Maven Package Vulnerabilities

All 3,225 Java / JVM artifacts with known CVEs, ranked by live CVE volume — 8,517 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 551.org.apache.httpcomponents.client5:httpclient53 CVEs
  2. 552.org.apache.inlong:inlong-manager3 CVEs
  3. 553.org.apache.inlong:manager-common3 CVEs
  4. 554.org.apache.ivy:ivy3 CVEs
  5. 555.org.apache.jackrabbit:jackrabbit-core3 CVEs
  6. 556.org.apache.jmeter:ApacheJMeter3 CVEs
  7. 557.org.apache.kylin:kylin-common-server3 CVEs
  8. 558.org.apache.livy:livy-server3 CVEs
  9. 559.org.apache.myfaces.core:myfaces-core-module3 CVEs
  10. 560.org.apache.neethi:neethi3 CVEs
  11. 561.org.apache.nifi:nifi-jms-processors3 CVEs
  12. 562.org.apache.olingo:odata-client-core3 CVEs
  13. 563.org.apache.oozie:oozie-core3 CVEs
  14. 564.org.apache.portals.jetspeed-2:jetspeed3 CVEs
  15. 565.org.apache.portals.pluto:pluto-portal3 CVEs
  16. 566.org.apache.pulsar:pulsar-proxy3 CVEs
  17. 567.org.apache.qpid:apache-qpid-broker-j3 CVEs
  18. 568.org.apache.shenyu:shenyu-admin3 CVEs
  19. 569.org.apache.shiro:shiro-spring3 CVEs
  20. 570.org.apache.sling:org.apache.sling.api3 CVEs
  21. 571.org.apache.sling:org.apache.sling.cms3 CVEs
  22. 572.org.apache.sling:org.apache.sling.xss3 CVEs
  23. 573.org.apache.sling:org.apache.sling.xss.compat3 CVEs
  24. 574.org.apache.sshd:sshd-common3 CVEs
  25. 575.org.apache.sshd:sshd-core3 CVEs
  26. 576.org.apache.struts:struts2-parent3 CVEs
  27. 577.org.apache.syncope:syncope3 CVEs
  28. 578.org.apache.tomcat:tomcat-jasper3 CVEs
  29. 579.org.apache.tomcat:tomcat-tribes3 CVEs
  30. 580.org.apache.unomi:unomi3 CVEs
  31. 581.org.apache.xmlrpc:xmlrpc3 CVEs
  32. 582.org.apache.zeppelin:zeppelin-interpreter3 CVEs
  33. 583.org.bitbucket.b_c:jose4j3 CVEs
  34. 584.org.bouncycastle:bcpkix-jdk18on3 CVEs
  35. 585.org.bouncycastle:bctls-fips3 CVEs
  36. 586.org.codehaus.groovy:groovy3 CVEs
  37. 587.org.codehaus.groovy:groovy-all3 CVEs
  38. 588.org.conjur.jenkins:conjur-credentials3 CVEs
  39. 589.org.craftercms:crafter-core3 CVEs
  40. 590.org.eclipse.jetty.http2:http2-common3 CVEs
  41. 591.org.eclipse.jetty:jetty-webapp3 CVEs
  42. 592.org.eclipse.jgit:org.eclipse.jgit3 CVEs
  43. 593.org.eclipse.lemminx:lemminx-parent3 CVEs
  44. 594.org.geonetwork-opensource:geonetwork3 CVEs
  45. 595.org.geoserver:gs-gwc3 CVEs
  46. 596.org.geoserver:gs-restconfig3 CVEs
  47. 597.org.glassfish:javax.faces3 CVEs
  48. 598.org.hibernate:hibernate-core3 CVEs
  49. 599.org.http4k:http4k-core3 CVEs
  50. 600.org.http4k:http4k-security-digest3 CVEs

Which Maven packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →