Maven vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2019-19899Criticalio.pebbletemplates:pebble-project: Pebble Templates Improper Input Validation vulnerabilityCVE-2014-3599Mediumorg.hornetq.rest:hornetq-rest: HornetQ REST vulnerable to Improper Restriction of XML External Entity ReferenceCVE-2019-17598Highcom.typesafe.play:play-ws_2.12: Play Framework Inadequate Encryption Strength vulnerabilityCVE-2019-10429Mediumorg.jenkins-ci.plugins:gitlab-logo: Jenkins GitLab Logo Plugin stores credentials unencryptedCVE-2019-10426Mediumnet.arangamani.jenkins:gem-publisher: Jenkins Gem Publisher Plugin stores credentials as plaintextCVE-2019-10430Mediumio.jenkins.plugins:neuvector-vulnerability-scanner: Jenkins NeuVector Vulnerability Scanner Plugin stored credentials in plain text CVE-2019-10407Mediumhudson.plugins:project-inheritance: Project Inheritance Plugin showed secret environment variables defined in Mask Passwords Plugin CVE-2019-10428Highorg.jenkins-ci.plugins:aqua-security-scanner: Jenkins Aqua Security Scanner Plugin showed plain text password in configuration form CVE-2019-10427Mediumorg.jenkins-ci.plugins:aqua-microscanner: Jenkins Aqua MicroScanner Plugin showed plain text credential in configuration form CVE-2019-10406Mediumorg.jenkins-ci.main:jenkins-core: Improper Neutralization of Input During Web Page Generation in JenkinsCVE-2019-10401Mediumorg.jenkins-ci.main:jenkins-core: Improper Neutralization of Input During Web Page Generation in JenkinsCVE-2019-10405Mediumorg.jenkins-ci.main:jenkins-core: Exposure of Sensitive Information to an Unauthorized Actor in JenkinsCVE-2019-10403Mediumorg.jenkins-ci.main:jenkins-core: Improper Neutralization of Input During Web Page Generation in JenkinsCVE-2019-10404Mediumorg.jenkins-ci.main:jenkins-core: Improper Neutralization of Input During Web Page Generation in JenkinsCVE-2019-10402Mediumorg.jenkins-ci.main:jenkins-core: Improper Neutralization of Input During Web Page Generation in JenkinsCVE-2019-0195Criticalorg.apache.tapestry:tapestry-core: Deserialization of Untrusted Data in Apache TapestryCVE-2019-12401Highorg.apache.solr:solr-core: Apache Solr vulnerable to XML BombCVE-2019-1010206Mediumcom.github.kevinsawicki:http-request: kevinsawicki/http-request Missing certificate validationCVE-2019-10329Highorg.jenkins-ci.plugins:influxdb: Plaintext password storage in Jenkins InfluxDB PluginCVE-2019-10326Mediumio.jenkins.plugins:warnings-ng: Jenkins Warnings NG Plugin cross-site request forgery vulnerabilityCVE-2019-10328Criticalorg.jenkins-ci.plugins:workflow-remote-loader: Unsafe entry in Script Security list of approved signatures in Pipeline Remote Loader PluginCVE-2019-10330Highorg.jenkins-ci.plugins:gitea: Improper handling of untrusted branches in Gitea Jenkins PluginCVE-2019-10325Mediumio.jenkins.plugins:warnings-ng: Jenkins Warnings NG Plugin Cross-site scripting vulnerabilityCVE-2019-10324Mediumorg.jenkins-ci.plugins:artifactory: Cross-site request forgery vulnerability in Jenkins Artifactory PluginCVE-2019-10327Highorg.jenkins-ci.plugins:pipeline-maven: XML External Entity processing vulnerability in Pipeline Maven Integration Jenkins Plugin

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo