Maven vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2021-33327Mediumcom.liferay:com.liferay.portlet.configuration.web: Liferay Portal and Liferay DXP does not properly check user permissionCVE-2021-33325Mediumcom.liferay.portal:release.portal.bom: Liferay Portal and Liferay DXP Stores User Passwords in CleartextCVE-2021-33326Mediumcom.liferay:com.liferay.frontend.js.aui.web: Liferay Portal and Liferay DXP Cross-site scripting (XSS) vulnerability in the Frontend JS moduleCVE-2021-33320Mediumcom.liferay:com.liferay.flags.taglib: Liferay Portal and Liferay DXP vulnerable to email spam via lack of flagging rateCVE-2021-33328Mediumcom.liferay.portal:release.portal.bom: Liferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) in Edit Vocabulary PageCVE-2021-33321Highcom.liferay.portal:com.liferay.portal.impl: Liferay Portal and Liferay DXP insecure default configurationCVE-2021-33324Mediumcom.liferay.portal:release.portal.bom: Liferay Portal and Liferay DXP Don't Check Permissions of PagesCVE-2021-33323Highcom.liferay:com.liferay.dynamic.data.mapping.form.web: Liferay Portal and Liferay DXP autosaves form data for other users to seeCVE-2021-33331Mediumcom.liferay.portal:release.portal.bom: Liferay Portal and Liferay DXP Allows Arbitrary Redirect of Users to External URLsCVE-2021-33332Mediumcom.liferay.portal:release.portal.bom: Liferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS)CVE-2021-33334Mediumcom.liferay.portal:release.portal.bom: Liferay Portal and Liferay DXP Fails to Properly Check User PermissionsCVE-2021-33333Mediumcom.liferay.portal:release.portal.bom: Liferay Portal and Liferay DXP Fails to Check User Permissions for Workflow SubmissionsCVE-2021-34802Highorg.neo4j:neo4j-kernel: Improper Privilege Management in Neo4j Graph DatabaseCVE-2021-22145Mediumorg.elasticsearch.client:elasticsearch-rest-client: Generation of Error Message Containing Sensitive Information in ElasticsearchCVE-2021-21671Highorg.jenkins-ci.main:jenkins-core: Session fixation vulnerability in JenkinsCVE-2021-21674Mediumorg.jenkins-ci.plugins:requests: Missing permission check in Jenkins requests-plugin Plugin allows viewing pending requestsCVE-2021-21675Mediumorg.jenkins-ci.plugins:requests: CSRF vulnerabilities in Jenkins requests-plugin PluginCVE-2021-21670Mediumorg.jenkins-ci.main:jenkins-core: Improper permission checks allow canceling queue items and aborting builds in JenkinsCVE-2021-21673Mediumorg.jenkins-ci.plugins:cas-plugin: Open redirect vulnerability in Jenkins CAS PluginCVE-2021-21676Mediumorg.jenkins-ci.plugins:requests: Missing permission check in Jenkins requests-plugin Plugin allows sending emailsCVE-2021-31649Criticalcom.jfinal:jfinal: JFinal Java Deserialization VulnerabilityCVE-2021-21669Criticalorg.jenkins-ci.plugins:generic-webhook-trigger: XXE vulnerability in Jenkins Generic Webhook Trigger PluginCVE-2021-21663Mediumcom.xebialabs.deployit.ci:deployit-plugin: Missing permission check in Jenkins XebiaLabs XL Deploy Plugin allows capturing credentialsCVE-2021-21664Mediumcom.xebialabs.deployit.ci:deployit-plugin: Incorrect permission check in XebiaLabs XL Deploy Plugin allows capturing credentialsCVE-2021-21665Highcom.xebialabs.deployit.ci:deployit-plugin: CSRF vulnerability in Jenkins XebiaLabs XL Deploy Plugin allows capturing credentials

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo