Maven vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2024-28213Criticalorg.ngrinder:ngrinder-core: nGrinder vulnerable to unsafe Java objects deserialization CVE-2024-2216Mediumorg.jenkins-ci.plugins:docker-build-step: Jenkins docker-build-step Plugin missing permission check CVE-2024-28162Mediumorg.jenkins-ci.plugins:delphix: Jenkins Delphix Plugin has improper SSL/TLS certificate validation CVE-2024-28159Mediumorg.jenkins-ci.plugins:svn-partial-release-mgr: Jenkins Subversion Partial Release Manager Plugin missing permission check CVE-2024-2215Mediumorg.jenkins-ci.plugins:docker-build-step: Jenkins docker-build-step Plugin Cross-Site Request Forgery vulnerability CVE-2024-28161Mediumorg.jenkins-ci.plugins:delphix: Jenkins Delphix Plugin has SSL/TLS certificate validation disabled by default CVE-2024-28160Mediumorg.jenkins-ci.plugins:icescrum: Jenkins iceScrum Plugin vulnerable to stored Cross-site Scripting CVE-2024-28150Highorg.jenkins-ci.plugins:htmlpublisher: Jenkins HTML Publisher Plugin Stored XSS vulnerability CVE-2024-28154Mediumcom.sonymobile.jenkins.plugins.mq:mq-notifier: Jenkins MQ Notifier Plugin exposes sensitive information in build logs CVE-2024-28149Highorg.jenkins-ci.plugins:htmlpublisher: Jenkins HTML Publisher Plugin does not properly sanitize input CVE-2024-28151Mediumorg.jenkins-ci.plugins:htmlpublisher: Jenkins HTML Publisher Plugin Path traversal vulnerability CVE-2024-28158Mediumorg.jenkins-ci.plugins:svn-partial-release-mgr: Jenkins Subversion Partial Release Manager Plugin vulnerable to Cross-Site Request Forgery CVE-2024-28157Highorg.jenkins-ci.plugins:gitbucket: Jenkins GitBucket Plugin vulnerable to stored Cross-site Scripting CVE-2024-28155Mediumcom.rapid7:jenkinsci-appspider-plugin: Jenkins AppSpider Plugin missing permission checks CVE-2024-28156Mediumorg.jenkins-ci.plugins:build-monitor-plugin: Jenkins Build Monitor View Plugin vulnerable to stored Cross-site Scripting CVE-2024-28153Mediumorg.jenkins-ci.plugins:dependency-check-jenkins-plugin: Jenkins OWASP Dependency-Check Plugin has stored XSS vulnerability CVE-2024-28152Mediumorg.jenkins-ci.plugins:cloudbees-bitbucket-branch-source: Jenkins Bitbucket Branch Source Plugin has incorrect trust policy behavior for pull requests CVE-2023-50740Mediumorg.apache.linkis:linkis: Apache Linkis DataSource: DataSource module Oracle SQL Database Password Logged CVE-2024-26580Criticalorg.apache.inlong:manager-common: Apache InLong: Logged-in user could exploit an arbitrary file read vulnerability CVE-2024-27140Mediumorg.apache.archiva:archiva-common: Apache Archiva Reflected Cross-site Scripting vulnerability CVE-2024-27139Highorg.apache.archiva:archiva: Apache Archiva Incorrect Authorization vulnerability CVE-2024-27138Highorg.apache.archiva:archiva: Apache Archiva Incorrect Authorization vulnerability CVE-2023-50378Mediumorg.apache.ambari:ambari: Apache Ambari: Various Cross site scripting problems CVE-2024-22871Highorg.clojure:clojure: Reading specially crafted serializable objects from an untrusted source may cause an infinite loop and denial of service CVE-2023-51775Mediumorg.bitbucket.b_c:jose4j: jose4j denial of service via specifically crafted JWE

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo