Maven vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2016-0792Highorg.jenkins-ci.main:jenkins-core: Jenkins allows Deserialization of Untrusted Data via an XML File CVE-2016-0791Criticalorg.jenkins-ci.main:jenkins-core: Exposure of Sensitive Information in Jenkins Core CVE-2016-3721Mediumorg.jenkins-ci.main:jenkins-core: Jenkins allows Remote Users to Inject Build Parameters CVE-2016-3723Mediumorg.jenkins-ci.main:jenkins-core: Exposure of Sensitive Information in Jenkins Core CVE-2016-3724Mediumorg.jenkins-ci.main:jenkins-core: Jenkins Exposes Sensitive Information from Job Configuration CVE-2016-3725Mediumorg.jenkins-ci.main:jenkins-core: Missing permissions check in Jenkins Core CVE-2016-3722Mediumorg.jenkins-ci.main:jenkins-core: Incorrect Authorization in Jenkins Core CVE-2016-3726Highorg.jenkins-ci.main:jenkins-core: Jenkins affected by Open Redirect Vulnerability CVE-2016-3727Mediumorg.jenkins-ci.main:jenkins-core: Jenkins Exposes Sensitive Information via API URL CVE-2017-12630Mediumorg.apache.drill:drill-common: Apache Drill vulnerable to Cross-site Scripting CVE-2017-15700Highorg.apache.sling:org.apache.sling.auth.core: Apache Sling Authentication Service vulnerability CVE-2011-4858Mediumorg.apache.tomcat:tomcat: Improper Input Validation in Apache Tomcat CVE-2013-2186Highcommons-fileupload:commons-fileupload: Arbitrary file write in Apache Commons Fileupload CVE-2014-3607Mediumedu.vt.middleware:vt-ldap: Improper Certificate Validation in vt-ldap CVE-2017-12622Highorg.apache.geode:geode-core: Apache Geode gfsh authorization vulnerability CVE-2017-9796Mediumorg.apache.geode:geode-core: Apache Geode OQL bind parameter vulnerability CVE-2017-15717Mediumorg.apache.sling:org.apache.sling.xss: Cross-site Scripting in Apache Sling XSS Protection API CVE-2012-3353Highorg.apache.sling:org.apache.sling.jcr.contentloader: Apache Sling JCR ContentLoader XmlReader Arbitrary File Load CVE-2017-3158Highorg.apache.guacamole:guacamole-common: Apache Guacamole Race Condition vulnerability CVE-2018-1000008Highorg.jvnet.hudson.plugins:pmd: XXE vulnerability in Jenkins PMD Plugin CVE-2018-1000010Highorg.jvnet.hudson.plugins:dry: XXE vulnerability in Jenkins DRY Plugin CVE-2018-1000009Highorg.jvnet.hudson.plugins:checkstyle: XXE vulnerability in Jenkins Checkstyle Plugin CVE-2018-1000011Highorg.jvnet.hudson.plugins.findbugs:library: XML External Entity Reference in Jenkins FindBugs Plugin CVE-2018-1000013Highorg.jenkins-ci.plugins:release: CSRF vulnerability in Jenkins Release plugin CVE-2018-1000014Highorg.jenkins-ci.plugins:translation: CSRF vulnerability in Jenkins Translation Assistance plugin

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo