Maven vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2021-21649Mediumorg.jenkins-ci.plugins:dashboard-view: Cross-site Scripting in Jenkins Dashboard View PluginCVE-2021-21648Mediumorg.jenkins-ci.plugins:credentials: Cross-Site Request Forgery in Jenkins Credentials PluginCVE-2021-26077Highcom.atlassian.connect:atlassian-connect-spring-boot: Improper Authentication in Atlassian Connect Spring BootCVE-2021-32053Mediumca.uhn.hapi.fhir:hapi-fhir-jpaserver-base: Uncontrolled Resource Consumption in JPA Server in HAPI FHIRCVE-2020-11977Highorg.apache.syncope:syncope: Shell command injection in Apache SyncopeCVE-2020-1959Criticalorg.apache.syncope:syncope-core: Expression Language Injection in Apache SyncopeCVE-2020-1961Highorg.apache.syncope:syncope-core: Injection in Apache SyncopeCVE-2021-31164Highorg.apache.unomi:unomi: Command injection in Apache UnomiCVE-2021-21661Mediumorg.jenkins-ci.plugins:kubernetes-cli: Missing Authorization in Jenkins Kubernetes CLI PluginCVE-2021-21666Mediumorg.jenkins-ci.plugins:kiuwanJenkinsPlugin: Cross-site scripting in Jenkins Kiuwan PluginCVE-2020-10688Mediumorg.jboss.resteasy:resteasy-bom: Cross-site scripting in RESTEasyCVE-2021-20293Highorg.jboss.resteasy:resteasy-bom: Cross-Site ScriptingCVE-2021-31811Mediumorg.apache.pdfbox:pdfbox: Uncontrolled memory consumptionCVE-2021-31812Mediumorg.apache.pdfbox:pdfbox: Infinite Loop in Apache PDFBoxCVE-2021-28169Mediumorg.eclipse.jetty:jetty-servlets: Jetty Utility Servlets ConcatServlet Double Decoding Information Disclosure VulnerabilityCVE-2021-33561Mediumcom.shopizer:shopizer: Cross-site scripting in ShopizerCVE-2021-33562Mediumcom.shopizer:shopizer: Cross-site scripting in ShopizerCVE-2021-20195Criticalorg.keycloak:keycloak-core: keycloak Self Stored Cross-site Scripting vulnerabilityCVE-2020-25724Mediumorg.jboss.resteasy:resteasy-bom: Unsynchronized Access to Shared Data in a Multithreaded Context in RESTEasyCVE-2020-14340Mediumorg.jboss.xnio:xnio-nio: Uncontrolled Resource Consumption in XNIOCVE-2020-1719Mediumorg.wildfly.bom:wildfly: Privilege Context Switching Error in wildlfyCVE-2017-5929Criticalch.qos.logback:logback-classic: QOS.ch Logback vulnerable to Deserialization of Untrusted DataCVE-2017-18640Highorg.yaml:snakeyaml: SnakeYAML Entity Expansion during load operationCVE-2020-10693Mediumorg.hibernate.validator:hibernate-validator: Improper Input Validation in Hibernate ValidatorCVE-2020-25633Mediumorg.jboss.resteasy:resteasy-client: Generation of Error Message Containing Sensitive Information in RESTEasy client

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo