Maven Package Vulnerabilities

All 3,086 Java / JVM artifacts with known CVEs, ranked by live CVE volume — 7,979 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 451.com.groupon.jenkins-ci.plugins:DotCi3 CVEs
  2. 452.com.hazelcast:hazelcast-enterprise3 CVEs
  3. 453.com.ibeetl:beetl3 CVEs
  4. 454.com.inedo.proget:inedo-proget3 CVEs
  5. 455.com.liferay:com.liferay.account.admin.web3 CVEs
  6. 456.com.liferay:com.liferay.calendar.web3 CVEs
  7. 457.com.liferay:com.liferay.dynamic.data.mapping.form.web3 CVEs
  8. 458.com.liferay:com.liferay.frontend.editor.ckeditor.web3 CVEs
  9. 459.com.liferay:com.liferay.layout.admin.web3 CVEs
  10. 460.com.liferay:com.liferay.login.web3 CVEs
  11. 461.com.liferay:com.liferay.object.service3 CVEs
  12. 462.com.liferay:com.liferay.users.admin.web3 CVEs
  13. 463.com.linecorp.armeria:armeria3 CVEs
  14. 464.com.mchange:c3p03 CVEs
  15. 465.com.mikesamuel:json-sanitizer3 CVEs
  16. 466.com.moded.extendedchoiceparameter:dynamic_extended_choice_parameter3 CVEs
  17. 467.commons-beanutils:commons-beanutils3 CVEs
  18. 468.com.oviva.telematik:epa4all-client3 CVEs
  19. 469.com.reposilite:reposilite-backend3 CVEs
  20. 470.com.soasta.jenkins:cloudtest3 CVEs
  21. 471.com.xebialabs.ci:xlrelease-plugin3 CVEs
  22. 472.de.themoep:inventorygui3 CVEs
  23. 473.de.tracetronic.jenkins.plugins:ecutest3 CVEs
  24. 474.de.tum.in.ase:artemis-java-test-sandbox3 CVEs
  25. 475.dev.sigstore:sigstore-java3 CVEs
  26. 476.edu.internet2.middleware:shibboleth-identityprovider3 CVEs
  27. 477.fr.edf.jenkins.plugins:mac3 CVEs
  28. 478.io.antmedia:ant-media-server3 CVEs
  29. 479.io.grpc:grpc-protobuf3 CVEs
  30. 480.io.jenkins.docker:docker-plugin3 CVEs
  31. 481.io.jenkins.plugins:atlassian-bitbucket-server-integration3 CVEs
  32. 482.io.jenkins.plugins:code-coverage-api3 CVEs
  33. 483.io.jenkins.plugins:gitlab-branch-source3 CVEs
  34. 484.io.jenkins.plugins:pipeline-groovy-lib3 CVEs
  35. 485.io.netty.incubator:netty-incubator-codec-ohttp3 CVEs
  36. 486.io.netty:netty-codec-compression3 CVEs
  37. 487.io.netty:netty-handler-ssl-ocsp3 CVEs
  38. 488.io.netty:netty-resolver-dns3 CVEs
  39. 489.io.ratpack:ratpack-session3 CVEs
  40. 490.net.bull.javamelody:javamelody-core3 CVEs
  41. 491.net.lingala.zip4j:zip4j3 CVEs
  42. 492.net.praqma:rqm-plugin3 CVEs
  43. 493.org.apache.activemq:activemq-core3 CVEs
  44. 494.org.apache.activemq:activemq-web-console3 CVEs
  45. 495.org.apache.activemq:artemis-server3 CVEs
  46. 496.org.apache.archiva:archiva-common3 CVEs
  47. 497.org.apache.axis2:axis23 CVEs
  48. 498.org.apache.calcite:calcite-core3 CVEs
  49. 499.org.apache.cxf:cxf-rt-transports-http3 CVEs
  50. 500.org.apache.cxf.fediz:fediz-spring3 CVEs

Which Maven packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Start Free Scan →