Maven vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2025-54380Mediumorg.opencastproject:opencast-common: Opencast still publishes global system account credentials CVE-2025-54385Highorg.xwiki.platform:xwiki-platform-oldcore: XWiki Platform vulnerable to SQL injection through XWiki#searchDocuments API CVE-2025-32429Criticalorg.xwiki.platform:xwiki-platform-distribution-war: XWiki Platform vulnerable to SQL injection through getdeleteddocuments.vm template sort parameter CVE-2025-7962Mediumorg.eclipse.angus:smtp: Jakarta Mail vulnerable to SMTP Injection CVE-2025-50151Highorg.apache.jena:jena: Apache Jena doesn't validate file access paths in configuration files uploaded by users with administrator access CVE-2025-49656Mediumorg.apache.jena:jena-fuseki: Apache Jena allows users with administrator access to create databases files outside the files area of the Fuseki server CVE-2025-7789Lowcom.xuxueli:xxl-job-admin: xxl-job has Inadequate Encryption Strength CVE-2025-7787Lowcom.xuxueli:xxl-job-core: XXL-JOB is vulnerable to SSRF attacks CVE-2024-9408Highorg.glassfish.main.admingui:console-common: Eclipse GlassFish is vulnerable to Server Side Request Forgery attacks through specific endpoints CVE-2024-9342Mediumorg.glassfish.main.admingui:console-common: Eclipse GlassFish is vulnerable to Login Brute Force attacks through unlimited failed login attempts CVE-2024-9343Mediumorg.glassfish.main.admingui:console-common: Eclipse GlassFish is vulnerable to Stored XSS attacks through its Administration Console CVE-2024-10029Mediumorg.glassfish.main.admingui:console-common: Eclipse GlassFish is vulnerable to Reflected XSS attacks through its Administration Console CVE-2024-10032Mediumorg.glassfish.main.admingui:console-cluster-plugin: Eclipse GlassFish is vulnerable to Stored XSS attacks through its Administration Console CVE-2024-10031Mediumorg.glassfish.main.admingui:console-common: Eclipse GlassFish is vulnerable to Stored XSS attacks through configuration file modifications CVE-2025-22227Mediumio.projectreactor.netty:reactor-netty-http: Reactor Netty HTTP is vulnerable to credential leaks during chained redirects CVE-2025-53622Mediumorg.dspace:dspace-api: DSpace is vulnerable to Path Traversal attacks when importing packages using Simple Archive Format CVE-2025-53621Mediumorg.dspace:dspace-api: DSpace is vulnerable to XML External Entity injection during archive imports CVE-2025-48795Mediumorg.apache.cxf:cxf-core: Apache CXF is vulnerable to DoS attacks as entire files are read into memory and logged CVE-2025-53836Criticalorg.xwiki.rendering:xwiki-rendering-transformation-macro: XWiki Rendering is vulnerable to RCE attacks when processing nested macros CVE-2025-53835Criticalorg.xwiki.rendering:xwiki-rendering-syntax-xhtml: XWiki Rendering is vulnerable to XSS attacks through insecure XHTML syntax CVE-2025-53689Highorg.apache.jackrabbit:jackrabbit-spi-commons: Apache Jackrabbit vulnerable to blind XXE attack due to insecure document build CVE-2024-41169Highorg.apache.zeppelin:zeppelin-interpreter: Apache Zeppelin exposes server resources to unauthenticated attackers CVE-2025-30402Highexecutorch: ExecuTorch vulnerable to Heap-based Buffer Overflow attack CVE-2025-48924Mediumorg.apache.commons:commons-lang3: Apache Commons Lang is vulnerable to Uncontrolled Recursion when processing long inputs CVE-2025-53864Mediumcom.nimbusds:nimbus-jose-jwt: Nimbus JOSE + JWT is vulnerable to DoS attacks when processing deeply nested JSON

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Browse by ecosystem

Stop the waste.Protect your environment with Kodem.

Stop the waste.
Protect your environment with Kodem.