Mediumcom.compuware.jenkins:compuware-topaz-for-total-test: Jenkins Compuware Topaz for Total Test Plugin allows attackers with Overall/Read permission to enumerate credentials IDs of credentials…

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo