Maven vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2020-2256Highorg.jenkins-ci.plugins:pipeline-maven: Stored XSS vulnerability in Pipeline Maven Integration Plugin via unescaped display nameCVE-2020-2259Highjenkins.ci.plugins.computerqueue:computer-queue-plugin: Stored XSS vulnerability in computer-queue-plugin PluginCVE-2020-2263Highorg.jenkins-ci.plugins:radiatorviewplugin: Stored XSS vulnerability in Radiator View PluginCVE-2020-2258Mediumorg.jenkins-ci.plugins:cloudbees-jenkins-advisor: Incorrect permission check in Health Advisor by CloudBees PluginCVE-2020-2257Highorg.jenkins-ci.plugins:validating-string-parameter: Stored XSS vulnerability in Validating String Parameter PluginCVE-2020-2262Highorg.jvnet.hudson.plugins:android-lint: Stored XSS vulnerability in android-lint PluginCVE-2020-2252Mediumorg.jenkins-ci.plugins:mailer: Improper Validation of Certificate with Host Mismatch in Jenkins Mailer PluginCVE-2020-2255Mediumio.jenkins.blueocean:blueocean: Missing permission check in Blue Ocean PluginCVE-2020-2254Mediumio.jenkins.blueocean:blueocean: Path traversal vulnerability in Blue Ocean PluginCVE-2020-2253Mediumorg.jenkins-ci.plugins:email-ext: Missing hostname validation in Email Extension PluginCVE-2019-0233Highorg.apache.struts:struts2-core: Improper Preservation of Permissions in Apache StrutsCVE-2020-23814Mediumcom.xuxueli:xxl-job: xxl-job Multiple cross-site scripting (XSS) vulnerabilitiesCVE-2020-23811Highcom.xuxueli:xxl-job: xxl-job sensitive data exposureCVE-2020-2243Highorg.jenkins-ci.plugins:vmanager-plugin: Stored XSS vulnerability in Jenkins Cadence vManager PluginCVE-2020-2250Mediumorg.jenkins-ci.plugins:soapui-pro-functional-testing: Passwords stored in plain text by Jenkins ReadyAPI Functional Testing PluginCVE-2020-2244Highcom.sonyericsson.jenkins.plugins.bfa:build-failure-analyzer: XSS vulnerability in Jenkins Build Failure Analyzer PluginCVE-2020-2251Mediumorg.jenkins-ci.plugins:soapui-pro-functional-testing: Passwords transmitted in plain text by Jenkins ReadyAPI Functional Testing PluginCVE-2020-2247Highorg.jenkins-ci.plugins:klocwork: XXE vulnerability in Jenkins Klocwork Analysis PluginCVE-2020-2248Highorg.jenkins-ci.plugins:jsgames: Reflected XSS vulnerability in Jenkins JSGames PluginCVE-2020-2245Highorg.jenkins-ci.plugins:valgrind: XXE vulnerability in Jenkins Valgrind PluginCVE-2020-2242Mediumorg.jenkins-ci.plugins:database: Missing permission checks in Jenkins Database PluginCVE-2020-2249Loworg.jenkins-ci.plugins:tfs: Credentials stored in plain text by Jenkins tfs PluginCVE-2020-2246Highorg.jenkins-ci.plugins:valgrind: Stored XSS vulnerability in Jenkins Valgrind PluginCVE-2020-2240Highorg.jenkins-ci.plugins:database: CSRF vulnerability in Jenkins Database PluginCVE-2020-2241Mediumorg.jenkins-ci.plugins:database: CSRF vulnerability in Jenkins Database Plugin

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo