Maven vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2022-41224Highorg.jenkins-ci.main:jenkins-core: Jenkins vulnerable to stored cross site scripting in the I:helpIcon componentCVE-2022-41250Mediumcom.meowlomo.jenkins:scm-httpclient: Missing permission check in Jenkins SCM HttpClient Plugin allow capturing credentialsCVE-2022-41248Loworg.jenkins-ci.plugins:bigpanda-jenkins: Jenkins BigPanda Notifier Plugin Missing Password Field MaskingCVE-2022-41249Mediumcom.meowlomo.jenkins:scm-httpclient: Jenkins SCM HttpClient Plugin vulnerable to Cross-Site Request ForgeryCVE-2022-41251Mediumorg.jenkins-ci.plugins:apprenda: Jenkins Apprenda Plugin has Missing Authorization vulnerabilityCVE-2022-41255Loworg.jenkins-ci.plugins:cons3rt: API token stored in plain text by Jenkins CONS3RT PluginCVE-2022-41254Mediumorg.jenkins-ci.plugins:cons3rt: Missing permission checks in Jenkins CONS3RT Plugin allow capturing credentialsCVE-2022-41252Mediumorg.jenkins-ci.plugins:cons3rt: Missing permission checks in Jenkins CONS3RT Plugin allow enumerating credentials IDsCVE-2022-41253Mediumorg.jenkins-ci.plugins:cons3rt: CSRF vulnerability in Jenkins CONS3RT Plugin allow capturing credentialsCVE-2022-31679Loworg.springframework.data:spring-data-rest-core: Spring Data REST can expose hidden entity attributesCVE-2022-34917Highorg.apache.kafka:kafka: Apache Kafka vulnerability can lead to brokers hitting OutOfMemoryException, causing Denial of ServiceCVE-2022-40955Highorg.apache.inlong:inlong-common: Apache InLong vulnerable to Deserialization of Untrusted DataCVE-2022-31166Highorg.xwiki.platform:xwiki-platform-oldcore: XWiki.WebHome vulnerable to Improper Privilege Management in XWiki resolving groupsCVE-2022-31167Highorg.xwiki.platform:xwiki-platform-security: XWiki Platform Security Parent POM vulnerable to overwriting of security rules of a page with a final page having the same referenceCVE-2022-25873Mediumvuetify: Vuetify Cross-site Scripting vulnerabilityCVE-2022-40150Highorg.codehaus.jettison:jettison: Jettison memory exhaustionCVE-2022-40152Mediumcom.fasterxml.woodstox:woodstox-core: Denial of Service due to parser crashCVE-2022-40149Mediumorg.codehaus.jettison:jettison: Jettison parser crash by stackoverflowCVE-2022-36095Mediumorg.xwiki.platform:xwiki-platform-web-templates: XWiki Cross-Site Request Forgery (CSRF) for actions on tagsCVE-2022-36090Highorg.xwiki.platform:xwiki-platform-oldcore: XWiki Platform Improper Authorization check for inactive usersCVE-2022-36091Highorg.xwiki.platform:xwiki-platform-web-templates: XWiki Platform Web Templates vulnerable to Missing Authorization, Exposure of Private Personal Information to Unauthorized ActorCVE-2022-36096Highorg.xwiki.platform:xwiki-platform-index-ui: XWiki Platform vulnerable to Cross-site Scripting in the deleted attachments listCVE-2022-36097Highorg.xwiki.platform:xwiki-platform-attachment-ui: XWiki Platform Attachment UI vulnerable to cross-site scripting in the move attachment formCVE-2022-36098Criticalorg.xwiki.platform:xwiki-platform-mentions-ui: XWiki Platform Mentions UI vulnerable to Cross-site ScriptingCVE-2022-36099Criticalorg.xwiki.platform:xwiki-platform-wiki-ui-mainwiki: XWiki Platform Wiki UI Main Wiki Eval Injection vulnerability

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo