Maven vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2019-14832Highorg.keycloak:keycloak-model-infinispan: Keycloak Unauthenticated AccessCVE-2019-14838Mediumorg.wildfly.core:wildfly-host-controller: Wildfly Authorization MisconfigurationCVE-2019-16891Criticalcom.liferay.portal:release.portal.bom: Liferay Portal Allows RCE via Deserialization of a JSON PayloadCVE-2019-11932Highpl.droidsonroids.gif:android-gif-drawable: android-gif-drawable Double Free vulnerabilityCVE-2019-17091Mediumorg.glassfish:javax.faces: Cross-site Scripting in Eclipse MojarraCVE-2019-10431Criticalorg.jenkins-ci.plugins:script-security: Improper Control of Generation of Code in Jenkins Script Security PluginCVE-2019-10432Mediumorg.jenkins-ci.plugins:htmlpublisher: Jenkins HTML Publisher Plugin vulnerable to Cross-site ScriptingCVE-2019-10435Highorg.jenkins-ci.plugins:vault-scm-plugin: Jenkins SourceGear Vault plugin transmits credentials in plain textCVE-2019-10434Lowcom.mtvi.plateng.hudson:ldapemail: Jenkins LDAP Email Plugin shows plain text password in configuration form CVE-2019-10433Lowio.jenkins.plugins:dingding-notifications: DingTalk Plugin stores credentials in plain textCVE-2019-0231Highorg.apache.mina:mina-core: Cleartext Transmission of Sensitive Information in Apache MINACVE-2019-10202Criticalorg.codehaus.jackson:jackson-mapper-asl: Deserialization of Untrusted Data in org.codehaus.jackson:jackson-mapper-aslCVE-2019-10424Lowcom.technicolor:elOyente: Jenkins elOyente Plugin has Insufficiently Protected CredentialsCVE-2019-10425Mediumorg.jenkins-ci.plugins:gcal: Jenkins Google Calendar Plugin has Insufficiently Protected CredentialsCVE-2019-10422Mediumorg.ukiuni.callOtherJenkins:call-remote-job-plugin: Jenkins Call Remote Job Plugin has Insufficiently Protected CredentialsCVE-2019-10420Loworg.jenkins-ci.plugins:assembla: Jenkins Assembla Plugin has Insufficiently Protected CredentialsCVE-2019-10423Lowcom.villagechief.codescan.jenkins:codescan: Jenkins CodeScan Plugin has Insufficiently Protected CredentialsCVE-2019-10419Loworg.jenkins-ci.plugins:application-director-plugin: Jenkins vFabric Application Director Plugin Insufficiently Protected CredentialsCVE-2019-10414Mediumde.wellnerbou.jenkins:git-changelog: Jenkins Git Changelog Plugin has Insufficiently Protected CredentialsCVE-2019-10417Criticalio.fabric8.pipeline:kubernetes-pipeline-steps: Incorrect Authorization in Jenkins Kubernetes :: Pipeline :: Kubernetes Steps PluginCVE-2019-10421Mediumorg.jenkins-ci.plugins:azure-event-grid-notifier: Jenkins Azure Event Grid Build Notifier Plugin has Insufficiently Protected CredentialsCVE-2019-10416Mediumorg.jenkins-ci.plugins:violation-comments-to-gitlab: Violation Comments to GitLab Plugin has Insufficiently Protected CredentialsCVE-2019-10418Criticalio.fabric8.pipeline:kubernetes-pipeline-arquillian-steps: Incorrect Authorization in Jenkins Kubernetes :: Pipeline :: Arquillian Steps PluginCVE-2019-10415Mediumorg.jenkins-ci.plugins:violation-comments-to-gitlab: Jenkins Violation Comments to GitLab Plugin has Insufficiently Protected CredentialsCVE-2019-10413Mediumcom.datatheorem.mobileappsecurity.jenkins.plugin:datatheorem-mobile-app-security: Jenkins Data Theorem Mobile Security: CI/CD Plugin has Insufficiently Protected Credentials

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo