Maven vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2023-50775Mediumorg.jenkins-ci.plugins:ec2-deployment-dashboard: Cross-site request forgery vulnerability in Jenkins Deployment Dashboard PluginCVE-2023-50770Mediumorg.jenkins-ci.plugins:oic-auth: Password stored in a recoverable format by Jenkins OpenId Connect Authentication Plugin CVE-2023-50769Mediumorg.sonatype.nexus.ci:nexus-jenkins-plugin: Jenkins Nexus Platform Plugin missing permission checkCVE-2023-50766Highorg.sonatype.nexus.ci:nexus-jenkins-plugin: Jenkins Nexus Platform Plugin Cross-Site Request Forgery vulnerabilityCVE-2023-50776Mediumcom.cloudtp.jenkins:paaslane-estimate: Tokens stored in plain text by PaaSLane Estimate Plugin CVE-2023-50774Highorg.jenkins-ci.plugins:htmlresource: Cross-site request forgery vulnerability in Jenkins HTMLResource PluginCVE-2023-50764Highorg.jenkins-ci.plugins:scriptler: Arbitrary file deletion vulnerability in Jenkins Scriptler Plugin CVE-2023-50778Mediumcom.cloudtp.jenkins:paaslane-estimate: Cross-Site Request Forgery in Jenkins PaaSLane Estimate PluginCVE-2023-50767Highorg.sonatype.nexus.ci:nexus-jenkins-plugin: Jenkins Nexus Platform Plugin missing permission checkCVE-2023-50765Mediumorg.jenkins-ci.plugins:scriptler: Missing permission check in Jenkins Scriptler PluginCVE-2023-50768Mediumorg.sonatype.nexus.ci:nexus-jenkins-plugin: Jenkins Nexus Platform Plugin Cross-Site Request Forgery vulnerabilityCVE-2023-47324Mediumorg.silverpeas.core:silverpeas-core-web: Cross-site Scripting in silverpeasCVE-2023-47325Mediumorg.silverpeas.core:silverpeas-core-web: Broken access control in SilverpeasCVE-2023-47327Mediumorg.silverpeas.core:silverpeas-core-web: Broken access control in SilverpeasCVE-2023-47326Highorg.silverpeas.core:silverpeas-core: Cross Site Request Forgery in SilverpeasCVE-2023-47323Highorg.silverpeas.core:silverpeas-core-api: Missing access control in SilverpeasCVE-2023-47321Mediumorg.silverpeas.core:silverpeas-core-web: Broken access control in SilverpeasCVE-2023-47322Highorg.silverpeas.core:silverpeas-core-web: Cross Site Request Forgery in SilverpeasCVE-2023-47320Loworg.silverpeas.core:silverpeas-core-war: Broken access control in SilverpeasCVE-2023-50422Criticalcom.sap.cloud.security:java-security: Improper JWT Signature Validation in SAP Security Services Library CVE-2023-6379Mediumorg.opencms:opencms-core: Alkacon OpenCMS XSS via Mercury templateCVE-2023-50449Highcom.jfinal:jfinal: Directory Traversal in JFinalCMSCVE-2023-6394Highio.quarkus:quarkus-smallrye-graphql-client: Authorization bypass in QuarkusCVE-2023-49486Mediumcom.jfinal:jfinal: Cross-site Scripting in JFinalCMSCVE-2023-49487Mediumcom.jfinal:jfinal: Cross-site Scripting in JFinalCMS

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo