Maven vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2022-25762Highorg.apache.tomcat:tomcat: Improper socket reuse in Apache TomcatCVE-2014-0193Mediumio.netty:netty: Netty denial of service vulnerabilityCVE-2018-8036Mediumorg.apache.pdfbox:pdfbox: Loop with Unreachable Exit Condition in Apache PDFBoxCVE-2018-8028Highorg.apache.sentry:sentry: Apache Sentry may allow attacker to access/remove data from Sentry protected tableCVE-2018-8016Criticalorg.apache.cassandra:cassandra-all: Missing Authentication for Critical Function in Apache CassandraCVE-2018-3258Highmysql:mysql-connector-java: Improper Privilege Management in MySQL Connectors JavaCVE-2018-1999047Mediumorg.jenkins-ci.main:jenkins-core: Incorrect Authorization in JenkinsCVE-2018-1999036Loworg.jenkins-ci.plugins:ssh-agent: Jenkins SSH Agent Plugin exposes SSH private key password to users with permission to read the build logCVE-2018-1999043Highorg.jenkins-ci.main:jenkins-core: Missing Release of Resource after Effective Lifetime in JenkinsCVE-2018-1999028Highorg.jenkins-ci.plugins:accurev: Jenkins Accurev Plugin CSRF vulnerability and missing permission checksCVE-2018-1999040Highorg.csanchez.jenkins.plugins:kubernetes: Exposure of Sensitive Information in Jenkins Kubernetes PluginCVE-2018-1999044Mediumorg.jenkins-ci.main:jenkins-core: Infinite Loop in Jenkins CoreCVE-2018-1999032Mediumorg.jenkins-ci.plugins:pangolin-testrail-connector: Jenkins Agiletestware Pangolin Connector for TestRail Plugin CSRF vulnerability and missing permission checksCVE-2018-1999030Mediumorg.jenkins-ci.plugins:maven-artifact-choicelistprovider: Jenkins Maven Artifact ChoiceListProvider (Nexus) Plugin CSRF vulnerability and missing permission checksCVE-2018-1340Highorg.apache.guacamole:guacamole-common: Missing Encryption of Sensitive Data in Apache GuacamoleCVE-2018-12972Criticalnet.opentsdb:opentsdb: OpenTSDB vulnerable to OS Command InjectionCVE-2018-1297Criticalorg.apache.jmeter:ApacheJMeter: Missing certificate validation in Apache JMeterCVE-2018-1287Criticalorg.apache.jmeter:ApacheJMeter: Missing certificate validation in Apache JMeterCVE-2018-1286Mediumorg.apache.openmeetings:openmeetings-parent: Apache OpenMeetings may allow authenticated attacker to deny service for privileged usersCVE-2018-11047Highorg.cloudfoundry.identity:cloudfoundry-identity-server: Cloud Foundry UAA accepts refresh token as access token on admin endpointsCVE-2018-1000865Highorg.jenkins-ci.plugins:script-security: Improper Privilege Management in JenkinsCVE-2018-1000866Highorg.jenkins-ci.plugins.workflow:workflow-cps: Jenkins Script Security and Pipeline Groovy Plugins Sandbox BypassCVE-2018-1000864Mediumorg.jenkins-ci.main:jenkins-core: Loop with Unreachable Exit Condition in JenkinsCVE-2018-1000610Highio.jenkins:configuration-as-code: Jenkins Configuration as Code Plugin has Insufficiently Protected CredentialsCVE-2018-1000817Highorg.grails.plugins:asset-pipeline: Asset Pipeline Grails Plugin vulnerable to Path Traversal

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo