Maven vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2019-1003031Criticalorg.jenkins-ci.plugins:matrix-project: Script security sandbox bypass in Matrix Project Plugin CVE-2019-1003034Criticalorg.jenkins-ci.plugins:job-dsl: Script security sandbox bypass in Jenkins Job DSL Plugin CVE-2019-1003038Loworg.jenkins-ci.plugins:repository-connector: Jenkins Repository Connector Plugin has insufficiently protected credentials CVE-2019-1003037Mediumorg.jenkins-ci.plugins:azure-vm-agents: Unprivileged users with Overall/Read access are able to enumerate credential IDs in Azure VM Agents Plugin CVE-2019-1003035Mediumorg.jenkins-ci.plugins:azure-vm-agents: Information disclosure in Azure VM Agents Plugin CVE-2019-1003033Highorg.jenkins-ci.plugins:groovy: Jenkins Groovy Plugin sandbox bypass vulnerability CVE-2019-1003032Criticalorg.jenkins-ci.plugins:email-ext: Script security sandbox bypass in Jenkins Email Extension Plugin CVE-2019-10287Loworg.jenkins-ci.plugins:youtrack-plugin: Jenkins youtrack-plugin Plugin stored credentials in plain text CVE-2019-10288Lowde.e-nexus:jabber-server-plugin: Jenkins Jabber Server Plugin stores credentials in plain text CVE-2019-10286Mediumcom.openmake:deployhub: Jenkins DeployHub Plugin stores credentials in plain text CVE-2019-10293Mediumorg.jenkins-ci.plugins:kmap-jenkins: Missing permission check in Jenkins Kmap Plugin allow SSRF CVE-2019-10284Mediumorg.jenkins-ci.plugins:diawi-upload: Jenkins Diawi Upload Plugin stores credentials in plain text CVE-2019-10283Mediumcom.mabl.integration.jenkins:mabl-integration: Jenkins mabl Plugin stores credentials in plain text CVE-2019-10279Mediumorg.jenkins-ci.plugins:jenkins-reviewbot: Missing permission check in Jenkins jenkins-reviewbot Plugin CVE-2019-10285Loworg.jenkins-ci.plugins:minio-storage: Jenkins Minio Storage Plugin stores credentials in plain text CVE-2019-10291Loworg.jenkins-ci.plugins:netsparker-cloud-scan: Jenkins Netsparker Enterprise Scan Plugin stored credentials in plain text CVE-2019-10299Lowcom.cloudcoreo.plugins:cloudcoreo-deploytime: Jenkins CloudCoreo DeployTime Plugin stores credentials in plain text CVE-2019-10298Loworg.jenkins-ci.plugins:koji: Jenkins Koji Plugin stores credentials in plain text CVE-2019-10297Loworg.jenkins-ci.plugins:sametime: Jenkins Sametime Plugin stores credentials in plain text CVE-2019-10290Mediumorg.jenkins-ci.plugins:netsparker-cloud-scan: Missing permission check in Jenkins Netsparker Cloud Scan Plugin CVE-2019-10294Highorg.jenkins-ci.plugins:kmap-jenkins: Jenkins Kmap Plugin stores credentials in plain text CVE-2019-10281Loworg.jenkins-ci.plugins:relution-publisher: Jenkins Relution Enterprise Appstore Publisher Plugin stores credentials in plain text CVE-2019-10296Lowcom.urbancode.ds.jenkins.plugins:sra-deploy: Jenkins Serena SRA Deploy Plugin stores credentials in plain text CVE-2019-10282Mediumhudson.plugins.klaros:klaros-testmanagement: Jenkins Klaros-Testmanagement Plugin stores credentials in plain text CVE-2019-10277Highhudson.plugins:starteam: Jenkins StarTeam Plugin stores credentials in plain text

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo