Maven vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2020-2092Highorg.jenkins-ci.plugins:robot: XXE vulnerability in Jenkins Robot Framework PluginCVE-2020-2096Mediumorg.jenkins-ci.ruby-plugins:gitlab-hook: Reflected XSS vulnerability in Jenkins gitlab-hook PluginCVE-2020-2093Mediumorg.jenkins-ci.plugins:cloudbees-jenkins-advisor: CSRF vulnerability in Health Advisor by CloudBees PluginCVE-2020-2091Mediumorg.jenkins-ci.plugins:ec2: Missing permission checks in Jenkins Amazon EC2 PluginCVE-2020-2090Loworg.jenkins-ci.plugins:ec2: CSRF vulnerability in Jenkins Amazon EC2 PluginCVE-2015-1811Highorg.jenkins-ci.main:jenkins-core: XML external entity (XXE) vulnerability in JenkinsCVE-2015-1809Highorg.jenkins-ci.main:jenkins-core: XML external entity (XXE) vulnerability in JenkinsCVE-2019-14837Criticalorg.keycloak:keycloak-core: keycloak vulnerable to unauthorized login via mail server setupCVE-2016-1000027Criticalorg.springframework:spring-web: Pivotal Spring Framework contains unsafe Java deserialization methodsCVE-2019-6035Mediumcom.yahoo.athenz:athenz: Athenz vulnerable to Open RedirectCVE-2019-16575Highio.alauda.jenkins.plugins:alauda-kubernetes-support: Cross-Site Request Forgery in Jenkins Alauda Kubernetes Suport PluginCVE-2019-16574Mediumcom.alauda.jenkins.plugins:alauda-devops-pipeline: Jenkins Alauda DevOps Pipeline Plugin allows attackers with Overall/Read permission to capture credentials stored in JenkinsCVE-2019-16576Mediumio.alauda.jenkins.plugins:alauda-kubernetes-support: Improper Authorization in Jenkins Alauda Kubernetes Suport PluginCVE-2019-16572Loworg.jenkins-ci.plugins:weibo: Jenkins Weibo Plugin stores credentials unencrypted in its global configuration fileCVE-2019-16568Mediumhudson.plugins.sctmexecutor:SCTMExecutor: Jenkins SCTMExecutor Plugin stores credentials in plain text CVE-2019-16571Mediumorg.jenkins-ci.plugins:rapiddeploy-jenkins: Jenkins RapidDeploy Plugin missing permission checkCVE-2019-16569Mediumorg.jenkins-ci.plugins:mantis: CSRF vulnerability in Jenkins Mantis Plugin CVE-2019-16563Mediumtech.andrey.jenkins:mission-control-view: Cross site scripting in Jenkins Mission Control PluginCVE-2019-16573Highcom.alauda.jenkins.plugins:alauda-devops-pipeline: Jenkins Alauda DevOps Pipeline Plugin vulnerable to cross-site request forgeryCVE-2019-16567Mediumorg.jenkins-ci.plugins:teamconcert: Jenkins Team Concert Plugin missing permission checkCVE-2019-16566Highorg.jenkins-ci.plugins:teamconcert: Jenkins Team Concert Plugin missing permission checkCVE-2019-16564Mediumcom.paul8620.jenkins.plugins:pipeline-aggregator-view: Jenkins Pipeline Aggregator View Plugin stored XSS vulnerabilityCVE-2019-16570Mediumorg.jenkins-ci.plugins:rapiddeploy-jenkins: Jenkins RapidDeploy Plugin Cross-Site Request Forgery pluginCVE-2019-16565Highorg.jenkins-ci.plugins:teamconcert: Jenkins Team Concert Plugin cross-site request forgery vulnerabilityCVE-2019-16561Highorg.jenkins-ci.plugins:websphere-deployer: SSL/TLS certificate validation globally and unconditionally disabled by Jenkins WebSphere Deployer Plugin

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo