Maven vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2020-9546Criticalcom.fasterxml.jackson.core:jackson-databind: jackson-databind mishandles the interaction between serialization gadgets and typing CVE-2020-11620Highcom.fasterxml.jackson.core:jackson-databind: jackson-databind mishandles the interaction between serialization gadgets and typing CVE-2020-10672Highcom.fasterxml.jackson.core:jackson-databind: jackson-databind mishandles the interaction between serialization gadgets and typing CVE-2020-11007Criticalcom.shopizer:sm-core-model: Negative charge in shopping cart in Shopizer CVE-2020-1728Mediumorg.keycloak:keycloak-core: Improper Restriction of Rendered UI Layers or Frames in Keycloak CVE-2020-1731Criticalorg.keycloak:keycloak-core: Predictable password in Keycloak CVE-2020-1697Mediumorg.keycloak:keycloak-core: XSS in Keycloak CVE-2019-14820Mediumorg.keycloak:keycloak-core: Exposure of Sensitive Information to an Unauthorized Actor in Keycloak CVE-2020-10203Mediumorg.sonatype.nexus:nexus-core: Persistent Cross-Site scripting in Nexus Repository Manager CVE-2020-10204Highorg.sonatype.nexus:nexus-core: Remote Code Execution - JavaEL Injection (low privileged accounts) in Nexus Repository Manager CVE-2020-10199Highorg.sonatype.nexus:nexus-extdirect: Nexus Repository Manager 3 - Remote Code Execution CVE-2020-11002Highio.dropwizard:dropwizard-validation: Remote Code Execution (RCE) vulnerability in dropwizard-validation CVE-2020-7622Criticalio.jooby:jooby-netty: Improper Neutralization of CRLF Sequences in HTTP Headers in Jooby ('HTTP Response Splitting)CVE-2020-5497Mediumorg.mitre:openid-connect-server: XSS in MITREid Connect CVE-2020-7611Criticalio.micronaut:micronaut-http-client: Micronaut's HTTP client is vulnerable to HTTP Request Header Injection CVE-2020-5289Highcom.yahoo.elide:elide-core: Read permissions not enforced for client provided filter expressions in Elide.CVE-2020-5280Criticalorg.http4s:http4s-server_2.12: Local file inclusion vulnerability in http4s CVE-2019-19135Highorg.eclipse.milo:sdk-client: Insufficient Nonce Validation in Eclipse Milo Client CVE-2020-8840Criticalcom.fasterxml.jackson.core:jackson-databind: Deserialization of Untrusted Data in jackson-databind CVE-2019-20330Criticalcom.fasterxml.jackson.core:jackson-databind: Deserialization of Untrusted Data in jackson-databind CVE-2020-6858Mediumcom.hotels.styx:styx-api: HTTP Response Splitting in Styx CVE-2019-17569Mediumorg.apache.tomcat.embed:tomcat-embed-core: Potential HTTP request smuggling in Apache Tomcat CVE-2020-1935Mediumorg.apache.tomcat.embed:tomcat-embed-core: Potential HTTP request smuggling in Apache Tomcat CVE-2020-5245Highio.dropwizard:dropwizard-validation: Remote Code Execution (RCE) vulnerability in dropwizard-validation CVE-2020-7238Highio.netty:netty-handler: HTTP Request Smuggling in Netty

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Browse by ecosystem

Stop the waste.Protect your environment with Kodem.

Stop the waste.
Protect your environment with Kodem.