Maven Package Vulnerabilities

All 3,133 Java / JVM artifacts with known CVEs, ranked by live CVE volume — 8,177 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 1,151.org.openidentityplatform.openam:openam-auth-webauthn2 CVEs
  2. 1,152.org.openmrs.web:openmrs-web2 CVEs
  3. 1,153.org.opennms:opennms-webapp-rest2 CVEs
  4. 1,154.org.openshift.jenkins:openshift-login2 CVEs
  5. 1,155.org.owasp:dependency-check-maven2 CVEs
  6. 1,156.org.pac4j:pac4j-core2 CVEs
  7. 1,157.org.primefaces:primefaces2 CVEs
  8. 1,158.org.python:jython-standalone2 CVEs
  9. 1,159.org.richfaces:richfaces2 CVEs
  10. 1,160.org.rundeck:rundeck-core2 CVEs
  11. 1,161.org.sakaiproject.kernel:sakai-kernel-impl2 CVEs
  12. 1,162.org.scala-sbt:sbt2 CVEs
  13. 1,163.org.silverpeas.core:silverpeas-core-api2 CVEs
  14. 1,164.org.sonatype.nexus:nexus-core2 CVEs
  15. 1,165.org.sonatype.nexus:nexus-repository2 CVEs
  16. 1,166.org.springframework.ai:spring-ai-advisors-vector-store2 CVEs
  17. 1,167.org.springframework.ai:spring-ai-client-chat2 CVEs
  18. 1,168.org.springframework.batch:spring-batch-core2 CVEs
  19. 1,169.org.springframework.boot:spring-boot-starter-actuator2 CVEs
  20. 1,170.org.springframework.cloud:spring-cloud-gateway-server2 CVEs
  21. 1,171.org.springframework.grpc:spring-grpc2 CVEs
  22. 1,172.org.springframework.security.oauth:spring-security-oauth2 CVEs
  23. 1,173.org.springframework.security:spring-security-oauth2-authorization-server2 CVEs
  24. 1,174.org.springframework.security:spring-security-oauth2-client2 CVEs
  25. 1,175.org.springframework.security:spring-security-oauth2-jose2 CVEs
  26. 1,176.org.springframework:spring-beans2 CVEs
  27. 1,177.org.springframework:spring-oxm2 CVEs
  28. 1,178.org.springframework:spring-websocket2 CVEs
  29. 1,179.org.springframework.webflow:spring-webflow2 CVEs
  30. 1,180.org.tap4j:tap2 CVEs
  31. 1,181.org.verapdf:core2 CVEs
  32. 1,182.org.verapdf:core-arlington2 CVEs
  33. 1,183.org.verapdf:core-jakarta2 CVEs
  34. 1,184.org.verapdf:library2 CVEs
  35. 1,185.org.verapdf:library-arlington2 CVEs
  36. 1,186.org.verapdf:library-jakarta2 CVEs
  37. 1,187.org.verapdf:parser2 CVEs
  38. 1,188.org.verapdf:verapdf-library2 CVEs
  39. 1,189.org.verapdf:verapdf-library-arlington2 CVEs
  40. 1,190.org.verapdf:verapdf-library-jakarta2 CVEs
  41. 1,191.org.webjars:swagger-ui2 CVEs
  42. 1,192.org.wildfly.bom:wildfly2 CVEs
  43. 1,193.org.wildfly.security:wildfly-elytron-http-oidc2 CVEs
  44. 1,194.org.wso2.identity.apps:authentication-portal2 CVEs
  45. 1,195.org.wso2.is:identity-server-parent2 CVEs
  46. 1,196.org.xwiki.commons:xwiki-commons-core2 CVEs
  47. 1,197.org.xwiki.commons:xwiki-commons-velocity2 CVEs
  48. 1,198.org.xwiki.contrib:application-ckeditor-ui2 CVEs
  49. 1,199.org.xwiki.contrib.blog:application-blog-ui2 CVEs
  50. 1,200.org.xwiki.contrib:macro-fullcalendar-pom2 CVEs

Which Maven packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Start Free Scan →