Maven vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2018-1000170Mediumorg.jenkins-ci.main:jenkins-core: Cross-site Scripting in Jenkins Core CVE-2018-1000407Mediumorg.jenkins-ci.main:jenkins-core: Cross-site Scripting in Jenkins CVE-2018-1000406Mediumorg.jenkins-ci.main:jenkins-core: Path Traversal in Jenkins CVE-2017-1000504Highorg.jenkins-ci.main:jenkins-core: Cross-Site Request Forgery in Jenkins CVE-2018-1000410Highorg.jenkins-ci.main:jenkins-core: Exposure of Sensitive Information to an Unauthorized Actor in Jenkins CVE-2017-1000399Mediumorg.jenkins-ci.main:jenkins-core: Exposure of Sensitive Information to an Unauthorized Actor in Jenkins CVE-2017-1000398Mediumorg.jenkins-ci.main:jenkins-core: Exposure of Sensitive Information to an Unauthorized Actor in Jenkins CVE-2017-1000401Loworg.jenkins-ci.main:jenkins-core: Improper Input Validation in Jenkins CVE-2017-1000395Mediumorg.jenkins-ci.main:jenkins-core: Exposure of Sensitive Information to an Unauthorized Actor in Jenkins CVE-2017-1000396Mediumorg.jenkins-ci.main:jenkins-core: Improper Certificate Validation in Jenkins CVE-2018-1000997Mediumorg.jenkins-ci.main:jenkins-core: Improper Limitation of a Pathname to a Restricted Directory in Jenkins CVE-2017-1000394Highorg.jenkins-ci.main:jenkins-core: Improper Input Validation in Jenkins CVE-2017-1000392Mediumorg.jenkins-ci.main:jenkins-core: Improper Neutralization of Input During Web Page Generation in Jenkins CVE-2017-1000393Highorg.jenkins-ci.main:jenkins-core: OS Command Injection in Jenkins CVE-2017-1000391Highorg.jenkins-ci.main:jenkins-core: Improper Input Validation in Jenkins CVE-2016-3110Highorg.jboss.mod_cluster:mod_cluster-parent: mod_cluster Denial of Service vulnerability CVE-2016-6346Highorg.jboss.resteasy:resteasy-jaxrs: Denial of service in JBoss resteasy CVE-2018-1000074Highrubygems-update: RubyGems Deserialization of Untrusted Data vulnerability CVE-2018-1000076Criticalrubygems-update: RubyGems Improper Verification of Cryptographic Signature vulnerability CVE-2018-1000078Mediumrubygems-update: RubyGems Cross-site Scripting vulnerability CVE-2018-1000077Mediumrubygems-update: RubyGems Improper Input Validation vulnerability CVE-2016-9299Criticalorg.jenkins-ci.main:jenkins-core: Improper Neutralization of Special Elements used in an LDAP Query in Jenkins CVE-2017-1000244Highorg.jvnet.hudson.plugins:favorite: Jenkins Favorite Plugin vulnerable to Cross-Site Request Forgery CVE-2017-12633Criticalorg.apache.camel:camel-hessian: Apache Camel camel-hessian component vulnerable to Java object deserialization CVE-2017-15089Highorg.infinispan:infinispan-core: Deserialization of Untrusted Data in Infinispan

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo