Maven vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2019-10323Mediumorg.jenkins-ci.plugins:artifactory: Jenkins Artifactory Plugin missing permission checkCVE-2019-10321Mediumorg.jenkins-ci.plugins:artifactory: Jenkins Artifactory Plugin cross-site request forgery vulnerabilityCVE-2019-10322Mediumorg.jenkins-ci.plugins:artifactory: Jenkins Artifactory Plugin missing permission checkCVE-2019-11818Loworg.opencms:opencms-core: Alkacon OpenCMS XSS via New User moduleCVE-2021-21700Mediumorg.jenkins-ci.plugins:scriptler: Stored XSS vulnerability in Jenkins Scriptler PluginCVE-2021-43576Mediumorg.jenkins-ci.plugins:pom2config: XXE vulnerability in Jenkins pom2config PluginCVE-2021-21699Mediumorg.biouno:uno-choice: Stored XSS vulnerability in Jenkins Active Choices PluginCVE-2021-21701Mediumorg.jenkins-ci.plugins:performance: XXE vulnerability in Jenkins Performance PluginCVE-2021-43577Highorg.jenkins-ci.plugins:dependency-check-jenkins-plugin: XXE vulnerability in Jenkins OWASP Dependency-Check PluginCVE-2021-43578Highorg.jenkins-ci.plugins:squashtm-publisher-plugin: Agent-to-controller security bypass in Jenkins Squash TM Publisher (Squash4Jenkins) Plugin allows writing arbitrary filesCVE-2021-21686Criticalorg.jenkins-ci.main:jenkins-core: Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in JenkinsCVE-2021-21690Criticalorg.jenkins-ci.main:jenkins-core: Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in JenkinsCVE-2021-21685Criticalorg.jenkins-ci.main:jenkins-core: Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in JenkinsCVE-2021-21692Criticalorg.jenkins-ci.main:jenkins-core: Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in JenkinsCVE-2021-21687Criticalorg.jenkins-ci.main:jenkins-core: Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in JenkinsCVE-2021-21693Criticalorg.jenkins-ci.main:jenkins-core: Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in JenkinsCVE-2021-21688Criticalorg.jenkins-ci.main:jenkins-core: Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in JenkinsCVE-2021-21694Criticalorg.jenkins-ci.main:jenkins-core: Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in JenkinsCVE-2021-21689Criticalorg.jenkins-ci.main:jenkins-core: Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in JenkinsCVE-2021-21691Criticalorg.jenkins-ci.main:jenkins-core: Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in JenkinsCVE-2021-21695Criticalorg.jenkins-ci.main:jenkins-core: Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in JenkinsCVE-2021-21696Highorg.jenkins-ci.main:jenkins-core: Agent-to-controller access control allowed writing to sensitive directory used by Jenkins Pipeline: Shared Groovy Libraries PluginCVE-2021-21697Criticalorg.jenkins-ci.main:jenkins-core: Agent-to-controller access control allows reading/writing most content of build directories in JenkinsCVE-2021-21698Mediumorg.jenkins-ci.plugins:subversion: Path traversal vulnerability in Jenkins Subversion Plugin allows reading arbitrary filesCVE-2021-42697Highcom.typesafe.akka:akka-http-core_2.13.0-RC3: Uncontrolled Recursion in Akka HTTP

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo