Maven vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2019-17513Highio.ratpack:ratpack-core: io.ratpack:ratpack-core vulnerable to Improper Neutralization of Special Elements in Output ('Injection')CVE-2019-17359Highorg.bouncycastle:bcprov-jdk14: Out-of-Memory Error in Bouncy Castle CryptoCVE-2019-17195Criticalcom.nimbusds:nimbus-jose-jwt: Improper Check for Unusual or Exceptional Conditions in Connect2id Nimbus JOSE+JWTCVE-2019-17495Criticalswagger-ui: Cross-site scripting in Swagger-UICVE-2019-12404Mediumorg.apache.jspwiki:jspwiki-war: Cross-site scripting in Apache JSPWikiCVE-2019-10089Mediumorg.apache.jspwiki:jspwiki-war: Cross-site scripting in Apache JSPWikiCVE-2019-10087Mediumorg.apache.jspwiki:jspwiki-war: Cross-site scripting in Apache JSPWikiCVE-2019-10090Mediumorg.apache.jspwiki:jspwiki-war: Cross-site scripting in Apache JSPWikiCVE-2019-16869Highio.netty:netty-all: HTTP Request Smuggling in NettyCVE-2019-12402Highorg.apache.commons:commons-compress: Denial of Service in Apache Commons CompressCVE-2019-10071Criticalorg.apache.tapestry:tapestry-core: Timing attack on HMAC signature comparison in Apache TapestryCVE-2019-16335Criticalcom.fasterxml.jackson.core:jackson-databind: Polymorphic Typing issue in FasterXML jackson-databindCVE-2019-14540Criticalcom.fasterxml.jackson.core:jackson-databind: Polymorphic Typing issue in FasterXML jackson-databindCVE-2019-16148Mediumorg.sakaiproject:chat-base: Cross-site scripting in SakaiCVE-2019-10199Highorg.keycloak:keycloak-core: Improper Input Validation and Cross-Site Request Forgery in KeycloakCVE-2019-10201Mediumorg.keycloak:keycloak-core: Improper Verification of Cryptographic Signature in keycloakCVE-2019-11777Mediumorg.eclipse.paho:org.eclipse.paho.client.mqttv3: Improper Handling of Exceptional Conditions and Origin Validation Error in Eclipse Paho Java client libraryCVE-2019-10753Mediumcom.diffplug.spotless:spotless-eclipse-wtp: Incorrect Resource Transfer Between Spheres in eclipse-wtpCVE-2019-5475Highorg.sonatype.nexus.plugins:nexus-yum-repository-plugin: OS Command Injection in Nexus Yum Repository PluginCVE-2019-12400Mediumorg.apache.santuario:xmlsec: Improper input validation in Apache Santuario XML Security for JavaCVE-2019-15477Mediumorg.jooby:jooby: Cross-site Scripting in JoobyCVE-2019-15488Mediumorg.igniterealtime.openfire:xmppserver: Cross-site Scripting in Ignite Realtime OpenfireCVE-2019-12397Mediumorg.apache.ranger:ranger: Cross-site scripting in Apache RangerCVE-2019-10099Highorg.apache.spark:spark-core_2.11: Sensitive data written to disk unencrypted in SparkCVE-2019-10088Highorg.apache.tika:tika-core: Allocation of Resources Without Limits or Throttling in Apache Tika

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo