Maven vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2018-1000068Mediumorg.jenkins-ci.main:jenkins-core: Exposure of Sensitive Information to an Unauthorized Actor in Jenkins CVE-2018-1999004Mediumorg.jenkins-ci.main:jenkins-core: Incorrect Authorization in Jenkins CVE-2018-1000192Mediumorg.jenkins-ci.main:jenkins-core: Exposure of Sensitive Information to an Unauthorized Actor in Jenkins CVE-2018-1999002Highorg.jenkins-ci.main:jenkins-core: Improper Input Validation in Jenkins CVE-2018-1000193Mediumorg.jenkins-ci.main:jenkins-core: Injection in Jenkins CVE-2018-6356Mediumorg.jenkins-ci.main:jenkins-core: Improper Limitation of a Pathname to a Restricted Directory in Jenkins CVE-2019-1003049Highorg.jenkins-ci.main:jenkins-core: Insufficient Session Expiration in Jenkins CVE-2018-1999005Mediumorg.jenkins-ci.main:jenkins-core: Improper Neutralization of Input During Web Page Generation in Jenkins CVE-2019-1003050Mediumorg.jenkins-ci.main:jenkins-core: Improper Neutralization of Input During Web Page Generation in Jenkins CVE-2018-5382Mediumorg.bouncycastle:bcprov-jdk15on: Improper Validation of Integrity Check Value in Bouncy Castle CVE-2018-1000194Highorg.jenkins-ci.main:jenkins-core: Path Traversal in Jenkins CVE-2018-1000195Mediumorg.jenkins-ci.main:jenkins-core: Cross-Site Request Forgery in Jenkins CVE-2018-1999001Highorg.jenkins-ci.main:jenkins-core: Improper Input Validation in Jenkins CVE-2018-1000861Criticalorg.jenkins-ci.main:jenkins-core: Deserialization of Untrusted Data in Jenkins CVE-2018-1999003Mediumorg.jenkins-ci.main:jenkins-core: Incorrect Authorization in Jenkins CVE-2019-1003029Criticalorg.jenkins-ci.plugins:script-security: Sandbox bypass in Script Security Plugin CVE-2019-1003005Highorg.jenkins-ci.plugins:script-security: Sandbox Bypass in Script Security Plugin CVE-2022-29885Highorg.apache.tomcat:tomcat: Apache Tomcat EncryptInterceptor error leads to Uncontrolled Resource Consumption CVE-2022-22971Mediumorg.springframework:spring-messaging: Allocation of Resources Without Limits or Throttling in Spring Framework CVE-2022-22970Highorg.springframework:spring-beans: Denial of service in Spring Framework CVE-2022-24823Mediumio.netty:netty-codec-http: Local Information Disclosure Vulnerability in io.netty:netty-codec-http CVE-2021-23792Criticalcom.twelvemonkeys.imageio:imageio-metadata: External Entity Reference in TwelveMonkeys ImageIO CVE-2022-28890Criticalorg.apache.jena:jena: XML External Entity Reference in apache jena CVE-2013-0331Mediumorg.jenkins-ci.main:jenkins-core: Jenkins Vulnerable to Denial of Service (DoS) via Crafted Payload CVE-2013-0329Mediumorg.jenkins-ci.main:jenkins-core: Jenkins Cross-Site Request Forgery vulnerability

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo