Maven vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2019-10411Lowcom.inedo.proget:inedo-proget: Jenkins Inedo BuildMaster Plugin showed plain text password in configuration formCVE-2019-10409Mediumhudson.plugins:project-inheritance: Missing permission check in Jenkins Project Inheritance PluginCVE-2019-10408Mediumhudson.plugins:project-inheritance: Jenkins Project Inheritance Plugin vulnerable to Cross-Site Request ForgeryCVE-2019-10412Lowcom.inedo.proget:inedo-proget: Jenkins Inedo ProGet Plugin Plugin has Cleartext Transmission of Sensitive InformationCVE-2019-10410Mediumorg.jenkins-ci.plugins:log-parser: Jenkins Log Parser Plugin vulnerable to Cross-site ScriptingCVE-2019-10754Highorg.apereo.cas:cas-server-support-simple-mfa: Use of Insufficiently Random Values in Apereo CASCVE-2019-12407Mediumorg.apache.jspwiki:jspwiki-war: Cross-site Scripting in Apache JSPWikiCVE-2019-16370Loworg.gradle:gradle-core: Use of a weak cryptographic algorithm in GradleCVE-2019-10399Mediumorg.jenkins-ci.plugins:script-security: Sandbox bypass vulnerability in Jenkins Script Security PluginCVE-2019-10398Loworg.jenkins-ci.plugins:beaker-builder: Jenkins Beaker Builder Plugin has Insufficiently Protected CredentialsCVE-2019-10394Mediumorg.jenkins-ci.plugins:script-security: Sandbox bypass vulnerability in Jenkins Script Security PluginCVE-2019-10395Mediumorg.jenkins-ci.plugins:build-environment: Jenkins Build Environment Plugin vulnerable to Cross-site ScriptingCVE-2019-10396Mediumorg.jenkins-ci.plugins:dashboard-view: Jenkins Dashboard View Plugin vulnerable to Cross-site ScriptingCVE-2019-10400Mediumorg.jenkins-ci.plugins:script-security: Sandbox bypass vulnerability in Jenkins Script Security PluginCVE-2019-10397Loworg.jenkins-ci.plugins:aqua-serverless: Jenkins Aqua Security Serverless Scanner Plugin showed plain text password in job configuration form fields CVE-2019-10393Mediumorg.jenkins-ci.plugins:script-security: Sandbox bypass vulnerability in Script Security PluginCVE-2019-10392Highorg.jenkins-ci.plugins:git-client: Improper Neutralization of Special Elements used in an OS Command in Jenkins Git Client PluginCVE-2019-16147Mediumcom.liferay:com.liferay.journal.taglib: Liferay Portal Vulnerable to Cross-Site Scripting (XSS) via a Journal Article TitleCVE-2019-15630Highorg.mule.runtime:mule: Mule modules contain Directory TraversalCVE-2019-10384Highorg.jenkins-ci.main:jenkins-core: Cross-Site Request Forgery in JenkinsCVE-2019-10391Mediumcom.hcl.security:ibm-application-security: Jenkins IBM AppScan Plugin showed plain text password in job configuration form fields CVE-2019-10390Highcom.splunk.splunkins:splunk-devops: Jenkins Splunk Plugin Sandbox BypassCVE-2019-10383Mediumorg.jenkins-ci.main:jenkins-core: Improper Neutralization of Input During Web Page Generation in JenkinsCVE-2019-15563Criticalorg.ohdsi:WebAPI: OHDSI WebAPI vulnerable to SQL InjectionCVE-2019-10388Mediumorg.jenkins-ci.plugins:relution-publisher: Relution Enterprise Appstore Publisher Jenkins Plugin contains Cross-Site Request Forgery

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo