Maven vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2020-13947Mediumorg.apache.activemq:activemq-parent: Cross-site scripting (XSS) in Apache ActiveMQ CVE-2022-23621Mediumorg.xwiki.platform:xwiki-platform-oldcore: Missing authorization in xwiki-platform CVE-2022-23620Mediumorg.xwiki.platform:xwiki-platform-skin-skinx: Path traversal in xwiki-platform-skin-skinx CVE-2022-23619Mediumorg.xwiki.platform:xwiki-platform-web: Information exposure in xwiki-platform CVE-2022-23618Mediumorg.xwiki.platform:xwiki-platform-oldcore: URL Redirection to Untrusted Site ('Open Redirect')CVE-2022-23617Mediumorg.xwiki.platform:xwiki-platform-oldcore: Missing authorization in xwiki-platform CVE-2022-23616Highorg.xwiki.platform:xwiki-platform-administration-ui: Remote code execution in xwiki-platform CVE-2022-23615Mediumorg.xwiki.platform:xwiki-platform-oldcore: Partial authorization bypass on document save in xwiki-platform CVE-2020-17516Highorg.apache.cassandra:cassandra-all: Authentication Bypass in Apache Cassandra CVE-2020-1718Mediumorg.keycloak:keycloak-parent: Improper Authentication for Keycloak CVE-2020-1717Loworg.keycloak:keycloak-parent: Generation of Error Message Containing Sensitive Information in Keycloak CVE-2020-1725Mediumorg.keycloak:keycloak-parent: Incorrect Authorization in keycloak CVE-2020-10776Mediumorg.keycloak:keycloak-server-spi-private: Cross-site Scripting in keycloak CVE-2020-14366Highorg.keycloak:keycloak-parent: Path Traversal CVE-2020-1694Mediumorg.keycloak:keycloak-parent: Incorrect Permission Assignment for Critical Resource and Permissive List of Allowed Inputs in Keycloak CVE-2020-10758Highorg.keycloak:keycloak-parent: Allocation of Resources Without Limits or Throttling in Keycloak CVE-2020-10748Mediumorg.keycloak:keycloak-parent: Cross-site Scripting in Keycloak CVE-2020-1758Mediumorg.keycloak:keycloak-parent: Improper Certificate Validation and Improper Validation of Certificate with Host Mismatch in Keycloak CVE-2020-1714Highorg.keycloak:keycloak-core: Improper Input Validation in Keycloak CVE-2020-27782Highio.undertow:undertow-core: Denial of service in Undertow CVE-2020-1926Mediumorg.apache.hive:hive: Apache Hive Information Exposure and Observable Timing Discrepancy CVE-2019-17566Highorg.apache.xmlgraphics:batik: Server-side request forgery (SSRF) in Apache Batik CVE-2020-11988Highorg.apache.xmlgraphics:xmlgraphics-commons: Server-side request forgery (SSRF) in Apache XmlGraphics Commons CVE-2020-12668Mediumcom.hubspot.jinjava:jinjava: Unauthorized access to Class instance in Jinjava CVE-2020-9482Mediumorg.apache.nifi.registry:nifi-registry-web-api: Insufficient Session Expiration in Apache NiFi Registry

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo