Maven vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2019-10378Loworg.jenkins-ci.plugins:testlink: Jenkins TestLink Plugin stores credentials in plain textCVE-2019-10387Mediumcom.xebialabs.xlt.ci:xltestview-plugin: Missing permission check in Jenkins XL TestView PluginCVE-2019-10379Mediumorg.jenkins-ci.plugins:gcm-notification: Jenkins Google Cloud Messaging Notification Plugin stores credentials in plain text CVE-2019-10380Highorg.jenkins-ci.plugins:simple-travis-runner: Jenkins Simple Travis Pipeline Runner Plugin script sandbox bypass vulnerabilityCVE-2019-10385Mediumorg.jenkins-ci.plugins:eggplant-plugin: Jenkins eggplant-plugin Plugin stores credentials in plain text CVE-2019-10373Mediumorg.jenkins-ci.plugins:build-pipeline-plugin: Jenkins Build Pipeline Plugin vulnerable to Cross-site ScriptingCVE-2019-10382Mediumorg.jenkins-ci.plugins:labmanager: Jenkins VMware Lab Manager Slaves Plugin vulnerable to Improper Certificate ValidationCVE-2019-10389Mediumorg.jenkins-ci.plugins:relution-publisher: Missing permission check in Jenkins Relution Enterprise Appstore Publisher Plugin CVE-2019-10386Highcom.xebialabs.xlt.ci:xltestview-plugin: Cross-site request forgery vulnerability in Jenkins XL TestView PluginCVE-2019-10374Mediumorg.jenkins-ci.plugins:pegdown-formatter: Jenkins PegDown Formatter Plugin has Cross-site Scripting vulnerabilityCVE-2019-10368Mediumorg.jenkins-ci.plugins:jclouds-jenkins: Jenkins JClouds Plugin cross-site request forgery vulnerabilityCVE-2019-10381Mediumorg.jenkins-ci.plugins:codefresh: Jenkins Codefresh Integration Plugin Improper Certificate Validation vulnerabilityCVE-2019-10369Mediumorg.jenkins-ci.plugins:jclouds-jenkins: Jenkins JClouds Plugin missing permission checkCVE-2019-10377Mediumnet.hurstfrost.jenkins:avatar: Missing permission check in Jenkins Avatar PluginCVE-2019-10372Mediumorg.jenkins-ci.plugins:gitlab-oauth: Jenkins Gitlab Authentication Plugin Open Redirect vulnerabilityCVE-2019-10370Mediumorg.jenkins-ci.plugins:mask-passwords: Insertion of Sensitive Information into Log File in Jenkins Mask Passwords PluginCVE-2019-10376Mediumorg.jenkins-ci.plugins:jenkinswalldisplay: Jenkins Wall Display Plugin Cross-site Scripting vulnerabilityCVE-2019-10375Mediumhudson.plugins.filesystem_scm:filesystem_scm: Arbitrary file read vulnerability in Jenkins File System SCM PluginCVE-2019-10371Highorg.jenkins-ci.plugins:gitlab-oauth: Jenkins Gitlab Authentication Plugin vulnerable to Session FixationCVE-2019-10367Mediumio.jenkins:configuration-as-code: Insertion of Sensitive Information into Log File in Jenkins Configuration as Code PluginCVE-2018-10899Highorg.jolokia:jolokia-core: Cross-Site Request Forgery in JolokiaCVE-2019-10366Mediumorg.jenkins-ci.plugins:skytap: Skytap Cloud CI Plugin stored credentials in plain text CVE-2019-10360Mediumorg.jenkins-ci.plugins.m2release:m2release: Jenkins Maven Release Plugin vulnerable to Cross-site ScriptingCVE-2019-10362Mediumio.jenkins:configuration-as-code: Improper Encoding or Escaping of Output in Jenkins Configuration as Code PluginCVE-2019-10364Mediumorg.jenkins-ci.plugins:ec2: Jenkins Amazon EC2 Plugin leaked beginning of private key in system log

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo