Maven vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2022-25202Mediumorg.jenkins-ci.plugins:promoted-builds-simple: Stored Cross-site Scripting vulnerability in Jenkins Promoted Builds (Simple) PluginCVE-2022-25203Mediumcom.sonymobile.jenkins.plugins.teamviews:team-views: Stored Cross-site Scripting vulnerability in Jenkins Team Views PluginCVE-2022-25204Mediumby.dev.madhead.doktor:doktor: Protection Mechanism Failure in Jenkins Doktor PluginCVE-2022-25205Highorg.jenkins-ci.plugins:dbCharts: Cross-Site Request Forgery in Jenkins dbCharts PluginCVE-2022-25206Highorg.jenkins-ci.plugins:dbCharts: Missing Authorization in Jenkins dbCharts PluginCVE-2022-25207Highorg.jenkins-ci.plugins:sinatra-chef-builder: CSRF vulnerability in Jenkins Chef Sinatra Plugin allow XXECVE-2022-25208Highorg.jenkins-ci.plugins:sinatra-chef-builder: Missing permission checks in Jenkins Chef Sinatra Plugin allow XXECVE-2022-25209Highorg.jenkins-ci.plugins:sinatra-chef-builder: Improper Restriction of XML External Entity Reference in Jenkins Chef SinatraCVE-2022-25210Lowcom.convertigo.jenkins.plugins:convertigo-mobile-platform: Improper Synchronization in Jenkins Convertigo Mobile Platform PluginCVE-2022-25211Mediumorg.continuousassurance.swamp.jenkins:swamp: Missing permission check in Jenkins SWAMP Plugin allows capturing credentialsCVE-2022-25212Mediumorg.continuousassurance.swamp.jenkins:swamp: CSRF vulnerability in Jenkins SWAMP Plugin allows capturing credentialsCVE-2020-10714Highorg.wildfly.security:wildfly-elytron: Session Fixation in WildFly ElytronCVE-2020-1748Highorg.wildfly.security:wildfly-elytron: Incorrect Authorization in WildFly ElytronCVE-2020-25640Mediumorg.wildfly:wildfly-parent: Wildfly logs plaintext passwordsCVE-2020-14338Mediumxerces:xercesImpl: Improper Input Validation in XercesCVE-2022-24289Highorg.apache.cayenne:cayenne-server: Deserialization of untrusted data in Apache CayenneCVE-2021-44521Criticalorg.apache.cassandra:cassandra-all: Apache Cassandra vulnerable to Code Injection due to unsafe configurationCVE-2021-46363Highinfo.magnolia:magnolia-core: Arbitrary code execution in Magnolia CMSCVE-2021-46361Criticalinfo.magnolia:magnolia-core: Arbitrary code execution in Magnolia CMSCVE-2021-46364Highinfo.magnolia:magnolia-core: Deserialization of Untrusted Data in Magnolia CMSCVE-2021-46366Highinfo.magnolia:magnolia-core: Cross-Site Request Forgery in Magnolia CMSCVE-2021-46365Highinfo.magnolia:magnolia-core: Improper Restriction of XML External Entity Reference in Magnolia CMSCVE-2020-11969Highorg.apache.tomee:tomee: Missing Authentication for Critical Function in Apache TomEECVE-2020-9296Criticalcom.netflix.conductor:conductor-core: Expression Language Injection in Netflix ConductorCVE-2020-9495Mediumorg.apache.archiva:archiva: Injection in Apache Archiva

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo