Maven vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2021-45458Highorg.apache.kylin:kylin: Use of Hard-coded Credentials in Apache KylinCVE-2021-27738Mediumorg.apache.kylin:kylin: Server-Side Request Forgery in Apache KylinCVE-2021-36774Mediumorg.apache.kylin:kylin: SQL Injection in Apache KylinCVE-2021-31522Mediumorg.apache.kylin:kylin: Kylin can receive user input and load any class through Class.forName(...).CVE-2021-45456Mediumorg.apache.kylin:kylin: Command Injection in Apache KylinCVE-2021-40111Mediumorg.apache.james:james-server: Infinite Loop in Apache JamesCVE-2021-38542Mediumorg.apache.james:james-server: Command Injection in Apache JamesCVE-2021-40110Highorg.apache.james:james-server: Denial of Service in Apache JamesCVE-2021-44878Highorg.pac4j:pac4j-oidc: Pac4j token validation bypass if OpenID Connect provider supports none algorithmCVE-2021-22569Highcom.google.protobuf:protobuf-java: A potential Denial of Service issue in protobuf-javaCVE-2021-41561Highorg.apache.parquet:parquet: Improper Input Validation in Parquet-MRCVE-2021-42392Criticalcom.h2database:h2: RCE in H2 ConsoleCVE-2022-21653Mediumorg.typelevel:jawn-parser_0.25: Hash collision in typelevel jawnCVE-2021-34797Highorg.apache.geode:geode-core: Insertion of Sensitive Information into Log File in Apache GeodeCVE-2021-44548Criticalorg.apache.solr:solr-parent: Apache Solr Improper Input Validation and Path TraversalCVE-2020-9491Highorg.apache.nifi:nifi: Inadequate Encryption Strength in Apache NiFiCVE-2020-9487Highorg.apache.nifi:nifi: Missing Authentication for Critical Function in Apache NiFiCVE-2020-9486Highorg.apache.nifi:nifi-stateless: Insertion of Sensitive Information into Log File in Apache NiFi StatelessCVE-2020-13940Mediumorg.apache.nifi:nifi: Improper Restriction of XML External Entity Reference in Apache NiFiCVE-2020-1942Highorg.apache.nifi:nifi-framework-core: Insertion of Sensitive Information into Log File in Apache NiFiCVE-2020-1928Mediumorg.apache.nifi:nifi-parameter: Apache NiFi Insertion of Sensitive Information into Log FileCVE-2020-11987Highorg.apache.xmlgraphics:batik-svgbrowser: Server-side request forgery (SSRF) in Apache BatikCVE-2020-1933Mediumorg.apache.nifi:nifi: Cross-site scripting in Apache NiFiCVE-2020-1936Mediumorg.apache.ambari:ambari: Cross-site Scripting (XSS) in Apache Ambari ViewsCVE-2020-13936Highorg.apache.velocity:velocity-engine-parent: Sandbox Bypass in Apache Velocity Engine

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo