Maven vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2020-2199Mediumorg.jenkins-ci.plugins:svn-partial-release-mgr: XSS vulnerability in Jenkins Subversion Partial Release Manager PluginCVE-2020-2200Highorg.jenkins-ci.plugins:play-autotest-plugin: OS command injection vulnerability in Jenkins Play Framework PluginCVE-2020-2197Mediumhudson.plugins:project-inheritance: Missing permission check in Jenkins Project Inheritance PluginCVE-2020-2198Mediumhudson.plugins:project-inheritance: Missing permission check in Jenkins Project Inheritance PluginCVE-2020-2194Mediumio.jenkins.plugins:echarts-api: Stored XSS vulnerability in Jenkins ECharts API PluginCVE-2020-2193Mediumio.jenkins.plugins:echarts-api: Stored XSS vulnerability in Jenkins ECharts API PluginCVE-2020-2196Highorg.jenkins-ci.plugins:selenium: Complete lack of CSRF protection in Jenkins Selenium Plugin can lead to OS command injectionCVE-2020-2191Mediumorg.jenkins-ci.plugins:swarm: Improper permission checks in Jenkins Swarm PluginCVE-2020-2190Mediumorg.jenkins-ci.plugins:script-security: Improper Neutralization of Input During Web Page Generation in Jenkins Script Security PluginCVE-2020-2195Mediumorg.jenkins-ci.plugins:compact-columns: Stored XSS vulnerability in Jenkins Compact Columns PluginCVE-2020-13226Criticalorg.wso2.am:am-parent: WSO2 API Manager vulnerable to SSRFCVE-2020-1724Mediumorg.keycloak:keycloak-core: Keycloak Insufficient Session ExpiryCVE-2020-1698Mediumorg.keycloak:keycloak-core: Keycloak leaks sensitive information in logged exceptionsCVE-2020-12760Highorg.opennms.core:org.opennms.core.daemon: OpenNMS Horizon RCE via Unsafe DeserializationCVE-2020-2187Mediumorg.jenkins-ci.plugins:ec2: Lack of SSL/TLS certificate and hostname validation in Amazon EC2 PluginCVE-2020-2186Loworg.jenkins-ci.plugins:ec2: CSRF vulnerability in Amazon EC2 PluginCVE-2020-2181Mediumorg.jenkins-ci.plugins:credentials-binding: Secrets are not masked by Jenkins Credentials Binding Plugin in builds without build stepsCVE-2020-2184Mediumorg.jenkins-ci.plugins:cvs: CSRF vulnerability in Jenkins CVS PluginCVE-2020-2185Mediumorg.jenkins-ci.plugins:ec2: Missing SSH host key validation in Jenkins Amazon EC2 PluginCVE-2020-2183Mediumorg.jenkins-ci.plugins:copyartifact: Improper permission checks in Jenkins Copy Artifact PluginCVE-2020-2189Highio.jenkins.plugins:scm-filter-jervis: RCE vulnerability in SCM Filter Jervis PluginCVE-2020-2188Mediumorg.jenkins-ci.plugins:ec2: Users with Overall/Read access can enumerate credentials IDs in Amazon EC2 PluginCVE-2020-2182Loworg.jenkins-ci.plugins:credentials-binding: Improper masking of some secrets in Jenkins Credentials Binding PluginCVE-2020-10686Mediumorg.keycloak:keycloak-core: Keycloak users may be able to remove MFA from other users' devicesCVE-2020-1745Highio.undertow:undertow-core: Improper Authorization in Undertoe

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo