Maven vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2019-1003073Mediumorg.jenkins-ci.plugins:vsts-cd: Jenkins VS Team Services Continuous Deployment Plugin stores credentials in plain text CVE-2019-1003074Lowsh.hyper.plugins:hyper-commons: Jenkins hyper.sh Commons Plugin stores credentials in plain textCVE-2019-1003071Lowhudson.plugins.octopusdeploy:octopusdeploy: Jenkins Octopus Deploy Plugin stores credentials in plain textCVE-2019-1003089Mediumren.helloworld:upload-pgyer: Jenkins Upload to pgyer Plugin stores credentials in plain text CVE-2019-1003077Mediumorg.jenkins-ci.plugins:audit2db: Missing permission check in Jenkins Audit to Database PluginCVE-2019-1003088Mediumegor-n:fabric-beta-publisher: Jenkins Fabric-beta-publisher Plugin stores credentials in plain textCVE-2019-1003095Mediumorg.jenkins-ci.plugins:perfectomobile: Jenkins Perfecto Mobile Plugin stores credentials in plain textCVE-2019-1003094Mediumorg.jenkins-ci.plugins:open-stf: Jenkins Open STF Plugin stores credentials in plain text CVE-2017-2611Mediumorg.jenkins-ci.main:jenkins-core: Incorrect Authorization in Jenkins CoreCVE-2013-2115Highorg.apache.struts:struts2-core: Code injection in Apache StrutsCVE-2019-1003011Mediumorg.jenkins-ci.plugins:token-macro: Jenkins Token Macro Plugin's recursive token expansion results in information disclosure and DoSCVE-2019-1003025Mediumorg.jenkins-ci.plugins:cloudfoundry: Jenkins Cloud Foundry Plugin vulnerable to exposure of sensitive informationCVE-2019-1003006Highorg.jenkins-ci.plugins:groovy: Jenkins Groovy Plugin sandbox bypass vulnerabilityCVE-2019-1003024Highorg.jenkins-ci.plugins:script-security: Jenkins Script Security Plugin sandbox bypass vulnerabilityCVE-2019-1003001Highorg.jenkins-ci.plugins.workflow:workflow-cps-parent: Jenkins Groovy Plugin sandbox bypass vulnerabilityCVE-2019-1003002Highorg.jenkinsci.plugins:pipeline-model-definition: Jenkins Pipeline Declarative Plugin sandbox bypass vulnerabilityCVE-2019-1003000Highorg.jenkins-ci.plugins:script-security: Protection Mechanism Failure in Jenkins Script Security PluginCVE-2019-1003048Lowcom.programmingresearch:prqa-plugin: Jenkins PRQA Plugin stored password in plain text CVE-2019-1003040Criticalorg.jenkins-ci.plugins:script-security: Sandbox bypass vulnerability in Jenkins Script Security PluginCVE-2019-1003039Mediumorg.jenkins-ci.plugins:appdynamics-dashboard: Jenkins AppDynamics Dashboard Plugin has insufficiently protected credentialsCVE-2019-1003041Criticalorg.jenkins-ci.plugins.workflow:workflow-cps: Sandbox bypass vulnerability in Jenkins Pipeline: Groovy PluginCVE-2019-1003036Mediumorg.jenkins-ci.plugins:azure-vm-agents: Missing permission check in Azure VM Agents Plugin allowed modifying VM configuration CVE-2019-1003047Mediumorg.jenkins-ci.plugins:fortify-on-demand-uploader: SSRF vulnerability due to missing permission check in Fortify on Demand Uploader Plugin CVE-2019-1003045Mediumde.eacg:ecs-publisher: ECS Publisher Plugin stored and displayed API token in plain textCVE-2019-1003043Mediumorg.jenkins-ci.plugins:slack: Jenkins Slack Notification Plugin missing permission check

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo