Maven vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2019-10295Mediumorg.jenkins-ci.plugins:crittercism-dsym: Jenkins crittercism-dsym Plugin stores API key in plain text CVE-2019-10280Highorg.jenkins-ci.plugins:assembla-auth: Jenkins Assembla Auth Plugin stores credentials in plain text CVE-2016-6816Highorg.apache.tomcat:tomcat-coyote: Improper Input Validation in Apache Tomcat CVE-2016-8735Criticalorg.apache.tomcat:tomcat-catalina: Apache Tomcat Improper Access Control vulnerability CVE-2018-1067Mediumorg.jboss.eap:wildfly-undertow: Improper Neutralization of CRLF Sequences in HTTP Headers in Undertow CVE-2010-1870Mediumorg.apache.struts:struts2-core: Server side object manipulation in Apache Struts CVE-2015-1832Criticalorg.apache.derby:derby: Improper Restriction of XML External Entity Reference in Apace Derby CVE-2013-2251Criticalorg.apache.struts:struts2-core: Code injection in Apache Struts CVE-2019-1003030Criticalorg.jenkins-ci.plugins.workflow:workflow-cps: Sandbox bypass in Jenkins Pipeline: Groovy Plugin CVE-2019-7611Highorg.elasticsearch:elasticsearch: Improper Access Control in Elasticsearch CVE-2016-2510Highorg.apache-extras.beanshell:bsh: Improper Input Validation in BeanShell CVE-2016-5000Mediumorg.apache.poi:poi-examples: Apache POI's XLSX2CSV Example XML External Entity (XXE) Vulnerability CVE-2018-8013Criticalorg.apache.xmlgraphics:batik: Deserialization of Untrusted Data in Apache Batik CVE-2017-13098Mediumorg.bouncycastle:bcprov-jdk15on: Observable Discrepancy in BouncyCastle CVE-2017-9096Highcom.itextpdf:itextpdf: Improper Restriction of XML External Entity Reference in iText CVE-2017-5644Mediumorg.apache.poi:poi: Improper Restriction of Recursive Entity References in DTDs in Apache POI CVE-2017-5662Highorg.apache.xmlgraphics:batik: Improper Restriction of XML External Entity Reference in Apache Batik CVE-2017-2599Mediumorg.jenkins-ci.main:jenkins-core: Incorrect Authorization in Jenkins CVE-2018-14657Highorg.keycloak:keycloak-parent: Keycloak Improper Bruteforce Detection CVE-2018-1048Highorg.jboss.eap:wildfly-undertow: Improper Limitation of a Pathname to a Restricted Directory in Jboss EAP Undertow CVE-2018-14642Mediumio.undertow:undertow-core: Exposure of Sensitive Information to an Unauthorized Actor in Undertow CVE-2013-7398Mediumcom.ning:async-http-client: Insufficient Verification of Data Authenticity in Async Http Client CVE-2013-7397Mediumcom.ning:async-http-client: Insufficient Verification of Data Authenticity in Async Http Client CVE-2013-4444Mediumorg.apache.tomcat:tomcat: Apache Tomcat Unrestricted file upload vulnerability CVE-2017-8028Highorg.springframework.ldap:spring-ldap-core: Improper Authentication in Pivotal Spring-LDAP

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Browse by ecosystem

Stop the waste.Protect your environment with Kodem.

Stop the waste.
Protect your environment with Kodem.