Maven vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2021-20222Highorg.keycloak:keycloak-parent: Code injection in keycloak CVE-2021-21430Mediumorg.openapitools:openapi-generator: Creation of Temporary File in Directory with Insecure Permissions in auto-generated Java, Scala code CVE-2021-21428Criticalorg.openapitools:openapi-generator-online: Creation of Temporary File in Directory with Insecure Permissions in the OpenAPI-Generator online generator CVE-2020-7709Mediumjson-pointer: Prototype pollution in json-pointer CVE-2021-28657Mediumorg.apache.tika:tika: Infinite loop in Apache Tika CVE-2021-22112Highorg.springframework.security:spring-security-web: Privilege escalation in spring security CVE-2021-26074Mediumcom.atlassian.connect:atlassian-connect-spring-boot-starter: Broken Authentication in Atlassian Connect Spring Boot CVE-2021-22113Mediumorg.springframework.cloud:spring-cloud-netflix-zuul: Incorrect Authorization in Spring Cloud Netflix Zuul CVE-2021-29262Highorg.apache.solr:solr-core: Improper permission handling in Apache Solr CVE-2021-27905Highorg.apache.solr:solr-parent: Server-Side Request Forgery in Apache Solr CVE-2021-29943Criticalorg.apache.solr:solr-parent: Incorrect Authorization in Apache Solr CVE-2021-23339Mediumcom.typesafe.akka:akka-http-core: HTTP Request Smuggling in akka-http-core CVE-2020-10544Mediumprimefaces: Cross-site Scripting in PrimeFaces CVE-2020-24554Highcom.liferay.portal:release.portal.bom: Open Redirect in Liferay Portal CVE-2020-13946Mediumorg.apache.cassandra:cassandra-all: Man-in-the-middle attack in Apache Cassandra CVE-2020-25020Criticalnet.sf.mpxj:mpxj: Improper Restriction of XML External Entity Reference in MPXJ CVE-2020-9298Highcom.netflix.spinnaker.orca:orca-core: Server-Side Request Forgery in Spinnaker Orca CVE-2020-13933Highorg.apache.shiro:shiro-core: Authentication bypass in Apache Shiro CVE-2020-11976Highorg.apache.wicket:wicket-core: Exposure of Sensitive Information to an Unauthorized Actor in Apache Wicket CVE-2020-1951Mediumorg.apache.tika:tika: Infinite Loop in Apache Tika CVE-2020-1950Mediumorg.apache.tika:tika: Uncontrolled Resource Consumption in Apache Tika CVE-2020-9489Mediumorg.apache.tika:tika: Missing Release of Memory after Effective Lifetime in Apache Tika CVE-2020-13921Criticalorg.apache.skywalking:oap-server: SQL Injection in Apache SkyWalking CVE-2020-1957Criticalorg.apache.shiro:shiro-core: Improper Authentication in Apache Shiro CVE-2020-11989Criticalorg.apache.shiro:shiro-core: Improper Authentication in Apache Shiro

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Browse by ecosystem

Stop the waste.Protect your environment with Kodem.

Stop the waste.
Protect your environment with Kodem.