Maven vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2020-2312Mediumorg.jenkins-ci.plugins:sqlplus-script-runner: Password written to the build log by Jenkins SQLPlus Script Runner Plugin CVE-2020-2303Mediumorg.jenkins-ci.plugins:active-directory: CSRF vulnerability in Jenkins Active Directory Plugin CVE-2020-2304Mediumorg.jenkins-ci.plugins:subversion: XXE vulnerability in Jenkins Subversion Plugin CVE-2020-2302Mediumorg.jenkins-ci.plugins:active-directory: Missing permission check in Jenkins Active Directory Plugin allows accessing domain health check page CVE-2020-2307Mediumorg.csanchez.jenkins.plugins:kubernetes: Exposure of Sensitive Information to an Unauthorized Actor in Jenkins Kubernetes Plugin CVE-2020-2299Criticalorg.jenkins-ci.plugins:active-directory: Improper Authentication in Jenkins Active Directory Plugin CVE-2020-2306Mediumorg.jenkins-ci.plugins:mercurial: Missing Authorization in Jenkins Mercurial Plugin CVE-2020-2305Mediumorg.jenkins-ci.plugins:mercurial: XXE vulnerability in Jenkins Mercurial Plugin CVE-2020-2301Criticalorg.jenkins-ci.plugins:active-directory: Authentication cache in Active Directory Jenkins Plugin allows logging in with any password CVE-2020-2300Criticalorg.jenkins-ci.plugins:active-directory: Improper Authentication (empty password) in Jenkins Active Directory Plugin CVE-2020-25689Mediumorg.wildfly:wildfly-dist: Uncontrolled Resource Consumption in WildFly CVE-2020-10721Highio.fabric8:fabric8-maven-plugin: fabric8-maven-plugin: insecure way to construct Yaml Object leading to remote code execution CVE-2020-2298Mediumorg.jenkins-ci.plugins:nerrvana-plugin: XXE vulnerability in Jenkins Nerrvana Plugin CVE-2020-2295Mediumcom.barchart.jenkins:maven-release-cascade: CSRF vulnerability in Jenkins Maven Cascade Release Plugin CVE-2020-2297Lowcom.hoiio.jenkins:sms: Access token stored in plain text by Jenkins SMS Notification Plugin CVE-2020-2294Mediumcom.barchart.jenkins:maven-release-cascade: Missing permission checks in Jenkins Maven Cascade Release Plugin CVE-2020-2286Highorg.jenkins-ci.plugins:role-strategy: Improper authorization due to caching in Jenkins Role-based Authorization Strategy Plugin CVE-2020-2293Mediumorg.jenkins-ci.plugins:persona: Arbitrary file read vulnerability in Jenkins Persona Plugin CVE-2020-2290Mediumorg.biouno:uno-choice: Stored XSS vulnerability in Jenkins Active Choices Plugin CVE-2020-2292Mediumorg.jenkins-ci.plugins:release: Stored XSS vulnerability in Jenkins Release Plugin CVE-2020-2289Mediumorg.biouno:uno-choice: Stored XSS vulnerability in Jenkins Active Choices Plugin CVE-2020-2296Mediumorg.jenkins-ci.plugins:shared-objects: CSRF vulnerability in Jenkins Shared Objects Plugin CVE-2020-2291Loworg.jenkins-ci.plugins:couchdb-statistics: Password stored in plain text by Jenkins couchdb-statistics Plugin CVE-2020-2288Mediumorg.jenkins-ci.plugins:audit-trail: Incorrect default pattern in Jenkins Audit Trail Plugin CVE-2020-25644Highorg.wildfly.openssl:wildfly-openssl-natives-parent: Wildfly-OpenSSL memory leak flaw

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo