Maven vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2022-36901Loworg.jenkins-ci.plugins:http_request: Jenkins HTTP Request Plugin stores HTTP Request passwords unencryptedCVE-2022-36894Highorg.jenkins-ci.plugins:clif-performance-testing: Arbitrary file write vulnerability in Jenkins CLIF Performance Testing pluginCVE-2022-36908Mediumorg.jenkins-ci.plugins:openshift-deployer: CSRF vulnerability in Jenkins OpenShift Deployer PluginCVE-2022-36896Mediumcom.compuware.jenkins:compuware-scm-downloader: Jenkins Compuware Source Code Download is missing authorizationCVE-2022-36905Higheu.markov.jenkins.plugin.mvnmeta:maven-metadata-plugin: Stored XSS vulnerability in Jenkins Maven Metadata Plugin for Jenkins CI server pluginCVE-2022-36900Mediumcom.compuware.jenkins:compuware-zadviser-api: Jenkins Compuware zAdviser API Plugin vulnerable to protection mechanism failureCVE-2022-36904Mediumorg.jenkins-ci.plugins:repository-connector: Jenkins Repository Connector Plugin does not perform a permission check in a method implementing form validationCVE-2022-36910Mediumorg.jenkins-ci.plugins:lucene-search: Lucene-Search Plugin does not perform permission checks in several HTTP endpointsCVE-2022-36906Mediumorg.jenkins-ci.plugins:openshift-deployer: CSRF vulnerability in Jenkins OpenShift Deployer PluginCVE-2022-36912Mediumorg.jenkins-ci.plugins:openstack-heat: Missing permission checks in Jenkins openstack-heat PluginCVE-2022-36915Mediumorg.jenkins-ci.plugins:android-signing: Jenkins Android Signing Plugin allows attackers to check whether attacker-specified file patterns match workspace contentsCVE-2022-36911Mediumorg.jenkins-ci.plugins:openstack-heat: CSRF vulnerability in Jenkins openstack-heat PluginCVE-2022-36907Mediumorg.jenkins-ci.plugins:openshift-deployer: Missing permission check in Jenkins OpenShift Deployer PluginCVE-2022-36914Mediumorg.jenkins-ci.plugins:files-found-trigger: Jenkins Files Found Trigger Plugin allows attackers to check for existence of attacker-specified file path on Jenkins controller file systemCVE-2022-36916Mediumorg.jenkins-ci.plugins:google-cloud-backup: CSRF vulnerability in Jenkins Google Cloud Backup PluginCVE-2022-36913Mediumorg.jenkins-ci.plugins:openstack-heat: Jenkins Openstack Heat Plugin does not perform permission checks in methods implementing form validationCVE-2022-36909Mediumorg.jenkins-ci.plugins:openshift-deployer: Missing permission check in Jenkins OpenShift Deployer PluginCVE-2022-36917Mediumorg.jenkins-ci.plugins:google-cloud-backup: Jenkins Google Cloud Backup Plugin allows attackers with Overall/Read permission to request a manual backup.CVE-2022-36920Highorg.jenkins-ci.plugins:coverity: Jenkins Coverity Plugin vulnerable to cross-site request forgery (CSRF)CVE-2022-36919Mediumorg.jenkins-ci.plugins:coverity: Jenkins Coverity Plugin allows attackers with Overall/Read permission to enumerate credentials IDsCVE-2022-36918Mediumorg.jenkins-ci.plugins:buckminster: Jenkins Buckminster Plugin does not perform a permission check in a method implementing form validationCVE-2022-36921Highorg.jenkins-ci.plugins:coverity: Missing permission check in Coverity Plugin allows capturing credentialsCVE-2022-36922Highorg.jenkins-ci.plugins:lucene-search: Jenkins Lucene-Search Plugin vulnerable to reflected (XSS) cross-site scriptingCVE-2022-34115Criticalio.dataease:dataease-plugin-common: Dataease v1.11.1 SQL Injection via parameter dataSourceIdCVE-2022-34113Criticalio.dataease:dataease-plugin-common: Dataease before 1.11.2 allows arbitrary code execution via crafter plugin

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo