Maven vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2022-34781Mediumcom.xebialabs.ci:xlrelease-plugin: Missing permission checks in Jenkins XebiaLabs XL Release Plugin allow capturing credentialsCVE-2022-32532Criticalorg.apache.shiro:shiro-core: Improper Authorization in Apache ShiroCVE-2018-18855Mediumio.spray:spray-json_2.10: Uncontrolled Resource Consumption in Spray JSONCVE-2022-26477Highorg.apache.systemds:systemds: SystemDS CPU exhaustion vulnerabilityCVE-2022-33879Loworg.apache.tika:tika: Apache Tika contains incomplete fix for regex DoSCVE-2022-34198Highorg.jenkins-ci.plugins:StashBranchParameter: Cross-site Scripting in Jenkins Stash Branch Parameter PluginCVE-2022-34209Mediumorg.jenkins-ci.plugins:threadfix: Cross-Site Request Forgery in Jenkins ThreadFix PluginCVE-2022-34305Mediumorg.apache.tomcat:tomcat: Cross-site Scripting in Apache TomcatCVE-2022-34207Mediumorg.jenkins-ci.plugins:beaker-builder: Cross-Site Request Forgery in Jenkins Beaker builder PluginCVE-2022-34208Mediumorg.jenkins-ci.plugins:beaker-builder: Jenkins Beaker builder Plugin Missing Authorization vulnerabilityCVE-2022-34205Mediumorg.jenkins-ci.plugins:jianliao: Cross-Site Request Forgery in Jenkins Jianliao Notification PluginCVE-2022-34211Mediumorg.jenkins-ci.plugins:vmware-vrealize-orchestrator: Cross-Site Request Forgery in Jenkins vRealize Orchestrator PluginCVE-2022-34298Mediumorg.openidentityplatform.openam:openam-core: NT auth module vulnerability in OpenAMCVE-2022-34210Mediumorg.jenkins-ci.plugins:threadfix: Missing permission check in Jenkins ThreadFix PluginCVE-2022-34213Loworg.jenkins-ci.plugins:squashtm-publisher: Squash TM Publisher (Squash4Jenkins) Plugin stores passwords stored in plain textCVE-2022-34212Mediumorg.jenkins-ci.plugins:vmware-vrealize-orchestrator: Missing permission check in Jenkins vRealize Orchestrator PluginCVE-2022-34204Mediumcom.geteasyqa:easyqa: Jenkins EasyQA Plugin Missing Authorization vulnerabilityCVE-2022-34190Higheu.markov.jenkins.plugin.mvnmeta:maven-metadata-plugin: Cross-site Scripting in Jenkins Maven Metadata PluginCVE-2022-34206Mediumorg.jenkins-ci.plugins:jianliao: Jenkins Jianliao Notification Plugin Missing Authorization vulnerabilityCVE-2022-34192Highorg.jenkins-ci.plugins:ontrack: Cross-site Scripting in Jenkins ontrack Jenkins PluginCVE-2022-34188Highorg.jenkins-ci.plugins:hidden-parameter: Cross-site Scripting in Jenkins Hidden Parameter PluginCVE-2022-34195Highorg.jenkins-ci.plugins:repository-connector: Cross-site Scripting in Jenkins Repository Connector PluginCVE-2022-34191Highio.jenkins.plugins:cavisson-ns-nd-integration: Cross-site Scripting in Jenkins NS-ND Integration Performance Publisher PluginCVE-2022-34187Highaendter.jenkins.plugins:filesystem-list-parameter-plugin: Cross-site Scripting in Jenkins Filesystem List Parameter PluginCVE-2022-34203Mediumcom.geteasyqa:easyqa: Cross-Site Request Forgery in Jenkins EasyQA Plugin

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo