Maven vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2020-2111Mediumorg.jenkins-ci.plugins:subversion: Subversion Plugin stored XSS vulnerabilityCVE-2020-2112Mediumorg.jenkins-ci.tools:git-parameter: Jenkins Git Parameter Plugin vulnerable to Stored cross-site scripting (XSS)CVE-2020-2113Mediumorg.jenkins-ci.tools:git-parameter: Jenkins Git Parameter Plugin vulnerable to stored cross-site scripting (XSS)CVE-2020-2117Highorg.jenkins-ci.plugins:pipeline-githubnotify-step: Missing permission checks in Pipeline GitHub Notify Step Plugin allows capturing credentialsCVE-2020-2114Loworg.jenkins-ci.plugins:s3: Jenkins S3 Publisher Plugin transmits credentials in plain text during configurationCVE-2020-2118Mediumorg.jenkins-ci.plugins:pipeline-build-step: Users with Overall/Read access can enumerate credential IDs in Pipeline GitHub Notify Step PluginCVE-2020-2116Highorg.jenkins-ci.plugins:pipeline-githubnotify-step: CSRF vulnerability in Pipeline GitHub Notify Step Plugin allows capturing credentialsCVE-2020-2109Highorg.jenkins-ci.plugins.workflow:workflow-cps: Improper Input Validation in Jenkins Pipeline: Groovy PluginCVE-2020-2110Highorg.jenkins-ci.plugins:script-security: Improper Input Validation in Jenkins Script Security PluginCVE-2020-2107Mediumorg.jenkins-ci.plugins:fortify: Fortify Plugin stored credentials in plain textCVE-2020-2108Highorg.jenkins-ci.plugins:websphere-deployer: XXE vulnerability in Jenkins WebSphere Deployer PluginCVE-2020-2105Loworg.jenkins-ci.main:jenkins-core: Jenkins REST APIs vulnerable to clickjackingCVE-2020-2106Mediumio.jenkins.plugins:code-coverage-api: Stored XSS vulnerability in Code Coverage API PluginCVE-2020-2104Mediumorg.jenkins-ci.main:jenkins-core: Memory usage graphs accessible to anyone with Overall/ReadCVE-2020-2099Highorg.jenkins-ci.main:jenkins-core: Inbound TCP Agent Protocol/3 authentication bypass in JenkinsCVE-2020-2103Mediumorg.jenkins-ci.main:jenkins-core: Jenkins Diagnostic page exposed session cookiesCVE-2020-2102Mediumorg.jenkins-ci.main:jenkins-core: Non-constant time HMAC comparisonCVE-2020-2100Mediumorg.jenkins-ci.main:jenkins-core: Jenkins vulnerable to UDP amplification reflection attackCVE-2020-2101Mediumorg.jenkins-ci.main:jenkins-core: Non-constant time comparison of inbound TCP agent connection secretCVE-2020-7934Mediumcom.liferay.portal:release.portal.bom: Liferay Portal Vulnerable to Persistent Cross-Site Scripting (XSS) in MyAccountPortletCVE-2019-14888Highio.undertow:undertow-core: Undertow vulnerable to Uncontrolled Resource ConsumptionCVE-2020-2097Highorg.jenkins-ci.plugins:sounds: Missing permission checks in Jenkins Sounds Plugin allow OS command executionCVE-2020-2098Highorg.jenkins-ci.plugins:sounds: CSRF vulnerability in Jenkins Sounds Plugin allow OS command executionCVE-2020-2094Mediumorg.jenkins-ci.plugins:cloudbees-jenkins-advisor: Missing permission checks in Health Advisor by CloudBees PluginCVE-2020-2095Mediumcom.redgate.plugins.redgatesqlci:redgate-sql-ci: Redgate SQL Change Automation Plugin stored credentials in plain text

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo