Maven vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2020-1757Highio.undertow:undertow-core: Improper Input Validation in UndertowCVE-2020-2180Highio.jenkins.plugins:aws-sam: RCE vulnerability in Jenkins AWS SAM PluginCVE-2020-2177Mediumorg.fedoraproject.jenkins.plugins:copr: Credentials stored in plain text by Jenkins Copr PluginCVE-2020-2178Highcom.parasoft:parasoft-findings: XXE vulnerability in Jenkins Parasoft Findings PluginCVE-2020-2179Highorg.jenkins-ci.plugins:yaml-axis: RCE vulnerability in Jenkins Yaml Axis PluginCVE-2020-2174Mediumbr.com.ingenieux.jenkins.plugins:awseb-deployment-plugin: Reflected XSS vulnerability in Jenkins AWSEB Deployment PluginCVE-2020-2176Mediumit.infuse.jenkins:usemango-runner: XSS vulnerability in Jenkins useMango Runner PluginCVE-2020-2175Mediumorg.jenkins-ci.plugins:fitnesse: Stored XSS vulnerability in Jenkins FitNesse PluginCVE-2020-2172Highio.jenkins.plugins:code-coverage-api: XXE vulnerability in Jenkins Code Coverage API PluginCVE-2020-2173Mediumorg.jenkins-ci.plugins:gatling: XSS vulnerability in Jenkins Gatling PluginCVE-2019-17564Mediumorg.apache.dubbo:dubbo-rpc-http-invoker: Deserialization of Untrusted Data in Apache DubboCVE-2020-7009Highorg.elasticsearch:elasticsearch: Improper Privilege Management in ElasticsearchCVE-2020-7599Mediumcom.gradle.publish:plugin-publish-plugin: Exposure of Sensitive Information in Gradle publish pluginCVE-2019-17561Highorg.codehaus.mevenide:netbeans: Improper Verification of Cryptographic Signature in Apache NetbeansCVE-2020-2169Mediumorg.jenkins-ci.plugins:queue-cleanup: Reflected XSS vulnerability in Jenkins Queue cleanup PluginCVE-2020-2171Highorg.jenkins-ci.plugins:rapiddeploy-jenkins: XXE vulnerability in Jenkins RapidDeploy PluginCVE-2020-2168Highorg.jenkins-ci.plugins:azure-acs: RCE vulnerability in Jenkins Azure Container Service PluginCVE-2020-2163Mediumorg.jenkins-ci.main:jenkins-core: Improper Neutralization of Input During Web Page Generation in JenkinsCVE-2020-2170Mediumorg.jenkins-ci.plugins:rapiddeploy-jenkins: Stored XSS vulnerability in Jenkins RapidDeploy PluginCVE-2020-2164Loworg.jenkins-ci.plugins:artifactory: Passwords stored in plain text by Jenkins Artifactory PluginCVE-2020-2167Highcom.openshift.jenkins:openshift-pipeline: RCE vulnerability in Jenkins OpenShift Pipeline PluginCVE-2020-2161Mediumorg.jenkins-ci.main:jenkins-core: Improper Neutralization of Input During Web Page Generation in JenkinsCVE-2020-2165Loworg.jenkins-ci.plugins:artifactory: Passwords transmitted in plain text by Jenkins Artifactory PluginCVE-2020-2160Highorg.jenkins-ci.main:jenkins-core: Cross-Site Request Forgery in JenkinsCVE-2020-2166Highde.taimos:pipeline-aws: RCE vulnerability in Jenkins Pipeline: AWS Steps Plugin

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo