Maven vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2020-15840Mediumcom.liferay.portal:com.liferay.portal.impl: Liferay Portal and Liferay DXP Bypass via Double Encoded URLCVE-2020-2281Mediumorg.6wind.jenkins:lockable-resources: CSRF vulnerability in Jenkins Lockable Resources PluginCVE-2020-2285Mediumorg.jenkins-ci.plugins:liquibase-runner: Missing permission check in Jenkins Liquibase Runner Plugin allows enumerating credentials IDsCVE-2020-2283Mediumorg.jenkins-ci.plugins:liquibase-runner: Stored XSS vulnerability in Jenkins Liquibase Runner PluginCVE-2020-2279Criticalorg.jenkins-ci.plugins:script-security: Sandbox bypass vulnerability in Jenkins Script Security PluginCVE-2020-2280Highorg.jvnet.hudson.plugins:warnings: CSRF vulnerability in Jenkins warnings Plugin allows remote code executionCVE-2020-2282Mediumorg.jenkins-ci.plugins:implied-labels: Missing permission check in Jenkins Implied Labels Plugin allows reconfiguring the pluginCVE-2020-2284Highorg.jenkins-ci.plugins:liquibase-runner: XXE vulnerability in Jenkins Liquibase Runner PluginCVE-2020-2277Mediumorg.jvnet.hudson.plugins:storable-configs-plugin: Arbitrary file read vulnerability in Jenkins Storable Configs PluginCVE-2020-2272Mediumorg.jenkins-ci.plugins:elastest: Missing permission checks in Jenkins ElasTest PluginCVE-2020-2273Mediumorg.jenkins-ci.plugins:elastest: CSRF vulnerability in Jenkins ElasTest PluginCVE-2020-2274Mediumorg.jenkins-ci.plugins:elastest: Passwords stored in plain text by ElasTest PluginCVE-2020-2276Highorg.jvnet.hudson.plugins:selection-tasks-plugin: System command execution vulnerability in Selection tasks Jenkins PluginCVE-2020-2275Mediumorg.jvnet.hudson.plugins:copy-data-to-workspace-plugin: Arbitrary file read vulnerability in Copy data to workspace Jenkins PluginCVE-2020-2278Mediumorg.jvnet.hudson.plugins:storable-configs-plugin: Arbitrary file write vulnerability in Jenkins Storable Configs PluginCVE-2020-2261Highio.jenkins.plugins:perfecto: OS command execution vulnerability in Perfecto PluginCVE-2020-2267Mediumorg.jenkins-ci.plugins:mongodb: Missing permission checks in MongoDB PluginCVE-2020-2268Mediumorg.jenkins-ci.plugins:mongodb: CSRF vulnerability in MongoDB PluginCVE-2020-2269Highorg.jenkins-ci.plugins:chosen-views-tabbar: Stored XSS vulnerability in chosen-views-tabbar PluginCVE-2020-2266Highorg.jenkins-ci.plugins:description-column-plugin: Stored XSS vulnerability in Description Column PluginCVE-2020-2265Highorg.jenkins-ci.plugins:covcomplplot: Stored XSS vulnerability in Coverage/Complexity Scatter Plot PluginCVE-2020-2271Highorg.jvnet.hudson.plugins:locked-files-report: Stored XSS vulnerability in Locked Files Report PluginCVE-2020-2270Highorg.jvnet.hudson.plugins:clearcase-release: Stored XSS vulnerability in ClearCase Release PluginCVE-2020-2264Highorg.jenkins-ci.plugins:custom-job-icon: Stored XSS vulnerability in Custom Job Icon PluginCVE-2020-2260Mediumio.jenkins.plugins:perfecto: Missing permission check in Perfecto Plugin

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo