Maven Package Vulnerabilities

All 3,054 Java / JVM artifacts with known CVEs, ranked by live CVE volume — 7,837 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 2,701.org.keycloak:keycloak-js-admin-client1 CVE
  2. 2,702.org.keycloak:keycloak-model-storage-services1 CVE
  3. 2,703.org.keycloak:keycloak-oidc-client-adapter-pom1 CVE
  4. 2,704.org.kie.server:kie-server-common1 CVE
  5. 2,705.org.kohsuke:libpam4j1 CVE
  6. 2,706.org.kordamp.json:json-lib-core1 CVE
  7. 2,707.org.lilicurroad.jenkins:packageversion1 CVE
  8. 2,708.org.linlinjava:litemall-wx-api1 CVE
  9. 2,709.org.liquibase:liquibase-core1 CVE
  10. 2,710.org.lucee:lucee1 CVE
  11. 2,711.org.mindrot:jbcrypt1 CVE
  12. 2,712.org.mitre:openid-connect-parent1 CVE
  13. 2,713.org.mock-server:mockserver1 CVE
  14. 2,714.org.mongodb:mongodb-driver1 CVE
  15. 2,715.org.mongodb:mongodb-driver-legacy1 CVE
  16. 2,716.org.mongodb:mongodb-driver-sync1 CVE
  17. 2,717.org.mongodb:mongo-java-driver1 CVE
  18. 2,718.org.mortbay.jetty:jetty-webapp1 CVE
  19. 2,719.org.mozilla:rhino1 CVE
  20. 2,720.org.msgpack:msgpack-core1 CVE
  21. 2,721.org.mustangproject:library1 CVE
  22. 2,722.org.mustangproject:validator1 CVE
  23. 2,723.org.mvel:mvel21 CVE
  24. 2,724.org.mybatis:mybatis1 CVE
  25. 2,725.org.nanohttpd:nanohttpd-nanolets1 CVE
  26. 2,726.org.neo4j:neo4j-cypher1 CVE
  27. 2,727.org.neo4j:neo4j-enterprise1 CVE
  28. 2,728.org.neo4j:neo4j-kernel1 CVE
  29. 2,729.org.neo4j.procedure:apoc-core1 CVE
  30. 2,730.org.netbeans.html:pom1 CVE
  31. 2,731.org.ngrinder:ngrinder-core1 CVE
  32. 2,732.org.ninjaframework:ninja-core1 CVE
  33. 2,733.org.noear:solon-faas-luffy1 CVE
  34. 2,734.org.noear:solon-view1 CVE
  35. 2,735.org.noear:solon-web-staticfiles1 CVE
  36. 2,736.org.nokogiri:nekohtml1 CVE
  37. 2,737.org.nuxeo.ecm.platform:nuxeo-platform-oauth1 CVE
  38. 2,738.org.ohdsi:WebAPI1 CVE
  39. 2,739.org.omnifaces:omnifaces1 CVE
  40. 2,740.org.onosproject:onos-base1 CVE
  41. 2,741.org.openapitools:openapi-generator-maven-plugin1 CVE
  42. 2,742.org.openapitools:openapi-generator-project1 CVE
  43. 2,743.org.opencastproject:opencast-common-jpa-impl1 CVE
  44. 2,744.org.opencastproject:opencast-elasticsearch-impl1 CVE
  45. 2,745.org.opencastproject:opencast-oaipmh-api1 CVE
  46. 2,746.org.opencastproject:opencast-publication-service-oaipmh-remote1 CVE
  47. 2,747.org.opencastproject:opencast-user-interface-configuration1 CVE
  48. 2,748.org.opencrx:opencrx-core-config1 CVE
  49. 2,749.org.opencrx:opencrx-gradle1 CVE
  50. 2,750.org.opendaylight.aaa:aaa-artifacts1 CVE

Which Maven packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Start Free Scan →