Maven vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2023-40037Mediumorg.apache.nifi:nifi-dbcp-base: Apache NiFi Insufficient Property Validation vulnerabilityCVE-2023-37914Criticalorg.xwiki.platform:xwiki-platform-invitation-ui: XWiki Platform privilege escalation (PR)/RCE from account through Invitation subject/messageCVE-2023-40315Mediumorg.opennms:opennms-webapp-rest: OpenNMS privilege escalation vulnerabilityCVE-2023-40313Highorg.opennms:opennms-base-assembly: OpenNMS vulnerable to remote code executionCVE-2023-38905Mediumorg.jeecgframework.boot:jeecg-boot-parent: Jeecg-boot SQL Injection vulnerabilityCVE-2023-36106Hightech.powerjob:powerjob: PowerJob incorrect access control vulnerabilityCVE-2023-40349Mediumorg.jenkins-ci.plugins:gogs-webhook: Jenkins Gogs Plugin vulnerable to unsafe default behavior and information disclosureCVE-2023-40344Mediumorg.jenkins-ci.plugins:delphix: Jenkins Delphix Plugin missing permission checkCVE-2023-40348Mediumorg.jenkins-ci.plugins:gogs-webhook: Jenkins Gogs Plugin vulnerable to unsafe default behavior and information disclosureCVE-2023-40351Mediumorg.jenkins-ci.plugins:favorite-view: Jenkins Favorite View Plugin cross-site request forgery vulnerabilityCVE-2023-40350Highorg.jenkins-ci.plugins:docker-swarm: Jenkins Docker Swarm Plugin stored cross-site scripting vulnerabilityCVE-2023-40345Mediumorg.jenkins-ci.plugins:delphix: Jenkins Delphix Plugin vulnerable to exposure of system-scoped credentialsCVE-2023-40346Highio.jenkins.plugins:shortcut-job: Jenkins Shortcut Job Plugin stored cross-site scripting vulnerabilityCVE-2023-40339Mediumorg.jenkins-ci.plugins:config-file-provider: Jenkins Config File Provider Plugin improper credential masking vulnerabilityCVE-2023-40347Mediumorg.jenkins-ci.plugins:maven-artifact-choicelistprovider: Jenkins Maven Artifact ChoiceListProvider (Nexus) Plugin vulnerable to exposure of system-scoped credentialsCVE-2023-40343Lowio.jenkins.plugins:tuleap-oauth: Jenkins Tuleap Authentication Plugin non-constant time token comparisonCVE-2023-40341Mediumio.jenkins.blueocean:blueocean: Jenkins Blue Ocean Plugin cross-site request forgery vulnerabilityCVE-2023-40340Mediumorg.jenkins-ci.plugins:nodejs: Jenkins NodeJS Plugin improper credential masking vulnerabilityCVE-2023-40342Highorg.jenkins-ci.plugins:flaky-test-handler: Jenkins Flaky Test Handler Plugin stored cross-site scripting vulnerabilityCVE-2023-40337Mediumorg.jenkins-ci.plugins:cloudbees-folder: Jenkins Folders Plugin cross-site request forgery vulnerabilityCVE-2023-40338Mediumorg.jenkins-ci.plugins:cloudbees-folder: Jenkins Folders Plugin information disclosure vulnerabilityCVE-2023-40336Highorg.jenkins-ci.plugins:cloudbees-folder: Jenkins Folders Plugin cross-site request forgery vulnerabilityCVE-2023-38889Criticalorg.alluxio:alluxio-parent: Alluxio vulnerable to arbitrary code executionCVE-2023-40311Mediumorg.opennms:opennms-webapp: OpenNMS vulnerable to Cross-site ScriptingCVE-2023-40312Mediumorg.opennms:opennms-webapp: OpenNMS vulnerable to Cross-site Scripting

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo