Maven vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2025-31728Mediumorg.codefirst.jenkins.asakusasatellite:asakusa-satellite-plugin: Jenkins AsakusaSatellite Plugin Does not Mask API Keys via Job Configuration Form CVE-2025-31721Mediumorg.jenkins-ci.main:jenkins-core: Jenkins Missing Permission Check CVE-2025-31722Highorg.jenkins-ci.plugins:templating-engine: Jenkins Templating Engine Plugin Vulnerable to Arbitrary Code Execution CVE-2025-31725Mediumorg.ukiuni.monitor-remote-job-plugin:monitor-remote-job: Jenkins monitor-remote-job Plugin Stores Passwords Unencrypted CVE-2025-31723Mediumio.jenkins.plugins:simple-queue: Jenkins Simple Queue Plugin Cross-Site Request Forgery (CSRF)CVE-2025-31724Mediumorg.jenkins-ci.plugins:vmanager-plugin: Jenkins Cadence vManager Plugin Stores Verisium Manager vAPI keys Unencrypted CVE-2025-31720Mediumorg.jenkins-ci.main:jenkins-core: Jenkins Missing Permission Check CVE-2025-31129Highio.jooby:jooby-pac4j: jooby-pac4j: deserialization of untrusted data CVE-2025-30177Mediumorg.apache.camel:camel-undertow: Apache Camel Missing Header Out Filter Leads to Potential Bypass/Injection Vulnerability CVE-2024-56325Criticalorg.apache.pinot:pinot-broker: Apache Pinot Vulnerable to Authentication Bypass CVE-2025-30065Criticalorg.apache.parquet:parquet-avro: Apache Parquet Avro Module Vulnerable to Arbitrary Code Execution CVE-2025-27427Loworg.apache.activemq:artemis-server: Apache ActiveMQ Artemis User Without Create Address Permissions can Modify Address Routing-Type CVE-2025-29908Mediumio.netty.incubator:netty-incubator-codec-quic: Netty QUIC hash collision DoS attack CVE-2025-2961Mediumorg.noear:solon-view: Solon Vulnerable to Path Traversal CVE-2024-6875Mediumorg.infinispan:infinispan-query: Infinispan Potential Out of Memory Error via REST Compare API Buffer API CVE-2025-30067Loworg.apache.kylin:kylin: Apache Kylin Code Injection via JDBC Configuration Alteration CVE-2024-48944Loworg.apache.kylin:kylin-common-server: Apache Kylin Server-Side Request Forgery (SSRF) via `/kylin/api/xxx/diag` Endpoint CVE-2024-12369Mediumorg.wildfly.security:wildfly-elytron: WildFly Elytron OpenID Connect Client ExtensionOIDC authorization code injection attack CVE-2025-2559Mediumorg.keycloak:keycloak-services: Keycloak Denial of Service (DoS) Vulnerability via JWT Token Cache CVE-2025-29315Criticalorg.opendaylight.sfc:sfc-parent: OpenDaylight SFC Allows Unauthorized Privileged Execution via Crafted Request CVE-2025-29314Highorg.opendaylight.sfc:odl-sfc-ovs: OpenDaylight SFC Insecure Shiro Cookie Configuration CVE-2025-29313Highorg.opendaylight.sfc:odl-sfc-openflow-renderer: OpenDaylight SFC Denial of Service (DoS)CVE-2025-22223Mediumorg.springframework.security:spring-security-core: Spring Security Vulnerable to Authorization Bypass via Security Annotations CVE-2025-30474Mediumorg.apache.commons:commons-vfs2: Apache Commons VFS Exposure of Sensitive Information to an Unauthorized Actor CVE-2025-27553Highorg.apache.commons:commons-vfs2: Apache Commons VFS Has Relative Path Traversal Vulnerability

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Browse by ecosystem

Stop the waste.Protect your environment with Kodem.

Stop the waste.
Protect your environment with Kodem.