Maven vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2019-1003084Mediumorg.jenkins-ci.plugins:zephyr-enterprise-test-management: CSRF vulnerability in Zephyr Enterprise Test Management Plugin CVE-2019-1003082Mediumorg.jenkins-ci.plugins:gearman-plugin: CSRF vulnerability in Jenkins Gearman Plugin CVE-2019-1003086Mediumorg.jenkins-ci.plugins:sinatra-chef-builder: CSRF vulnerability in Jenkins sinatra-chef-builder Plugin CVE-2015-3253Criticalorg.codehaus.groovy:groovy: Improper Neutralization of Special Elements in Output Used by a Downstream Component in Apache Groovy CVE-2019-1003090Mediumcom.soasta.jenkins:cloudtest: CSRF vulnerability in Jenkins SOASTA CloudTest Plugin CVE-2019-1003098Mediumorg.jenkins-ci.plugins:openid: Jenkins OpenID Plugin CSRF vulnerability CVE-2019-1003092Mediumorg.jenkins-ci.plugins:nomad: Cross-site request forgery vulnerability in Jenkins Nomad Plugin CVE-2016-5394Mediumorg.apache.sling:org.apache.sling.xss: Cross site scripting in Apache Sling CVE-2016-4000Criticalorg.python:jython-standalone: Deserialization of Untrusted Data in Jython CVE-2015-7501Criticalcommons-collections:commons-collections: Deserialization of Untrusted Data in Apache commons collections CVE-2016-1181Highorg.apache.struts:struts-core: Improper Input Validation in Apache Struts CVE-2016-6814Criticalorg.codehaus.groovy:groovy: Deserialization of Untrusted Data in Groovy CVE-2016-5019Criticalorg.apache.myfaces.trinidad:trinidad: Apache MyFaces Trinidad Deserialization Vulnerability CVE-2016-1182Highorg.apache.struts:struts-core: Improper Input Validation in Apache Struts CVE-2017-12610Mediumorg.apache.kafka:kafka-clients: Improper Authentication in Apache Kafka CVE-2019-1003083Mediumorg.jenkins-ci.plugins:gearman-plugin: Missing permission check in Jenkins Gearman Plugin CVE-2019-1003099Mediumorg.jenkins-ci.plugins:openid: Jenkins openid Plugin missing permission check CVE-2019-1003079Mediumorg.jenkins-ci.plugins:labmanager: Missing permission check in Jenkins VMware Lab Manager Slaves Plugin CVE-2019-1003085Mediumorg.jenkins-ci.plugins:zephyr-enterprise-test-management: Jenkins Zephyr Enterprise Test Management Plugin missing permission check CVE-2019-1003081Mediumorg.jenkins-ci.plugins:openshift-deployer: CSRF vulnerability in Jenkins OpenShift Deployer Plugin CVE-2019-1003091Mediumcom.soasta.jenkins:cloudtest: Missing permission check in Jenkins SOASTA CloudTest Plugin CVE-2019-1003087Mediumorg.jenkins-ci.plugins:sinatra-chef-builder: Missing permission check in Jenkins sinatra-chef-builder Plugin CVE-2019-1003093Mediumorg.jenkins-ci.plugins:nomad: Jenkins Nomad Plugin missing permission check CVE-2019-1003097Mediumcom.ds.tools.hudson:crowd: Jenkins Crowd Integration Plugin stores credentials in plain text CVE-2019-1003096Mediumorg.jenkins-ci.plugins:TestFairy: Jenkins TestFairy Plugin stores credentials in plain text

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo