Maven vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2022-34186Highcom.moded.extendedchoiceparameter:dynamic_extended_choice_parameter: Cross-site Scripting in Jenkins Dynamic Extended Choice Parameter PluginCVE-2022-34185Highme.leejay.jenkins:date-parameter: Cross-site Scripting in Jenkins Date Parameter PluginCVE-2022-34202Lowcom.geteasyqa:easyqa: User passwords stored in plain text by Jenkins EasyQA PluginCVE-2022-34175Highorg.jenkins-ci.main:jenkins-core: Unauthorized view fragment access in JenkinsCVE-2022-34183Highio.jenkins.plugins:agent-server-parameter: Cross-site Scripting in Jenkins Agent Server Parameter PluginCVE-2022-34173Highorg.jenkins-ci.main:jenkins-core: Cross-site Scripting vulnerability in JenkinsCVE-2022-34194Highorg.jenkins-ci.plugins:readonly-parameters: Cross-site Scripting in Jenkins Readonly Parameter PluginCVE-2022-34178Highorg.jenkins-ci.plugins:embeddable-build-status: Reflected Cross site scripting in Jenkins Embeddable Build Status PluginCVE-2022-34184Highorg.jenkins-ci.plugins:crx-content-package-deployer: Cross-site Scripting in Jenkins CRX Content Package Deployer PluginCVE-2022-34170Highorg.jenkins-ci.main:jenkins-core: Cross-site Scripting vulnerability in JenkinsCVE-2022-34171Highorg.jenkins-ci.main:jenkins-core: Cross-site Scripting vulnerability in JenkinsCVE-2022-34172Highorg.jenkins-ci.main:jenkins-core: Cross-site Scripting vulnerability in JenkinsCVE-2022-34197Highorg.jenkins-ci.plugins:sauce-ondemand: Cross-site Scripting in Jenkins Sauce OnDemand PluginCVE-2022-34179Mediumorg.jenkins-ci.plugins:embeddable-build-status: Path Traversal vulnerability in Jenkins Embeddable Build Status PluginCVE-2022-34193Highorg.lilicurroad.jenkins:packageversion: Cross-site Scripting in Jenkins Package Version PluginCVE-2022-34180Mediumorg.jenkins-ci.plugins:embeddable-build-status: Improper authorization in Jenkins Embeddable Build Status Plugin bypasses ViewStatus permission requirementCVE-2022-34201Mediumcom.convertigo.jenkins.plugins:convertigo-mobile-platform: Missing permission check in Jenkins Convertigo Mobile Platform PluginCVE-2022-34200Mediumcom.convertigo.jenkins.plugins:convertigo-mobile-platform: Cross-Site Request Forgery in Jenkins Convertigo Mobile Platform PluginCVE-2022-34181Mediumorg.jenkins-ci.plugins:xunit: Agent-to-controller security bypass in Jenkins xUnit PluginCVE-2022-34199Mediumcom.convertigo.jenkins.plugins:convertigo-mobile-platform: Plaintext Storage of a Password in Jenkins Convertigo Mobile Platform Plugin CVE-2022-34196Highio.jenkins.plugins:rest-list-parameter: Cross-site Scripting in Jenkins REST List Parameter PluginCVE-2022-34182Highorg.jenkins-ci.plugins:nested-view: Reflected Cross-site Scripting in Jenkins Nested View PluginCVE-2022-34189Highorg.jenkins-ci.plugins:image-tag-parameter: Cross-site Scripting in Jenkins Image Tag Parameter PluginCVE-2022-34176Highorg.jenkins-ci.plugins:junit: Cross-site Scripting in Jenkins JUnit PluginCVE-2022-34177Highorg.jenkins-ci.plugins:pipeline-input-step: Arbitrary file write vulnerability in Jenkins Pipeline: Input Step Plugin

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo