Maven vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2022-1782Criticalcom.erudika:para-core: Cross-site Scripting in com.erudika:para-coreCVE-2022-26650Highorg.apache.shenyu:shenyu: Regular expression denial of service in Apache ShenYuCVE-2022-30970Highorg.jenkins-ci.plugins:autocomplete-parameter: Cross-site Scripting in Jenkins Autocomplete Parameter PluginCVE-2022-30972Highorg.jvnet.hudson.plugins:storable-configs-plugin: Cross Site Request Forgery in Jenkins Storable Configs PluginCVE-2022-30969Highorg.jenkins-ci.plugins:autocomplete-parameter: Cross-Site Request Forgery in Jenkins Autocomplete Parameter PluginCVE-2022-30971Highorg.jvnet.hudson.plugins:storable-configs-plugin: XML External Entity Reference in Jenkins Storable Configs PluginCVE-2022-30960Highorg.jenkins-ci.plugins:app-detector: Cross-site Scripting in Jenkins Application Detector PluginCVE-2022-30965Highorg.jenkins-ci.plugins:promoted-builds-simple: Stored Cross-site Scripting vulnerabilities in Jenkins promoted Builds (Simple) plugin providing additional parameter typesCVE-2022-30966Mediumorg.jenkins-ci.plugins:random-string-parameter: Cross-site Scripting in Jenkins Random String Parameter PluginCVE-2022-30968Highorg.jenkins-ci.plugins:vboxwrapper: Cross-site Scripting in Jenkins vboxwrapper PluginCVE-2022-30967Highorg.jvnet.hudson.plugins:selection-tasks-plugin: Cross site scripting in Jenkins Selection tasks PluginCVE-2022-30963Highorg.jenkins-ci.plugins:JDK_Parameter_Plugin: Cross-site Scripting in Jenkins JDK Parameter PluginCVE-2022-30964Highio.jenkins.plugins:multiselect-parameter: Cross-site Scripting in Jenkins Multiselect parameter PluginCVE-2022-30962Highorg.jenkins-ci.plugins:global-variable-string-parameter: Cross-site Scripting in Jenkins Global Variable String Parameter PluginCVE-2022-30961Highorg.jenkins-ci.plugins:autocomplete-parameter: Cross-site Scripting in Jenkins Autocomplete Parameter PluginCVE-2022-30954Mediumio.jenkins.blueocean:blueocean-parent: Missing permission check in Jenkins Blue Ocean PluginCVE-2022-30958Highorg.jenkins-ci.plugins:ssh: Cross Site Request Forgery in Jenkins SSH PluginCVE-2022-30957Mediumorg.jenkins-ci.plugins:ssh: Missing permission check in Jenkins SSH PluginCVE-2022-30959Highorg.jenkins-ci.plugins:ssh: Missing Authorization in Jenkins SSH pluginCVE-2022-30951Mediumorg.jenkins-ci.plugins:windows-slaves: Missing Authorization in Jenkins WMI Windows Agents pluginCVE-2022-30949Loworg.jenkins-ci.plugins:repo: Path traversal in Jenkins REPO PluginCVE-2022-30952Mediumio.jenkins.blueocean:blueocean-pipeline-scm-api: Insufficiently Protected Credentials in Jenkins Pipeline SCM API for Blue Ocean PluginCVE-2022-30956Highorg.jenkins-ci.plugins:rundeck: Cross-site Scripting in Jenkins Rundeck PluginCVE-2022-30953Mediumio.jenkins.blueocean:blueocean-parent: Cross Site Request Forgery in Jenkins Blue Ocean PluginCVE-2022-30955Mediumorg.jenkins-ci.plugins:gitlab-plugin: Missing permission check in Jenkins GitLab Plugin

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo