Maven vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2022-22963Criticalorg.springframework.cloud:spring-cloud-function-context: Spring Cloud Function Code Injection with a specially crafted SpEL as a routing expressionCVE-2021-43142Mediumcom.wutka:jox: Improper Restriction of XML External Entity Reference in wutka joxCVE-2022-22965Criticalorg.springframework:spring-beans: Remote Code Execution in Spring FrameworkCVE-2022-25598Highorg.apache.dolphinscheduler:dolphinscheduler: Uncontrolled Resource Consumption in Apache DolphinSchedulerCVE-2022-28142Mediumorg.jenkins-ci.plugins:proxmox: SSL/TLS certificate validation globally disabled by Jenkins Proxmox PluginCVE-2022-23059Mediumcom.shopizer:shopizer: Cross site scripting in ShopizerCVE-2022-28155Highcom.surenpi.jenkins:phoenix-autotest: XML External Entity Reference vulnerability in Jenkins Pipeline: Phoenix AutoTest PluginCVE-2022-28146Mediumorg.jenkins-ci.plugins:ci-with-toad-edge: Arbitrary file read vulnerability in Jenkins Continuous Integration with Toad Edge PluginCVE-2022-28133Mediumio.jenkins.plugins:atlassian-bitbucket-server-integration: Stored XSS vulnerability in Jenkins Bitbucket Server Integration PluginCVE-2022-28139Mediumorg.jenkins-ci.plugins:rocketchatnotifier: Missing permission check in Jenkins RocketChat Notifier PluginCVE-2022-28141Mediumorg.jenkins-ci.plugins:proxmox: Password stored in plain text by Jenkins Proxmox PluginCVE-2022-28140Highorg.jenkins-ci.plugins:flaky-test-handler: XXE vulnerability in Jenkins Flaky Test Handler PluginCVE-2022-28138Mediumorg.jenkins-ci.plugins:rocketchatnotifier: CSRF vulnerability in Jenkins RocketChat Notifier PluginCVE-2022-28134Mediumio.jenkins.plugins:atlassian-bitbucket-server-integration: Missing permission checks in Jekins Bitbucket Server Integration PluginCVE-2022-28137Mediumorg.jenkins-ci.plugins:JiraTestResultReporter: Missing permission check in Jenkins JiraTestResultReporter PluginCVE-2022-28135Mediumorg.jvnet.hudson.plugins:instant-messaging: Plaintext storage in Jenkins instant-messaging PluginCVE-2022-28136Highorg.jenkins-ci.plugins:JiraTestResultReporter: CSRF vulnerability and missing permission check in Jenkins JiraTestResultReporter PluginCVE-2022-28143Mediumorg.jenkins-ci.plugins:proxmox: CSRF vulnerability in Proxmox Plugin CVE-2022-28144Mediumorg.jenkins-ci.plugins:proxmox: Missing permission checks in Jenkins Proxmox Plugin CVE-2022-28156Mediumcom.surenpi.jenkins:phoenix-autotest: Path traversal in Jenkins Phoenix AutoTest PluginCVE-2022-28145Highorg.jenkins-ci.plugins:ci-with-toad-edge: Cross-site Scripting (XSS) vulnerability in Jenkins Continuous Integration with Toad Edge PluginCVE-2022-28150Highcom.synopsys.jenkinsci:ownership: Cross site request forgery in Jenkins Job and Node ownership PluginCVE-2022-28147Mediumorg.jenkins-ci.plugins:ci-with-toad-edge: Missing permission check in Jenkins Continuous Integration with Toad Edge PluginCVE-2022-28151Mediumcom.synopsys.jenkinsci:ownership: Missing permission check in Jenkins Job and Node ownership PluginCVE-2022-28149Highcom.synopsys.jenkinsci:ownership: Stored Cross-site Scripting vulnerability in Jenkins Job and Node ownership Plugin

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo