Maven vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2024-31862Mediumorg.apache.zeppelin:zeppelin-server: Apache Zeppelin: Denial of service with invalid notebook name CVE-2024-3046Highorg.eclipse.kura:org.eclipse.kura.web2: Eclipse Kura LogServlet vulnerability CVE-2022-47894Mediumorg.apache.zeppelin:sap: Apache Zeppelin SAP: connecting to a malicious SAP server allowed it to perform XXE CVE-2021-28656Mediumorg.apache.zeppelin:zeppelin-web: Apache Zeppelin CSRF vulnerability in the Credentials page CVE-2024-31860Mediumorg.apache.zeppelin:zeppelin-server: Apache Zeppelin Path Traversal vulnerability CVE-2024-1233Highorg.wildfly.security:wildfly-elytron-realm-token: WildFly Elytron: SSRF security issue CVE-2024-3366Lowcom.xuxueli:xxl-job-core: Xuxueli xxl-job template injection vulnerability CVE-2024-2700Highio.quarkus:quarkus-core: quarkus-core leaks local environment variables from Quarkus namespace during application's build CVE-2024-29834Mediumorg.apache.pulsar:pulsar-broker: Apache Pulsar: Improper Authorization For Namespace and Topic Management Endpoints CVE-2024-1300Mediumio.vertx:vertx-core: Eclipse Vert.x vulnerable to a memory leak in TCP servers CVE-2024-27609Mediumorg.bonitasoft.console:bonita-web-server: Bonita cross-site scripting vulnerability CVE-2024-23449Mediumorg.elasticsearch:elasticsearch: Elasticsearch Uncaught Exception leading to crash CVE-2024-23451Mediumorg.elasticsearch:elasticsearch: Elasticsearch Incorrect Authorization vulnerability CVE-2024-23450Mediumorg.elasticsearch:elasticsearch: Elasticsearch Uncontrolled Resource Consumption vulnerability CVE-2024-1023Mediumio.vertx:vertx-core: Eclipse Vert.x memory leak CVE-2024-25421Highorg.igniterealtime.openfire:xmppserver: Ignite Realtime Openfire privilege escalation vulnerability CVE-2024-25420Highorg.igniterealtime.openfire:xmppserver: Ignite Realtime Openfire privilege escalation vulnerability CVE-2024-29025Mediumio.netty:netty-codec-http: Netty's HttpPostRequestDecoder can OOM CVE-2023-5685Highorg.jboss.xnio:xnio-api: XNIO denial of service vulnerability CVE-2024-29131Mediumorg.apache.commons:commons-configuration2: Apache Commons Configuration: StackOverflowError adding property in AbstractListDelimiterHandler.flattenIterator()CVE-2024-29133Mediumorg.apache.commons:commons-configuration2: Apache Commons Configuration: StackOverflowError calling ListDelimiterHandler.flatten(Object, int) with a cyclical object tree CVE-2022-4963Mediumorg.folio:spring-module-core: SQL injection in Folio Spring Module Core CVE-2024-22258Mediumorg.springframework.security:spring-security-oauth2-authorization-server: Improper Authentication in Spring Authorization Server CVE-2024-23821Mediumorg.geoserver:gs-gwc: GeoServer's GWC Demos Page vulnerable to Stored Cross-Site Scripting (XSS)CVE-2024-23819Mediumorg.geoserver.extension:gs-mapml: GeoServer's MapML HTML Page vulnerable to Stored Cross-Site Scripting (XSS)

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo