Maven vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2023-41835Highorg.apache.struts:struts2-core: Apache Struts Improper Control of Dynamically-Managed Code Resources vulnerabilityCVE-2023-49093Criticalorg.htmlunit:htmlunit: HtmlUnit vulnerable to Remote Code Execution (RCE) via XSTLCVE-2023-48967Criticalorg.noear:solon: Solon is vulnerable to Deserialization of Untrusted DataCVE-2023-48910Criticalio.github.microcks:microcks: Microcks contains a Server-Side Request Forgery (SSRF) via the component /jobs and /artifact/downloadCVE-2023-6481Highch.qos.logback:logback-core: Logback is vulnerable to an attacker mounting a Denial-Of-Service attack by sending poisoned dataCVE-2023-48887Criticalorg.jupiter-rpc:jupiter-rpc: Jupiter allows attackers to execute arbitrary commands via sending a crafted RPC requestGHSA-6G3J-P5G6-992FMediumorg.opensearch:opensearch: OpenSearch StackOverflow vulnerabilityCVE-2023-49371Criticalcom.ruoyi:ruoyi: RuoYi vulnerable to SQL injection vulnerabilityCVE-2023-49735Highorg.apache.tiles:tiles-core: Apache Tiles: Unvalidated input may lead to path traversal and XXECVE-2023-4218Mediumorg.eclipse.platform:org.eclipse.core.runtime: Eclipse IDE XXE in eclipse.platformCVE-2023-49733Criticalorg.apache.cocoon:cocoon: Apache Cocoon Improper Restriction of XML External Entity Reference vulnerabilityCVE-2023-49620Mediumorg.apache.dolphinscheduler:dolphinscheduler-api: Apache DolphinScheduler Missing Authorization vulnerabilityCVE-2022-45135Criticalorg.apache.cocoon:cocoon: Apache Cocoon SQL Injection vulnerabilityCVE-2022-2232Loworg.keycloak:keycloak-ldap-federation: Keycloak vulnerable to LDAP Injection on UsernameForm LoginCVE-2023-49674Mediumio.jenkins.plugins:neuvector-vulnerability-scanner: Jenkins NeuVector Vulnerability Scanner Plugin missing permission checkCVE-2023-49655Highorg.jenkins-ci.plugins:matlab: Jenkins MATLAB Plugin cross-site request forgery vulnerabilityCVE-2023-49656Highorg.jenkins-ci.plugins:matlab: Jenkins MATLAB Plugin XML External Entity vulnerabilityCVE-2023-49652Mediumorg.jenkins-ci.plugins:google-compute-engine: Jenkins Google Compute Engine Plugin has incorrect permission checksCVE-2023-49653Mediumorg.jenkins-ci.plugins:jira: Jenkins Jira Plugin vulnerable to exposure of system-scoped credentialsCVE-2023-49673Mediumio.jenkins.plugins:neuvector-vulnerability-scanner: Jenkins NeuVector Vulnerability Scanner Plugin Cross-Site Request Forgery vulnerabilityCVE-2023-49654Highorg.jenkins-ci.plugins:matlab: Jenkins MATLAB Plugin missing permission checksCVE-2023-6378Highch.qos.logback:logback-classic: logback serialization vulnerabilityCVE-2023-46589Highorg.apache.tomcat:tomcat-catalina: Apache Tomcat Improper Input Validation vulnerabilityCVE-2022-41678Highorg.apache.activemq:apache-activemq: Apache ActiveMQ Deserialization of Untrusted Data vulnerabilityCVE-2023-48848Highcom.bstek.ureport:ureport2-core: ureport arbitrary file read vulnerability

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo