Maven vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2020-2218Loworg.jenkins-ci.plugins:hp-quality-center: Password stored in plain text by Jenkins HP ALM Quality Center PluginCVE-2020-2214Mediumcom.vrondakis.zap:zap-pipeline: Content-Security-Policy protection for user content disabled by Jenkins ZAP Pipeline PluginCVE-2020-2215Mediumorg.jenkins-ci.plugins:zephyr-for-jira-test-management: CSRF vulnerability in Jenkins Zephyr for JIRA Test Management PluginCVE-2020-2217Mediumorg.jenkins-ci.plugins:compatibility-action-storage: Reflected XSS in Jenkins Compatibility Action Storage PluginCVE-2020-2216Mediumorg.jenkins-ci.plugins:zephyr-for-jira-test-management: Missing permission checks in Zephyr for JIRA Test Management PluginCVE-2020-2219Mediumorg.jenkins-ci.plugins:link-column: Stored XSS vulnerability in Jenkins Link Column PluginCVE-2020-2211Highcom.elasticbox.jenkins-ci.plugins:kubernetes-ci: RCE vulnerability in ElasticBox Jenkins Kubernetes CI/CD PluginCVE-2020-2206Mediumorg.jenkins-ci.plugins:vncrecorder: Reflected XSS vulnerability in Jenkins VncRecorder PluginCVE-2020-2208Mediumorg.jenkins-ci.plugins:slack-uploader: Secret stored in plain text by Jenkins Slack Upload PluginCVE-2020-2212Mediumio.jenkins.plugins:github-coverage-reporter: Secret stored in plain text by Jenkins GitHub Coverage Reporter PluginCVE-2020-2213Mediumorg.jenkins-ci.plugins:whitesource: Credentials stored in plain text by Jenkins White Source PluginCVE-2020-2210Loworg.jenkins-ci.plugins:StashBranchParameter: Passwords transmitted in plain text by Jenkins Stash Branch Parameter PluginCVE-2020-2209Mediumorg.jenkins-ci.plugins:TestComplete: Password stored in plain text by Jenkins TestComplete support PluginCVE-2020-2204Mediumorg.jenkins-ci.plugins:fortify-on-demand-uploader: Missing permission checks in Jenkins Fortify on Demand PluginCVE-2020-2207Mediumorg.jenkins-ci.plugins:vncviewer: Reflected XSS vulnerability in Jenkins VncViewer PluginCVE-2020-2202Mediumorg.jenkins-ci.plugins:fortify-on-demand-uploader: Users with Overall/Read access could enumerate credentials IDs in Jenkins Fortify on Demand PluginCVE-2020-2205Mediumorg.jenkins-ci.plugins:vncrecorder: Stored XSS vulnerability in Jenkins VncRecorder PluginCVE-2020-2201Mediumorg.jenkins-ci.plugins:sonargraph-integration: Stored XSS vulnerability in Jenkins Sonargraph Integration PluginCVE-2020-2203Mediumorg.jenkins-ci.plugins:fortify-on-demand-uploader: CSRF vulnerability in Jenkins Fortify on Demand PluginCVE-2020-10727Mediumorg.apache.activemq:artemis-commons: ActiveMQ Artemis has Insufficiently Protected CredentialsCVE-2020-10740Highorg.wildfly:wildfly-parent: Wildfly Unsafe Deserialization VulnerabilityCVE-2020-5411Highorg.springframework.batch:spring-batch-core: Deserialization of Untrusted Data in Spring BatchCVE-2020-13445Highcom.liferay.portal:release.portal.bom: Liferay Portal and Liferay DXP Vulnerable to Arbitrary Code ExecutionCVE-2020-13444Mediumcom.liferay.portal:release.portal.bom: Liferay Portal and Liferay DXP Fails to Sanitize API DataCVE-2020-2192Mediumorg.jenkins-ci.plugins:swarm: CSRF vulnerability in Jenkins Swarm Plugin

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo