Maven vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2024-38827Mediumorg.springframework.security:spring-security-core: Spring Framework has Authorization Bypass for Case Sensitive ComparisonsCVE-2024-35371Highio.antmedia:ant-media-server: Ant-Media-Server vulnerable to Improper Output Neutralization for LogsCVE-2024-49203Highio.github.openfeign.querydsl:querydsl-jpa: Querydsl vulnerable to HQL injection through orderByCVE-2024-54003Highio.jenkins.plugins:simple-queue: Jenkins Simple Queue Plugin has stored cross-site scripting (XSS) vulnerabilityCVE-2024-54004Mediumaendter.jenkins.plugins:filesystem-list-parameter-plugin: Jenkins Filesystem List Parameter Plugin has Path Traversal vulnerabilityCVE-2024-53267Mediumdev.sigstore:sigstore-java: sigstore-java has vulnerability with bundle verificationCVE-2024-10039Highorg.keycloak:keycloak-core: Keycloak mTLS Authentication Bypass via Reverse Proxy TLS Termination CVE-2024-9666Mediumorg.keycloak:keycloak-quarkus-server: Keycloak proxy header handling Denial-of-Service (DoS) vulnerabilityCVE-2024-10451Highorg.keycloak:keycloak-quarkus-server: Keycloak Build Process Exposes Sensitive DataCVE-2024-10492Mediumorg.keycloak:keycloak-quarkus-server: Keycloak Path Traversal Vulnerability Due to External Control of File Name or PathCVE-2024-10270Highorg.keycloak:keycloak-services: org.keycloak:keycloak-services has Inefficient Regular Expression ComplexityCVE-2024-52797Mediumorg.opencastproject:opencast-elasticsearch-impl: Searching Opencast may cause a denial of serviceCVE-2024-31141Mediumorg.apache.kafka:kafka-clients: Apache Kafka Clients: Privilege escalation to filesystem read-access via automatic ConfigProviderCVE-2024-52506Highorg.graylog:graylog-parent: Graylog concurrent PDF report rendering can leak other users' reportsCVE-2024-52318Mediumorg.apache.tomcat:tomcat-jasper: Apache Tomcat - XSS in generated JSPsCVE-2024-52317Mediumorg.apache.tomcat.embed:tomcat-embed-core: Apache Tomcat Request and/or response mix-upCVE-2024-52316Criticalorg.apache.tomcat:tomcat-catalina: Apache Tomcat - Authentication BypassCVE-2024-38828Mediumorg.springframework:spring-webmvc: Spring MVC controller vulnerable to a DoS attackCVE-2023-4639Highio.undertow:undertow-core: Undertow incorrectly parses cookiesCVE-2023-1419Mediumio.debezium:debezium-connector-mysql: Debezium database connector has a script injection vulnerabilityCVE-2024-39610Mediumorg.fitnesse:fitnesse: FitNesse Cross-site scriptingCVE-2024-42499Mediumorg.fitnesse:fitnesse: FitNesse Path TraversalCVE-2024-52554Highio.jenkins.plugins:shared-library-version-override: Script security bypass vulnerability in Jenkins Shared Library Version Override Plugin CVE-2024-52552Highorg.jenkins-ci.plugins:authorize-project: Stored XSS vulnerability in Jenkins Authorize Project Plugin CVE-2024-52551Highorg.jenkinsci.plugins:pipeline-model-parent: Restarting a run with revoked script approval allowed by Jenkins Pipeline: Declarative Plugin

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo