Maven Package Vulnerabilities

All 3,225 Java / JVM artifacts with known CVEs, ranked by live CVE volume — 8,517 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 451.org.mapfish.print:print-servlet4 CVEs
  2. 452.org.neo4j:neo4j4 CVEs
  3. 453.org.neo4j.procedure:apoc4 CVEs
  4. 454.org.openhab.ui.bundles:org.openhab.ui.cometvisu4 CVEs
  5. 455.org.openrefine:database4 CVEs
  6. 456.org.openrefine:main4 CVEs
  7. 457.org.opensaml:opensaml4 CVEs
  8. 458.org.ops4j.pax.logging:pax-logging-log4j24 CVEs
  9. 459.org.pf4j:pf4j4 CVEs
  10. 460.org.restlet.jse:org.restlet4 CVEs
  11. 461.org.rundeck:rundeck4 CVEs
  12. 462.org.silverpeas.core:silverpeas-core-war4 CVEs
  13. 463.org.sonatype.nexus.ci:nexus-jenkins-plugin4 CVEs
  14. 464.org.springframework.cloud:spring-cloud-function-context4 CVEs
  15. 465.org.springframework.graphql:spring-graphql4 CVEs
  16. 466.org.springframework.kafka:spring-kafka4 CVEs
  17. 467.org.springframework.security:spring-security-saml2-service-provider4 CVEs
  18. 468.org.springframework.webflow:spring-webflow4 CVEs
  19. 469.org.thymeleaf:thymeleaf-spring54 CVEs
  20. 470.org.wildfly:wildfly-undertow4 CVEs
  21. 471.org.xwiki.platform:xwiki-platform-attachment-ui4 CVEs
  22. 472.org.xwiki.platform:xwiki-platform-flamingo-theme-ui4 CVEs
  23. 473.org.xwiki.platform:xwiki-platform-notifications-ui4 CVEs
  24. 474.org.xwiki.platform:xwiki-platform-scheduler-ui4 CVEs
  25. 475.org.xwiki.platform:xwiki-platform-search-ui4 CVEs
  26. 476.org.xwiki.platform:xwiki-platform-skin-skinx4 CVEs
  27. 477.org.xwiki.platform:xwiki-platform-wiki-ui-mainwiki4 CVEs
  28. 478.org.yamcs:yamcs4 CVEs
  29. 479.software.amazon.awssdk.iotdevicesdk:aws-iot-device-sdk4 CVEs
  30. 480.cn.hutool:hutool-all3 CVEs
  31. 481.com.adobe.acs:acs-aem-commons3 CVEs
  32. 482.com.arcadedb:arcadedb-server3 CVEs
  33. 483.com.blackducksoftware.integration:blackduck-hub3 CVEs
  34. 484.com.cedarpolicy:cedar-java3 CVEs
  35. 485.com.epam.reportportal:service-api3 CVEs
  36. 486.com.geteasyqa:easyqa3 CVEs
  37. 487.com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer3 CVEs
  38. 488.com.google.guava:guava3 CVEs
  39. 489.com.google.protobuf:protobuf-kotlin3 CVEs
  40. 490.com.graphql-java:graphql-java3 CVEs
  41. 491.com.groupon.jenkins-ci.plugins:DotCi3 CVEs
  42. 492.com.hazelcast:hazelcast-enterprise3 CVEs
  43. 493.com.ibeetl:beetl3 CVEs
  44. 494.com.inedo.proget:inedo-proget3 CVEs
  45. 495.com.liferay:com.liferay.account.admin.web3 CVEs
  46. 496.com.liferay:com.liferay.calendar.web3 CVEs
  47. 497.com.liferay:com.liferay.dynamic.data.mapping.form.web3 CVEs
  48. 498.com.liferay:com.liferay.frontend.editor.ckeditor.web3 CVEs
  49. 499.com.liferay:com.liferay.layout.admin.web3 CVEs
  50. 500.com.liferay:com.liferay.login.web3 CVEs

Which Maven packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →