Maven Package Vulnerabilities

All 3,122 Java / JVM artifacts with known CVEs, ranked by live CVE volume — 8,137 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 451.org.xwiki.platform:xwiki-platform-wiki-ui-mainwiki4 CVEs
  2. 452.org.yamcs:yamcs4 CVEs
  3. 453.software.amazon.awssdk.iotdevicesdk:aws-iot-device-sdk4 CVEs
  4. 454.at.yawk.lz4:lz4-java3 CVEs
  5. 455.cn.hutool:hutool-all3 CVEs
  6. 456.com.adobe.acs:acs-aem-commons3 CVEs
  7. 457.com.blackducksoftware.integration:blackduck-hub3 CVEs
  8. 458.com.cedarpolicy:cedar-java3 CVEs
  9. 459.com.epam.reportportal:service-api3 CVEs
  10. 460.com.fasterxml.jackson.core:jackson-core3 CVEs
  11. 461.com.geteasyqa:easyqa3 CVEs
  12. 462.com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer3 CVEs
  13. 463.com.google.guava:guava3 CVEs
  14. 464.com.google.protobuf:protobuf-kotlin3 CVEs
  15. 465.com.graphql-java:graphql-java3 CVEs
  16. 466.com.groupon.jenkins-ci.plugins:DotCi3 CVEs
  17. 467.com.hazelcast:hazelcast-enterprise3 CVEs
  18. 468.com.ibeetl:beetl3 CVEs
  19. 469.com.inedo.proget:inedo-proget3 CVEs
  20. 470.com.liferay:com.liferay.account.admin.web3 CVEs
  21. 471.com.liferay:com.liferay.calendar.web3 CVEs
  22. 472.com.liferay:com.liferay.dynamic.data.mapping.form.web3 CVEs
  23. 473.com.liferay:com.liferay.frontend.editor.ckeditor.web3 CVEs
  24. 474.com.liferay:com.liferay.layout.admin.web3 CVEs
  25. 475.com.liferay:com.liferay.login.web3 CVEs
  26. 476.com.liferay:com.liferay.object.service3 CVEs
  27. 477.com.liferay:com.liferay.users.admin.web3 CVEs
  28. 478.com.linecorp.armeria:armeria3 CVEs
  29. 479.com.mikesamuel:json-sanitizer3 CVEs
  30. 480.com.moded.extendedchoiceparameter:dynamic_extended_choice_parameter3 CVEs
  31. 481.commons-beanutils:commons-beanutils3 CVEs
  32. 482.com.oviva.telematik:epa4all-client3 CVEs
  33. 483.com.reposilite:reposilite-backend3 CVEs
  34. 484.com.soasta.jenkins:cloudtest3 CVEs
  35. 485.com.xebialabs.ci:xlrelease-plugin3 CVEs
  36. 486.de.themoep:inventorygui3 CVEs
  37. 487.de.tracetronic.jenkins.plugins:ecutest3 CVEs
  38. 488.de.tum.in.ase:artemis-java-test-sandbox3 CVEs
  39. 489.dev.sigstore:sigstore-java3 CVEs
  40. 490.edu.internet2.middleware:shibboleth-identityprovider3 CVEs
  41. 491.fr.edf.jenkins.plugins:mac3 CVEs
  42. 492.io.antmedia:ant-media-server3 CVEs
  43. 493.io.grpc:grpc-protobuf3 CVEs
  44. 494.io.jenkins.docker:docker-plugin3 CVEs
  45. 495.io.jenkins.plugins:atlassian-bitbucket-server-integration3 CVEs
  46. 496.io.jenkins.plugins:code-coverage-api3 CVEs
  47. 497.io.jenkins.plugins:gitlab-branch-source3 CVEs
  48. 498.io.jenkins.plugins:pipeline-groovy-lib3 CVEs
  49. 499.io.netty.incubator:netty-incubator-codec-ohttp3 CVEs
  50. 500.io.netty:netty-codec-compression3 CVEs

Which Maven packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Start Free Scan →