Maven vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2017-7686Highorg.apache.ignite:ignite-core: Apache Ignite communicates to an external PHP server where sensitive information is sent CVE-2018-8032Mediumorg.apache.axis:axis: Moderate severity vulnerability that affects apache axis CVE-2014-3596Mediumorg.apache.axis:axis: Improper Validation of Certificates in apache axis CVE-2018-8030Highorg.apache.qpid:apache-qpid-broker-j: Denial of service vulnerability exists when .NET and .NET Core improperly process XML documents CVE-2016-2166Mediumorg.apache.qpid:proton-j: Moderate severity vulnerability that affects org.apache.qpid:proton-j CVE-2016-3094Mediumorg.apache.qpid:qpid-broker: Improper Input Validation in org.apache.qpid:qpid-broker CVE-2016-4432Criticalorg.apache.qpid:qpid-broker-plugins-amqp-0-8-protocol: AMQP 0-8, 0-9, 0-91, and 0-10 connection handling in Apache Qpid Java before 6.0.3 might allow remote attackers to bypass authentication CVE-2015-5241Mediumorg.apache.juddi:juddi-client: Moderate severity vulnerability that affects org.apache.juddi:juddi-client CVE-2017-9805Highorg.apache.struts:struts2-rest-plugin: REST Plugin in Apache Struts uses an XStreamHandler with an instance of XStream for deserialization without any type filtering CVE-2017-9804Highorg.apache.struts:struts2-core: Apache Struts allows entering a custom URL in a form field if built-in URLValidator is used CVE-2017-9793Highorg.apache.struts:struts2-rest-plugin: The REST Plugin in Apache Struts is using an outdated XStream library CVE-2017-9787Highorg.apache.struts:struts2-core: Spring AOP functionality (Struts) vulnerable to DoS attack CVE-2017-7672Mediumorg.apache.struts:struts2-core: Apache Struts Improper Input Validation vulnerability CVE-2017-15707Mediumorg.apache.struts:struts2-rest-plugin: Moderate severity vulnerability that affects org.apache.struts:struts2-rest-plugin CVE-2017-12611Criticalorg.apache.struts:struts2-core: Apache Struts 2.0.1 uses an unintentional expression in a Freemarker tag instead of string literal CVE-2018-1327Highorg.apache.struts:struts2-rest-plugin: Apache Struts REST Plugin can potentially allow a DoS attack CVE-2018-7489Criticalcom.fasterxml.jackson.core:jackson-databind: FasterXML jackson-databind allows unauthenticated remote code execution CVE-2018-1000180Highorg.bouncycastle:bcprov-jdk14: Bouncy Castle has a flaw in the Low-level interface to RSA key pair generator CVE-2018-12538Highorg.eclipse.jetty:jetty-server: Access and integrity issue within Eclipse Jetty CVE-2018-11040Mediumorg.springframework:spring-core: Moderate severity vulnerability that affects org.springframework:spring-core CVE-2018-11039Mediumorg.springframework:spring-web: Spring Framework Cross Site Tracing (XST)CVE-2018-8008Mediumorg.apache.storm:storm-core: ZipSlip in org.apache.storm:storm-core CVE-2017-3159Criticalorg.apache.camel:camel-snakeyaml: Apache Camel's camel-snakeyaml component is vulnerable to Java object de-serialization CVE-2017-7525Criticalcom.fasterxml.jackson.core:jackson-databind: jackson-databind is vulnerable to a deserialization flaw CVE-2018-1000632Highorg.dom4j:dom4j: Dom4j contains a XML Injection vulnerability

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo