Maven vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2020-9480Criticalorg.apache.spark:spark-parent_2.11: Improper Authentication in Apache Spark CVE-2019-14900Mediumorg.hibernate:hibernate-core: SQL Injection in Hibernate ORM CVE-2020-11980Mediumorg.apache.karaf.management:org.apache.karaf.management.server: Server-Side Request Forgery in Karaf CVE-2020-13973Mediumcom.mikesamuel:json-sanitizer: Cross-site scripting in json-sanitizer CVE-2018-21234Criticalorg.jodd:jodd-json: Deserialization of Untrusted Data in Jodd CVE-2021-31684Highnet.minidev:json-smart: Out of bounds read in json-smart CVE-2021-43841Mediumorg.xwiki.platform:xwiki-platform-oldcore: Cross-site Scripting by SVG upload in xwiki-platform CVE-2021-32732Highorg.xwiki.platform:xwiki-platform-administration-ui: Cross-Site Request Forgery in xwiki-platform CVE-2020-15813Highorg.graylog:graylog-parent: Improper Certificate Validation in Graylog CVE-2020-1948Criticalorg.apache.dubbo:dubbo: Deserialization of Untrusted Data in Apache Dubbo CVE-2020-1954Mediumorg.apache.cxf:cxf-rt-management: Apache CXF JMX Integration is vulnerable to a MITM attack CVE-2020-24164Highcom.taoensso:nippy: Gadget chain attack in Nippy CVE-2019-12416Mediumorg.apache.deltaspike:deltaspike: Injection in DeltaSpike CVE-2020-13928Mediumorg.apache.atlas:apache-atlas: Cross-site scripting in Apache Atlas CVE-2019-10091Highorg.apache.geode:geode-core: Apache Geode SSL endpoint verification vulnerability CVE-2020-10591Highcom.walmartlabs.concord:concord-common: Exposure of Sensitive Information to an Unauthorized Actor in Concord CVE-2019-11343Criticalorg.torpedoquery:org.torpedoquery: Vulnerability in Torpedo Query CVE-2020-15839Mediumcom.liferay.portal:release.dxp.bom: Unrestricted Upload of File with Dangerous Type in Liferay Portal and Liferay DXP CVE-2020-1947Highorg.apache.shardingsphere:shardingsphere: Deserialization of Untrusted Data in Apache ShardingSphere CVE-2020-13951Highorg.apache.openmeetings:openmeetings-parent: Denial of service in Apache OpenMeetings CVE-2020-13953Mediumorg.apache.tapestry:tapestry-core: Improper file downloads in Apache Tapestry CVE-2020-2287Mediumorg.jenkins-ci.plugins:audit-trail: Request logging bypass in Jenkins Audit Trail Plugin CVE-2019-17640Criticalio.vertx:vertx-web: Path Traversal in Eclipse Vert CVE-2018-11764Highorg.apache.hadoop:hadoop-main: Authentication bypass in Apache Hadoop CVE-2020-13937Mediumorg.apache.kylin:kylin: Authentication bypass in Apache Kylin

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Browse by ecosystem

Stop the waste.Protect your environment with Kodem.

Stop the waste.
Protect your environment with Kodem.