Maven vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2021-21603Mediumorg.jenkins-ci.main:jenkins-core: XSS vulnerability in Jenkins notification barCVE-2020-25476Mediumcom.liferay.portal:release.portal.bom: Liferay Portal Vulnerable to Cross-Site Scripting (XSS) via User Name Parameter CVE-2020-10770Mediumorg.keycloak:keycloak-core: Keycloak vulnerable to Server-Side Request ForgeryCVE-2020-8920Lowcom.google.gerrit:gerrit-plugin-api: Information leak in GerritCVE-2020-16971Highcom.microsoft.azure:azure-eventhubs: Azure SDK for Java Security Feature Bypass VulnerabilityCVE-2020-27822Mediumorg.wildfly:wildfly-parent: Wildfly has a memory leak vulnerabilityCVE-2020-2320Criticalio.jenkins.plugin-management:plugin-management-parent-pom: Jenkins Plugin Installation Manager Tool did not verify plugin downloadsCVE-2020-2323Mediumio.jenkins.plugins:chaos-monkey: Missing permission checks in Jenkins Chaos Monkey PluginCVE-2020-2324Highorg.jenkins-ci.plugins:cvs: XXE vulnerability in Jenkins CVS PluginCVE-2020-2322Highio.jenkins.plugins:chaos-monkey: Missing permission checks in Jenkins Chaos Monkey PluginCVE-2020-2321Highorg.jenkins-ci.plugins:shelve-project-plugin: CSRF vulnerability in Jenkins Shelve Project PluginCVE-2017-15682Mediumorg.craftercms:crafter-core: Cross site scripting in Crafter CMSCVE-2017-15683Highorg.craftercms:crafter-core: XML injection in Crafter CMSCVE-2017-15680Mediumorg.craftercms:crafter-core: Missing Authorization in Crafter CMSCVE-2020-2318Mediumorg.jenkins-ci.plugins:mailcommander: Passwords stored in plain text by Mail Commander Plugin for Jenkins-ci PluginCVE-2020-2317Mediumorg.jvnet.hudson.plugins:findbugs: Stored XSS vulnerability in Jenkins FindBugs PluginCVE-2020-2319Loworg.jenkins-ci.plugins:labmanager: Password stored in plain text by Jenkins VMware Lab Manager Slaves PluginCVE-2020-2311Mediumio.jenkins.plugins:aws-global-configuration: Missing permission check in Jenkins AWS Global Configuration Plugin allows replacing plugin configurationCVE-2020-2314Lowcom.rapid7:jenkinsci-appspider-plugin: Password stored in plain text by Jenkins AppSpider PluginCVE-2020-2310Mediumorg.jenkins-ci.plugins:ansible: Missing permission checks in Jenkins Ansible Plugin allow enumerating credentials IDsCVE-2020-2309Mediumorg.csanchez.jenkins.plugins:kubernetes: Missing authorization in Jenkins Kubernetes PluginCVE-2020-2316Mediumorg.jvnet.hudson.plugins:analysis-core: Stored XSS vulnerability in Jenkins Static Analysis Utilities PluginCVE-2020-2315Mediumorg.jenkins-ci.plugins:visualworks-store: XXE vulnerability in Jenkins Visualworks Store PluginCVE-2020-2313Mediumorg.jenkins-ci.plugins:azure-keyvault: Missing permission checks in Jenkins Azure Key Vault Plugin allow enumerating credentials IDsCVE-2020-2308Mediumorg.csanchez.jenkins.plugins:kubernetes: Missing Authorization in Jenkins Kubernetes Plugin

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo