Maven vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2019-10363Mediumio.jenkins:configuration-as-code: Cleartext Transmission of Sensitive Information in Jenkins Configuration as Code PluginCVE-2019-10365Mediumorg.jenkins-ci.plugins:google-kubernetes-engine: Jenkins Google Kubernetes Engine Plugin vulnerable to Exposure of Resource to Wrong SphereCVE-2019-10361Loworg.jenkins-ci.plugins.m2release:m2release: Jenkins Maven Release Plug-in Plugin stored credentials in plain textCVE-2019-10359Mediumorg.jenkins-ci.plugins.m2release:m2release: Jenkins Maven Release Plugin contains Cross-Site Request Forgery vulnerabilityCVE-2019-10355Highorg.jenkins-ci.plugins:script-security: Incorrect Privilege Assignment in Jenkins Script Security PluginCVE-2019-10344Mediumio.jenkins:configuration-as-code: Missing Authorization in Jenkins Configuration as Code PluginCVE-2019-10358Mediumorg.jenkins-ci.main:maven-plugin: Maven Integration Plugin did not mask sensitive values in module build logsCVE-2019-10356Highorg.jenkins-ci.plugins:script-security: Return of Pointer Value Outside of Expected Rang in Jenkins Script Security PluginCVE-2019-10357Mediumorg.jenkins-ci.plugins.workflow:workflow-cps-global-lib: Missing Authorization in Jenkins Pipeline: Shared Groovy Libraries PluginCVE-2019-10345Mediumio.jenkins:configuration-as-code: Plaintext Storage of a Password in Jenkins Configuration as Code PluginCVE-2019-10343Mediumio.jenkins:configuration-as-code: Insertion of Sensitive Information into Log File in Jenkins Configuration as Code PluginCVE-2019-7614Mediumorg.elasticsearch:elasticsearch: Concurrent Execution using Shared Resource with Improper Synchronization in ElasticsearchCVE-2019-0202Highorg.apache.storm:storm-core: Exposure of Sensitive Information in Apache Storm LogviewerCVE-2019-1010241Mediumorg.jenkins-ci.plugins:credentials-binding: Jenkins Credentials Binding Plugin Stores Passwords in a Recoverable FormatCVE-2019-10354Mediumorg.jenkins-ci.main:jenkins-core: Missing Authorization in JenkinsCVE-2019-10352Mediumorg.jenkins-ci.main:jenkins-core: Improper Limitation of a Pathname to a Restricted Directory in JenkinsCVE-2019-10353Highorg.jenkins-ci.main:jenkins-core: Cross-Site Request Forgery in JenkinsCVE-2019-10351Mediumcom.brianfromoregon:caliper-ci: Jenkins Caliper CI Plugin stores credentials in plain textCVE-2019-10350Mediumorg.jenkins-ci.plugins:port-allocator: Jenkins Port Allocator Plugin stores credentials in plain textCVE-2019-10348Mediumorg.jenkins-ci.plugins:gogs-webhook: Jenkins Gogs Plugin stored credentials in plain textCVE-2019-10349Mediumorg.jenkins-ci.plugins:depgraph-view: Jenkins Dependency Graph Viewer Plugin contains Cross-site ScriptingCVE-2019-10342Mediumio.jenkins.docker:docker-plugin: Missing permission check in Jenkins Docker PluginCVE-2019-10340Highio.jenkins.docker:docker-plugin: Jenkins Docker Plugin contains Cross-Site Request ForgeryCVE-2019-10346Mediumio.jenkins.plugins:embeddable-build-status-plugin: Jenkins Embeddable Build Status Plugin contains Cross-site ScriptingCVE-2019-10341Mediumio.jenkins.docker:docker-plugin: Missing permission check in Jenkins Docker Plugin

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo