Maven vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2023-34035Highorg.springframework.security:spring-security-config: Spring Security's authorization rules can be misconfigured when using multiple servletsCVE-2023-34036Mediumorg.springframework.hateoas:spring-hateoas: Spring HATEOAS vulnerable to Improper Neutralization of HTTP Headers for Scripting SyntaxCVE-2023-26512Criticalorg.apache.eventmesh:eventmesh-connector-rabbitmq: rabbitmq-connector plugin module in Apache EventMesh platforms allows attackers to send controlled messageCVE-2023-37462Criticalorg.xwiki.platform:xwiki-platform-skin-ui: org.xwiki.platform:xwiki-platform-skin-ui Eval Injection vulnerabilityCVE-2023-38286Highde.codecentric:spring-boot-admin-server: Spring-boot-admin sandbox bypass via crafted HTMLCVE-2023-3635Mediumcom.squareup.okio:okio: Okio Signed to Unsigned Conversion Error vulnerabilityCVE-2023-37965Mediumorg.jenkins-ci.plugins:elasticbox: Jenkins ElasticBox CI Plugin missing permission checkCVE-2023-37959Mediumorg.jenkins-ci.plugins:sumologic-publisher: Jenkins Sumologic Publisher Plugin missing permission checkCVE-2023-37958Highorg.jenkins-ci.plugins:sumologic-publisher: Jenkins Sumologic Publisher Plugin vulnerable to cross-site request forgeryCVE-2023-37964Highorg.jenkins-ci.plugins:elasticbox: Jenkins ElasticBox CI Plugin vulnerable to cross-site request forgeryCVE-2023-37961Highorg.jenkins-ci.plugins:assembla-auth: Jenkins Assembla Auth Plugin vulnerable to cross-site request forgeryCVE-2023-37962Highio.jenkins.plugins:benchmark-evaluator: Jenkins Benchmark Evaluator Plugin vulnerable to cross-site request forgeryCVE-2023-37960Mediumcom.mathworks.polyspace.jenkins:mathworks-polyspace: Jenkins MathWorks Polyspace Plugin vulnerable to arbitrary file readCVE-2023-37963Mediumio.jenkins.plugins:benchmark-evaluator: Jenkins Benchmark Evaluator Plugin missing permission checkCVE-2023-37951Mediumcom.mabl.integration.jenkins:mabl-integration: Jenkins mabl Plugin vulnerable to exposure of system-scooped credentialsCVE-2023-37956Mediumorg.jenkins-ci.plugins:test-results-aggregator: Jenkins Test Results Aggregator Plugin missing permission checkCVE-2023-37949Mediumio.jenkins.plugins:macstadium-orka: Jenkins Orka by MacStadium Plugin missing permission checkCVE-2023-37947Mediumorg.openshift.jenkins:openshift-login: Jenkins OpenShift Login Plugin vulnerable to Open RedirectCVE-2023-37946Highorg.openshift.jenkins:openshift-login: Jenkins OpenShift Login Plugin session fixation vulnerabilityCVE-2023-37952Mediumcom.mabl.integration.jenkins:mabl-integration: Jenkins mabl Plugin vulnerable to cross-site request forgeryCVE-2023-37950Mediumcom.mabl.integration.jenkins:mabl-integration: Jenkins mabl Plugin missing permission checkCVE-2023-37954Mediumcom.sonyericsson.hudson.plugins.rebuild:rebuild: Jenkins Rebuilder Plugin vulnerable to Cross Site Request ForgeryCVE-2023-37945Mediumio.jenkins.plugins:miniorange-saml-sp: Jenkins SAML Single Sign On(SSO) Plugin missing permission checkCVE-2023-37955Mediumorg.jenkins-ci.plugins:test-results-aggregator: Jenkins Test Results Aggregator Plugin vulnerable to Cross Site Request ForgeryCVE-2023-37953Mediumcom.mabl.integration.jenkins:mabl-integration: Jenkins mabl Plugin missing permission check

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo