Maven Package Vulnerabilities

All 3,225 Java / JVM artifacts with known CVEs, ranked by live CVE volume — 8,517 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 501.com.liferay:com.liferay.object.service3 CVEs
  2. 502.com.liferay:com.liferay.users.admin.web3 CVEs
  3. 503.com.linecorp.armeria:armeria3 CVEs
  4. 504.com.mikesamuel:json-sanitizer3 CVEs
  5. 505.com.moded.extendedchoiceparameter:dynamic_extended_choice_parameter3 CVEs
  6. 506.commons-beanutils:commons-beanutils3 CVEs
  7. 507.com.oviva.telematik:epa4all-client3 CVEs
  8. 508.com.reposilite:reposilite-backend3 CVEs
  9. 509.com.soasta.jenkins:cloudtest3 CVEs
  10. 510.com.squareup.wire:wire-runtime3 CVEs
  11. 511.com.xebialabs.ci:xlrelease-plugin3 CVEs
  12. 512.de.themoep:inventorygui3 CVEs
  13. 513.de.tracetronic.jenkins.plugins:ecutest3 CVEs
  14. 514.de.tum.in.ase:artemis-java-test-sandbox3 CVEs
  15. 515.dev.sigstore:sigstore-java3 CVEs
  16. 516.edu.internet2.middleware:shibboleth-identityprovider3 CVEs
  17. 517.fr.edf.jenkins.plugins:mac3 CVEs
  18. 518.io.antmedia:ant-media-server3 CVEs
  19. 519.io.grpc:grpc-protobuf3 CVEs
  20. 520.io.jenkins.docker:docker-plugin3 CVEs
  21. 521.io.jenkins.plugins:atlassian-bitbucket-server-integration3 CVEs
  22. 522.io.jenkins.plugins:code-coverage-api3 CVEs
  23. 523.io.jenkins.plugins:gitlab-branch-source3 CVEs
  24. 524.io.netty:netty-codec-compression3 CVEs
  25. 525.io.netty:netty-handler-ssl-ocsp3 CVEs
  26. 526.io.netty:netty-resolver-dns3 CVEs
  27. 527.io.opentelemetry.javaagent:opentelemetry-javaagent3 CVEs
  28. 528.io.ratpack:ratpack-session3 CVEs
  29. 529.net.bull.javamelody:javamelody-core3 CVEs
  30. 530.net.lingala.zip4j:zip4j3 CVEs
  31. 531.net.praqma:rqm-plugin3 CVEs
  32. 532.net.sourceforge.pmd:pmd-core3 CVEs
  33. 533.org.apache.activemq:activemq-core3 CVEs
  34. 534.org.apache.activemq:activemq-web-console3 CVEs
  35. 535.org.apache.activemq:artemis-server3 CVEs
  36. 536.org.apache.archiva:archiva-common3 CVEs
  37. 537.org.apache.axis2:axis23 CVEs
  38. 538.org.apache.calcite:calcite-core3 CVEs
  39. 539.org.apache.camel:camel-amqp3 CVEs
  40. 540.org.apache.camel:camel-infinispan3 CVEs
  41. 541.org.apache.camel:camel-keycloak3 CVEs
  42. 542.org.apache.camel:camel-netty-http3 CVEs
  43. 543.org.apache.camel:camel-pqc3 CVEs
  44. 544.org.apache.camel:camel-undertow3 CVEs
  45. 545.org.apache.cxf:cxf-rt-transports-http3 CVEs
  46. 546.org.apache.cxf:cxf-rt-transports-jms3 CVEs
  47. 547.org.apache.cxf.fediz:fediz-spring3 CVEs
  48. 548.org.apache.flume.flume-ng-sources:flume-jms-source3 CVEs
  49. 549.org.apache.geronimo.plugins:console3 CVEs
  50. 550.org.apache.hive:hive-jdbc3 CVEs

Which Maven packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →