Maven vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2021-21643Mediumorg.jenkins-ci.plugins:config-file-provider: Incorrect permission checks in Jenkins Config File Provider Plugin allow enumerating credentials IDsCVE-2021-21644Mediumorg.jenkins-ci.plugins:config-file-provider: CSRF vulnerability in Jenkins Config File Provider Plugin allows deleting configuration filesCVE-2021-22511Mediumorg.jenkins-ci.plugins:hp-application-automation-tools-plugin: SSL/TLS certificate validation unconditionally disabled by Jenkins Micro Focus Application Automation Tools PluginCVE-2021-22512Mediumorg.jenkins-ci.plugins:hp-application-automation-tools-plugin: CSRF vulnerability in Jenkins Micro Focus Application Automation Tools PluginCVE-2021-22510Highorg.jenkins-ci.plugins:hp-application-automation-tools-plugin: Reflected XSS vulnerability in Jenkins Micro Focus Application Automation Tools PluginCVE-2021-22513Mediumorg.jenkins-ci.plugins:hp-application-automation-tools-plugin: Missing permission checks in Micro Focus Application Automation Tools PluginCVE-2021-21639Mediumorg.jenkins-ci.main:jenkins-core: Lack of type validation in agent related REST API in JenkinsCVE-2021-21640Mediumorg.jenkins-ci.main:jenkins-core: View name validation bypass in JenkinsCVE-2021-21641Mediumorg.jenkins-ci.plugins:promoted-builds: CSRF vulnerability in Jenkins promoted builds PluginCVE-2021-21634Mediumorg.jvnet.hudson.plugins:jabber: Passwords stored in plain text by Jenkins Jabber (XMPP) notifier and control PluginCVE-2021-21638Highorg.jenkins-ci.plugins:tfs: CSRF vulnerability in Jenkins Team Foundation Server Plugin allow capturing credentialsCVE-2021-21637Mediumorg.jenkins-ci.plugins:tfs: Missing permission check in Jenkins Team Foundation Server Plugin allow capturing credentialsCVE-2021-21636Mediumorg.jenkins-ci.plugins:tfs: Missing permission check in Jenkins Team Foundation Server Plugin allows enumerating credentials IDsCVE-2021-21632Mediumorg.jenkins-ci.plugins:dependency-track: Missing permission checks in Jenkins OWASP Dependency-Track Plugin allow capturing credentialsCVE-2021-21633Highorg.jenkins-ci.plugins:dependency-track: CSRF vulnerability and in Jenkins OWASP Dependency-Track Plugin allow capturing credentialsCVE-2021-21635Mediumio.jenkins.plugins:rest-list-parameter: Stored XSS vulnerability in Jenkins REST List Parameter PluginCVE-2021-21631Mediumorg.jenkins-ci.plugins:cloud-stats: Missing permission check in Jenkins Cloud Statistics PluginCVE-2021-21629Highorg.jenkins-ci.plugins:build-with-parameters: CSRF vulnerability in Jenkins Build With Parameters PluginCVE-2021-21630Mediumorg.jenkins-ci.plugins:extra-columns: Stored XSS vulnerability in Jenkins Extra Columns PluginCVE-2021-21628Mediumorg.jenkins-ci.plugins:build-with-parameters: Stored XSS vulnerability in Jenkins Build With Parameters PluginCVE-2021-21624Mediumorg.jenkins-ci.plugins:role-strategy: Incorrect permission checks in Jenkins Role-based Authorization Strategy Plugin may allow accessing some itemsCVE-2021-21625Mediumorg.jenkins-ci.plugins:aws-credentials: Missing permission checks in Jenkins CloudBees AWS Credentials Plugin allows enumerating credentials IDsCVE-2021-21626Mediumio.jenkins.plugins:warnings-ng: Missing permission checks in Jenkins Warnings Next Generation Plugin allow listing workspace contentsCVE-2021-21627Highorg.jenkins-ci.plugins:libvirt-slave: CSRF vulnerability in Jenkins Libvirt Agents PluginCVE-2021-21623Mediumorg.jenkins-ci.plugins:matrix-auth: Incorrect permission checks in Jenkins Matrix Authorization Strategy Plugin may allow accessing some items

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo