Maven vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2017-1000361Highorg.opendaylight.controller:releasepom: OpenDaylight Controller DoS CVE-2017-1000245Criticalorg.jvnet.hudson.plugins:ssh: Jenkins SSH Plugin user passwords for encrypted SSH keys stored in plaintext CVE-2017-1000221Mediumorg.opencastproject:opencast-kernel: Opencast has Incorrect Permission Assignment CVE-2017-1000106Highio.jenkins.blueocean:blueocean: Improper Authentication in Jenkins Blue Ocean Plugin CVE-2017-1000107Highorg.jenkins-ci.plugins:script-security: Sandbox bypass in Jenkins Script Security Plugin sandbox bypass CVE-2017-1000084Mediumorg.jenkins-ci.plugins:parameterized-trigger: Parameterized Trigger Plugin fails to check Item/Build permission CVE-2017-1000110Mediumio.jenkins.blueocean:blueocean: Improper Authentication in Jenkins Blue Ocean Plugin CVE-2017-1000104Mediumorg.jenkins-ci.plugins:config-file-provider: Improper Privilege Management in Jenkins Config File Provider Plugin CVE-2017-1000096Highorg.jenkins-ci.plugins.workflow:workflow-cps: Arbitrary code execution due to incomplete sandbox protection in Jenkins Pipeline CVE-2017-1000095Mediumorg.jenkins-ci.plugins:script-security: Unsafe methods in the default list of approved signatures in Jenkins Script Security Plugin CVE-2017-1000089Mediumorg.jenkins-ci.plugins:pipeline-build-step: Jenkins Build Step Plugin fails to check Item/Build permission CVE-2011-1483Loworg.jboss.ws:jbossws-common: JBossWS vulnerable to uncontrolled recursion CVE-2016-0750Highorg.infinispan:infinispan-core: Infinispan: Deserialization of untrusted data in the Hot Rod Java client via automatic byte-array deserialization CVE-2016-9589Highorg.wildfly:wildfly-undertow: Red Hat Wildfly DoS CVE-2017-12159Highorg.keycloak:keycloak-parent: Keycloak CSRF Vulnerability CVE-2017-12158Mediumorg.keycloak:keycloak-parent: Keycloak Reflected XSS CVE-2017-12165Highio.undertow:undertow-core: Undertow Request Smuggling vulnerability CVE-2017-12197Mediumorg.kohsuke:libpam4j: Improper Input Validation in libpam4j CVE-2017-12196Mediumio.undertow:undertow-core: Incorrect Authorization in Undertow CVE-2017-2602Mediumorg.jenkins-ci.main:jenkins-core: Incomplete List of Disallowed Inputs in Jenkins CVE-2017-2598Mediumorg.jenkins-ci.main:jenkins-core: Inadequate Encryption Strength in Jenkins CVE-2017-2600Mediumorg.jenkins-ci.main:jenkins-core: Exposure of Sensitive Information to an Unauthorized Actor in Jenkins CVE-2017-2594Highio.hawt:project: Path Traversal in io.hawt:project CVE-2017-2589Criticalio.hawt:project: Insecure cookie sharing in Hawtio CVE-2017-2603Loworg.jenkins-ci.main:jenkins-core: Exposure of Sensitive Information to an Unauthorized Actor in Jenkins

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Browse by ecosystem

Stop the waste.Protect your environment with Kodem.

Stop the waste.
Protect your environment with Kodem.