Maven vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2020-25711Mediumorg.infinispan:infinispan-core: Improper Access Control in infinispan-server-runtime CVE-2020-28923Lowcom.typesafe.play:play: Data Amplification in Play Framework CVE-2020-17530Criticalorg.apache.struts:struts2-core: Remote code execution in Apache Struts CVE-2020-17531Criticalorg.apache.tapestry:tapestry-project: Serialization vulnerability in Apache Tapestry CVE-2020-11974Criticalorg.apache.dolphinscheduler:dolphinscheduler: Remote code execution in DolphinScheduler CVE-2020-13931Criticalorg.apache.tomee:apache-tomee: Remote code execution in Apache TomEE CVE-2020-17533Highorg.apache.accumulo:accumulo-master: Improper privilege handling in Apache Accumulo CVE-2020-35774Mediumcom.twitter:twitter-server_2.12: TwitterServer Cross-site Scripting via /histograms endpoint CVE-2019-10797Mediumorg.wso2.transport.http:org.wso2.transport.http.netty: HTTP Response Splitting in WSO2 transport-http CVE-2020-13654Highorg.xwiki.platform:xwiki-platform-web: Improper escaping in XWiki Platform CVE-2024-23682Highde.tum.in.ase:artemis-java-test-sandbox: Class Loading Vulnerability in Artemis CVE-2020-17518Highorg.apache.flink:flink-runtime: Upload of file to arbitrary path in Apache Flink CVE-2020-11995Criticalorg.apache.dubbo:dubbo-parent: Deserialization exploitation in Apache Dubbo CVE-2020-13922Highorg.apache.dolphinscheduler:dolphinscheduler-api: Incorrect Default Permissions in Apache DolphinScheduler CVE-2020-17534Highorg.netbeans.html:pom: Improper synchronization in Apache Netbeans HTML/Java API CVE-2020-27219Mediumorg.eclipse.hawkbit:hawkbit-parent: Cross-site Scripting in Eclipse Hawkbit CVE-2020-17532Highorg.apache.servicecomb:java-chassis: Arbitrary code execution in Apache ServiceComb java-chassis CVE-2020-23262Criticalnet.mingsoft:ms-mcms: SQL injection without credentials in ming-soft MCMS CVE-2020-9492Highorg.apache.hadoop:hadoop-common: Improper Privilege Management in Apache Hadoop CVE-2020-5428Mediumorg.springframework.cloud:spring-cloud-task-dependencies: SQL Injection in Spring Cloud Task CVE-2020-13920Mediumorg.apache.activemq:activemq-parent: Improper Authentication in Apache ActiveMQ CVE-2020-11998Criticalorg.apache.activemq:activemq-parent: Remote code execution in Apache ActiveMQ CVE-2020-13932Mediumorg.apache.activemq:apache-artemis: Cross-site Scripting (XSS) in Apache ActiveMQ Artemis CVE-2020-1958Mediumorg.apache.druid:druid: Credentials bypass in Apache Druid CVE-2020-17523Criticalorg.apache.shiro:shiro-web: Authentication bypass in Apache Shiro

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Browse by ecosystem

Stop the waste.Protect your environment with Kodem.

Stop the waste.
Protect your environment with Kodem.