Maven vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2021-20218Highio.fabric8:kubernetes-client: Improper Limitation of a Pathname to a Restricted Directory in Fabric8 Kubernetes ClientCVE-2020-27838Mediumorg.keycloak:keycloak-core: Keycloak discloses information without authenticationCVE-2021-21622Mediumio.jenkins.plugins:artifact-repository-parameter: Stored XSS vulnerability in Jenkins Artifact Repository Parameter PluginCVE-2021-21621Loworg.jenkins-ci.plugins:support-core: Support bundles can include user session IDs in Jenkins Support Core PluginCVE-2021-21619Mediumorg.jenkins-ci.plugins:claim: XSS vulnerability in Jenkins Claim PluginCVE-2021-21616Mediumorg.biouno:uno-choice: Stored XSS vulnerability in Jenkins Active Choices PluginCVE-2021-21617Highorg.jenkins-ci.plugins:configurationslicing: CSRF vulnerability in Jenkins Configuration Slicing PluginCVE-2021-21618Mediumorg.jenkins-ci.plugins:repository-connector: Stored XSS vulnerability in Jenkins Repository Connector PluginCVE-2021-3396Highorg.opennms:opennms: OpenNMS Horizon RCE via JEXL2 expressionCVE-2021-0341Highcom.squareup.okhttp3:okhttp: Square OkHttp can accept the wrong certificateCVE-2020-7021Mediumorg.elasticsearch:elasticsearch: Insertion of Sensitive Information into Log File in ElasticsearchCVE-2020-29582Mediumorg.jetbrains.kotlin:kotlin-stdlib: Incorrect Default Permissions in JetBrains KotlinCVE-2021-21615Mediumorg.jenkins-ci.main:jenkins-core: Time-of-check Time-of-use (TOCTOU) Race Condition in JenkinsCVE-2021-21612Mediumde.tracetronic.jenkins.plugins:ecutest: Credentials stored in plain text by Jenkins TraceTronic ECU-TEST PluginCVE-2021-21613Mediumio.jenkins.plugins:tics: XSS vulnerability in Jenkins TICS PluginCVE-2021-21610Mediumorg.jenkins-ci.main:jenkins-core: Reflected XSS vulnerability in Jenkins markup formatter previewCVE-2021-21611Mediumorg.jenkins-ci.main:jenkins-core: Stored XSS vulnerability in Jenkins on new item pageCVE-2021-21614Mediumorg.jenkins-ci.plugins:bumblebee: Credentials stored in plain text by Jenkins Bumblebee HP ALM PluginCVE-2021-21605Highorg.jenkins-ci.main:jenkins-core: Path traversal vulnerability in Jenkins agent namesCVE-2021-21607Mediumorg.jenkins-ci.main:jenkins-core: Excessive memory allocation in graph URLs leads to denial of service in JenkinsCVE-2021-21606Mediumorg.jenkins-ci.main:jenkins-core: Arbitrary file existence check in file fingerprints in JenkinsCVE-2021-21602Mediumorg.jenkins-ci.main:jenkins-core: Arbitrary file read vulnerability in workspace browsers in JenkinsCVE-2021-21604Highorg.jenkins-ci.main:jenkins-core: Improper handling of REST API XML deserialization errors in JenkinsCVE-2021-21608Mediumorg.jenkins-ci.main:jenkins-core: Stored XSS vulnerability in Jenkins button labelsCVE-2021-21609Mediumorg.jenkins-ci.main:jenkins-core: Missing permission check for paths with specific prefix in Jenkins

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo