Maven vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2023-31065Criticalorg.apache.inlong:manager-pojo: Apache InLong Insufficient Session Expiration vulnerability CVE-2023-31064Highorg.apache.inlong:manager-workflow: Apache InLong has Files or Directories Accessible to External Parties CVE-2023-31098Criticalorg.apache.inlong:manager-pojo: Apache InLong has Weak Password Requirements in Apache InLong CVE-2023-31066Criticalorg.apache.inlong:manager-service: Apache InLong has Files or Directories Accessible to External Parties in Apache InLong CVE-2023-28709Highorg.apache.tomcat.embed:tomcat-embed-core: Apache Tomcat - Fix for CVE-2023-24998 was incomplete CVE-2023-31062Criticalorg.apache.inlong:manager-pojo: Apache InLong Improper Privilege Management vulnerability CVE-2023-31206Highorg.apache.inlong:manager-pojo: Apache InLong Exposure of Resource to Wrong Sphere vulnerability CVE-2023-31058Highorg.apache.inlong:manager-pojo: Apache InLong Deserialization of Untrusted Data Vulnerability CVE-2023-28936Mediumorg.apache.openmeetings:openmeetings-db: Apache OpenMeetings insufficient authorization vulnerability CVE-2022-45048Highorg.apache.ranger:ranger: Apache Ranger code execution vulnerability in policy expressions CVE-2023-41044Loworg.graylog2:graylog2-server: Graylog server has partial path traversal vulnerability in Support Bundle feature CVE-2023-41045Loworg.graylog2:graylog2-server: Graylog vulnerable to insecure source port usage for DNS queries CVE-2023-41041Loworg.graylog2:graylog2-server: Graylog user session is still usable after logout CVE-2022-45802Criticalorg.apache.streampark:streampark-common_2.12: Apache StreamPark Path Traversal vulnerability CVE-2022-46365Criticalorg.apache.streampark:streampark: Apache StreamPark Improper Input Validation vulnerability CVE-2023-30465Mediumorg.apache.inlong:manager-pojo: Apache InLong SQL Injection vulnerability CVE-2023-27987Criticalorg.apache.linkis:linkis: Apache Linkis Authentication Bypass vulnerability CVE-2023-26119Criticalnet.sourceforge.htmlunit:htmlunit: HtmlUnit Code Injection vulnerability CVE-2023-27602Criticalorg.apache.linkis:linkis: Apache Linkis Unrestricted File Upload vulnerability CVE-2023-27603Criticalorg.apache.linkis:linkis: Apache Linkis Zip Slip issue CVE-2023-28685Highorg.jenkins-ci.plugins:absint-a3: Jenkins AbsInt a³ Plugin XML External Entity Reference vulnerability CVE-2021-28655Mediumorg.apache.zeppelin:zeppelin: Apache Zeppelin Improper Input Validation vulnerability CVE-2022-24697Criticalorg.apache.kylin:kylin-core-common: Apache Kylin vulnerable to remote code execution CVE-2023-32731Highio.grpc:grpc-protobuf: Connection confusion in gRPC CVE-2023-34150Mediumorg.apache.any23:apache-any23: Apache Any23 vulnerable to excessive memory usage

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo