Maven Package Vulnerabilities

All 3,216 Java / JVM artifacts with known CVEs, ranked by live CVE volume — 8,471 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 151.io.dataease:dataease-plugin-common7 CVEs
  2. 152.io.jenkins.plugins:cavisson-ns-nd-integration7 CVEs
  3. 153.io.jenkins.plugins:miniorange-saml-sp7 CVEs
  4. 154.io.jenkins.plugins:warnings-ng7 CVEs
  5. 155.io.openremote:openremote-manager7 CVEs
  6. 156.io.vertx:vertx-core7 CVEs
  7. 157.io.vertx:vertx-web7 CVEs
  8. 158.net.gleske:jervis7 CVEs
  9. 159.net.opentsdb:opentsdb7 CVEs
  10. 160.org.apache.activemq:activemq-parent7 CVEs
  11. 161.org.apache.atlas:atlas-common7 CVEs
  12. 162.org.apache.axis:axis7 CVEs
  13. 163.org.apache.cxf:apache-cxf7 CVEs
  14. 164.org.apache.derby:derby7 CVEs
  15. 165.org.apache.ignite:ignite-core7 CVEs
  16. 166.org.apache.inlong:manager-web7 CVEs
  17. 167.org.apache.kafka:kafka-clients7 CVEs
  18. 168.org.apache.karaf:apache-karaf7 CVEs
  19. 169.org.apache.poi:poi7 CVEs
  20. 170.org.apache.syncope:syncope-core7 CVEs
  21. 171.org.geoserver:gs-main7 CVEs
  22. 172.org.infinispan:infinispan-core7 CVEs
  23. 173.org.jboss.resteasy:resteasy-client7 CVEs
  24. 174.org.jeecgframework.boot:jeecg-boot-base7 CVEs
  25. 175.org.jenkins-ci.plugins:artifactory7 CVEs
  26. 176.org.jenkins-ci.plugins:htmlpublisher7 CVEs
  27. 177.org.jenkins-ci.plugins:mercurial7 CVEs
  28. 178.org.jenkins-ci.plugins:openshift-deployer7 CVEs
  29. 179.org.jenkins-ci.plugins:rundeck7 CVEs
  30. 180.org.jruby:jruby-stdlib7 CVEs
  31. 181.org.keycloak:keycloak-server-spi-private7 CVEs
  32. 182.org.opencastproject:opencast-kernel7 CVEs
  33. 183.org.openidentityplatform.openam:openam-oauth27 CVEs
  34. 184.org.opensearch.plugin:opensearch-security7 CVEs
  35. 185.org.owasp.antisamy:antisamy7 CVEs
  36. 186.org.silverpeas.core:silverpeas-core7 CVEs
  37. 187.org.springframework.amqp:spring-amqp7 CVEs
  38. 188.org.springframework.data:spring-data-commons7 CVEs
  39. 189.org.springframework.data:spring-data-rest-core7 CVEs
  40. 190.org.springframework.security:spring-security-web7 CVEs
  41. 191.org.webjars:bootstrap7 CVEs
  42. 192.org.webjars.npm:jquery-ui7 CVEs
  43. 193.tech.powerjob:powerjob7 CVEs
  44. 194.axis:axis6 CVEs
  45. 195.ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may6 CVEs
  46. 196.ca.uhn.hapi.fhir:org.hl7.fhir.dstu36 CVEs
  47. 197.ca.uhn.hapi.fhir:org.hl7.fhir.r46 CVEs
  48. 198.ca.uhn.hapi.fhir:org.hl7.fhir.validation.cli6 CVEs
  49. 199.cn.hutool:hutool-json6 CVEs
  50. 200.com.coravy.hudson.plugins.github:github6 CVEs

Which Maven packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →