Maven vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2022-38648Mediumorg.apache.xmlgraphics:batik: Apache Batik vulnerable to Server-Side Request ForgeryCVE-2022-38398Mediumorg.apache.xmlgraphics:batik: Apache Batik Server-Side Request Forgery CVE-2022-41244Mediumorg.jenkins-ci.plugins:view26: Missing hostname validation in Jenkins View26 Test-Reporting PluginCVE-2022-41247Loworg.jenkins-ci.plugins:bigpanda-jenkins: Jenkins BigPanda Notifier Plugin stores BigPanda API key unencryptedCVE-2022-41234Mediumorg.jenkins-ci.plugins:rundeck: Missing webhook endpoint authorization in Jenkins Rundeck PluginCVE-2022-41246Mediumorg.jenkins-ci.plugins:ws-execution-manager: CSRF vulnerability and mMCVE-2022-41226Highcom.compuware.jenkins:compuware-common-configuration: Jenkins Compuware Common Configuration Plugin vulnerable to Improper Restriction of XML External Entity ReferenceCVE-2022-41245Mediumorg.jenkins-ci.plugins:ws-execution-manager: CSRF vulnerability in Jenkins Worksoft Execution Manager Plugin allows capturing credentialsCVE-2022-41241Mediumnet.praqma:rqm-plugin: Jenkins RQM Plugin vulnerable to Improper Restriction of XML External Entity ReferenceCVE-2022-41243Mediumcom.smalltest:smalltest: Jenkins SmallTest Plugin missing hostname validationCVE-2022-41240Highorg.jenkins-ci.plugins:walti: Stored XSS vulnerability in Jenkins Walti pluginCVE-2022-41242Mediumorg.jenkins-ci.plugins:extreme-feedback: Jenkins extreme-feedback Plugin vulnerable to Missing AuthorizationCVE-2022-41237Highcom.groupon.jenkins-ci.plugins:DotCi: RCE vulnerability in Jenkins DotCi PluginCVE-2022-41239Highcom.groupon.jenkins-ci.plugins:DotCi: Stored XSS vulnerability in Jenkins DotCi PluginCVE-2022-41238Mediumcom.groupon.jenkins-ci.plugins:DotCi: Lack of authentication mechanism in Jenkins DotCi Plugin webhookCVE-2022-41235Mediumorg.jenkins-ci.plugins:wildfly-deployer: Jenkins WildFly Deployer Plugin vulnerable to path traversalCVE-2022-41236Mediumorg.jenkins-ci.plugins:security-inspector: CSRF vulnerability in Jenkins Security Inspector pluginCVE-2022-41233Mediumorg.jenkins-ci.plugins:rundeck: Jenkins Rundeck Plugin Missing Authorization vulnerabilityCVE-2022-41231Mediumorg.jenkins-ci.plugins:build-publisher: Path traversal in Jenkins build-publisher PluginCVE-2022-41232Highorg.jenkins-ci.plugins:build-publisher: Jenkins build-publisher plugin vulnerable to cross-site request forgeryCVE-2022-41230Mediumorg.jenkins-ci.plugins:build-publisher: Missing permission check in Jenkins build-publisher PluginCVE-2022-41229Highio.jenkins.plugins:cavisson-ns-nd-integration: Jenkins NS-ND Integration Performance Publisher Plugin vulnerable to Cross-site ScriptingCVE-2022-41227Mediumio.jenkins.plugins:cavisson-ns-nd-integration: Jenkins NS-ND Integration Performance Publisher Plugin vulnerable to Cross-Site Request ForgeryCVE-2022-41228Mediumio.jenkins.plugins:cavisson-ns-nd-integration: Jenkins NS-ND Integration Performance Publisher Plugin vulnerable to Missing AuthorizationCVE-2022-41225Highorg.jenkins-ci.plugins:anchore-container-scanner: Jenkins Anchore Container Image Scanner Plugin vulnerable to cross site scripting

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo