Maven vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2022-25176Mediumorg.jenkins-ci.plugins.workflow:workflow-cps: Improper Link Resolution Before File Access in Jenkins Pipeline: Groovy PluginCVE-2022-25179Mediumorg.jenkins-ci.plugins.workflow:workflow-multibranch: Link Following in Jenkins Pipeline Multibranch PluginCVE-2022-25178Mediumorg.jenkins-ci.plugins.workflow:workflow-cps-global-lib: Improper Limitation of a Pathname to a Restricted Directory in Jenkins Pipeline: Shared Groovy Libraries PluginCVE-2022-25181Highorg.jenkins-ci.plugins.workflow:workflow-cps-global-lib: Jenkins Pipeline: Deprecated Groovy Libraries Plugin Protection Mechanism FailureCVE-2022-25180Mediumorg.jenkins-ci.plugins.workflow:workflow-cps: Jenkins Pipeline: Groovy Plugin has Insufficiently Protected CredentialsCVE-2022-25183Highorg.jenkins-ci.plugins.workflow:workflow-cps-global-lib: Jenkins Pipeline: Deprecated Groovy Libraries Plugin Protection Mechanism FailureCVE-2022-25182Highorg.jenkins-ci.plugins.workflow:workflow-cps-global-lib: Jenkins Pipeline: Deprecated Groovy Libraries Plugin Protection Mechanism FailureCVE-2022-25184Mediumorg.jenkins-ci.plugins:pipeline-build-step: Password parameter default values exposed by Jenkins Pipeline: Build Step PluginCVE-2022-25185Mediumorg.jenkins-ci.plugins:generic-webhook-trigger: Stored XSS vulnerability in Jenkins Generic Webhook Trigger PluginCVE-2022-25187Mediumorg.jenkins-ci.plugins:support-core: Jenkins Support Core Plugin stores sensitive data in plain textCVE-2022-25186Lowcom.datapipe.jenkins.plugins:hashicorp-vault-plugin: Agent-to-controller security bypass in Jenkins HashiCorp Vault PluginCVE-2022-25188Mediumorg.jenkins-ci.plugins:fortify: Path traversal vulnerability in Jenkins Fortify PluginCVE-2022-25189Highio.jenkins.plugins:custom-checkbox-parameter: Stored Cross-site Scripting vulnerability in Jenkins Custom Checkbox Parameter PluginCVE-2022-25190Mediumorg.conjur.jenkins:conjur-credentials: Missing permission check in Jenkins Conjur Secrets Plugin allows enumerating credentials IDsCVE-2022-25191Highio.jenkins.plugins:agent-server-parameter: Stored Cross-site Scripting vulnerability in Jenkins Agent Server Parameter PluginCVE-2022-25192Mediumio.jenkins.plugins:embotics-vcommander: Jenkins Snow Commander Plugin 2.0 vulnerable to Cross-Site Request ForgeryCVE-2022-25193Mediumio.jenkins.plugins:embotics-vcommander: Jenkins Snow Commander Plugin prior to 2.0 vulnerable to Missing AuthorizationCVE-2022-25194Highio.jenkins.plugins:autonomiq: CSRF vulnerability in Jenkins autonomiq pluginCVE-2022-25195Mediumio.jenkins.plugins:autonomiq: Missing permission check in Jenkins autonomiq PluginCVE-2022-25196Mediumorg.jenkins-ci.plugins:gitlab-oauth: Open redirect vulnerability in Jenkins GitLab Authentication PluginCVE-2022-25198Highorg.jenkins-ci.plugins:scp: CSRF vulnerability in Jenkins SCP publisher PluginCVE-2022-25197Mediumcom.datapipe.jenkins.plugins:hashicorp-vault-plugin: Agent-to-controller security bypass in Jenkins HashiCorp Vault Plugin allows reading arbitrary filesCVE-2022-25200Mediumcom.checkmarx.jenkins:checkmarx: CSRF vulnerability in Jenkins Checkmarx Plugin allow capturing credentialsCVE-2022-25199Highorg.jenkins-ci.plugins:scp: Missing permission check in Jenkins SCP publisher PluginCVE-2022-25201Mediumcom.checkmarx.jenkins:checkmarx: Missing permission checks in Jenkins Checkmarx Plugin allow capturing credentials

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo