Maven vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2022-28153Mediumorg.jvnet.hudson.plugins:sitemonitor: Cross-site Scripting in Jenkins SiteMonitor PluginCVE-2022-28152Mediumcom.synopsys.jenkinsci:ownership: CSRF vulnerability in Jenkins Job and Node ownership PluginCVE-2022-28154Highorg.jenkins-ci.plugins:covcomplplot: enkins Coverage/Complexity Scatter Plot Plugin XML External Entity Reference vulnerabilityCVE-2022-28148Mediumorg.jenkins-ci.plugins:ci-with-toad-edge: Path traversal vulnerability on Windows in Jenkins Continuous Integration with Toad Edge PluginCVE-2022-28157Mediumcom.surenpi.jenkins:phoenix-autotest: Path traversal in Jenkins Pipeline Phoenix AutoTest PluginCVE-2022-28159Mediumorg.jenkins-ci.plugins:selected-tests-executor: Stored Cross-site Scripting vulnerability in Jenkins Tests Selector PluginCVE-2022-28158Mediumcom.surenpi.jenkins:phoenix-autotest: Missing permission Jenkins Pipeline Phoenix AutoTest PluginCVE-2022-28160Mediumorg.jenkins-ci.plugins:selected-tests-executor: Arbitrary file read vulnerability in Jenkins Tests Selector PluginCVE-2021-43090Criticalcom.predic8:soa-model-parent: Improper Restriction of XML External Entity Reference in soa-modelCVE-2021-20323Mediumorg.keycloak:keycloak-core: Cross-site Scripting in KeycloakCVE-2022-27820Mediumorg.zaproxy:zap: Improper Certificate Validation in OWASP ZAPCVE-2022-27200Mediumio.jenkins.plugins:folder-auth: Stored Cross-site Scripting in folder-auth pluginCVE-2020-14326Highorg.jboss.resteasy:resteasy-bom: RESTEasy 4.5.5.Final in hash floodingCVE-2020-35510Highorg.jboss.remoting:jboss-remoting: Uncontrolled Resource Consumption in jboss-remotingCVE-2021-30180Criticalorg.apache.dubbo:dubbo: Code injection in Apache DubboCVE-2021-30179Criticalorg.apache.dubbo:dubbo: Deserialization of Untrusted Data in Apache DubboCVE-2021-30181Criticalcom.alibaba:dubbo: Code injection in Apache DubboCVE-2021-25640Mediumorg.apache.dubbo:dubbo: Server-Side Request Forgery in Apache DubboCVE-2021-25641Criticalorg.apache.dubbo:dubbo: Deserializer tampering in Apache DubboCVE-2020-1729Mediumio.smallrye.config:smallrye-config: Permissions bypass in SmallRyeCVE-2020-27826Highorg.keycloak:keycloak-core: Authentication Bypass in keycloakCVE-2021-30638Highorg.apache.tapestry:tapestry-core: Information Exposure in Apache TapestryCVE-2021-21655Highorg.jenkins-ci.plugins:p4: Cross-Site Request Forgery in Jenkins P4 PluginCVE-2021-21656Highorg.jenkins-ci.plugins:xcode-plugin: XML external entity (XXE) attacks in Jenkins Xcode integration PluginCVE-2021-20202Highorg.keycloak:keycloak-core: Temporary Directory Hijacking Vulnerability in Keycloak

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo