Maven Package Vulnerabilities

All 3,225 Java / JVM artifacts with known CVEs, ranked by live CVE volume — 8,517 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 701.org.wso2.carbon.registry:carbon-registry3 CVEs
  2. 702.org.xwiki.platform:xwiki-platform-icon-ui3 CVEs
  3. 703.org.xwiki.platform:xwiki-platform-invitation-ui3 CVEs
  4. 704.org.xwiki.platform:xwiki-platform-panels-ui3 CVEs
  5. 705.org.xwiki.platform:xwiki-platform-search-solr-api3 CVEs
  6. 706.org.xwiki.platform:xwiki-platform-security-requiredrights-default3 CVEs
  7. 707.org.xwiki.rendering:xwiki-rendering-xml3 CVEs
  8. 708.ro.pippo:pippo-core3 CVEs
  9. 709.tech.powerjob:powerjob-server-starter3 CVEs
  10. 710.aendter.jenkins.plugins:filesystem-list-parameter-plugin2 CVEs
  11. 711.ai.djl:api2 CVEs
  12. 712.ch.qos.logback:logback-classic2 CVEs
  13. 713.cn.dev33:sa-token-core2 CVEs
  14. 714.cn.hippo4j:hippo4j-all2 CVEs
  15. 715.cn.hippo4j:hippo4j-core2 CVEs
  16. 716.co.fs2:fs2-io_2.122 CVEs
  17. 717.co.fs2:fs2-io_2.132 CVEs
  18. 718.co.fs2:fs2-io_32 CVEs
  19. 719.com.aizuda:snail-job2 CVEs
  20. 720.com.alauda.jenkins.plugins:alauda-devops-pipeline2 CVEs
  21. 721.com.alipay.sofa:hessian2 CVEs
  22. 722.com.amazonaws:aws-encryption-sdk-java2 CVEs
  23. 723.com.amazonaws:codedeploy2 CVEs
  24. 724.com.amazon.jenkins.fleet:ec2-fleet2 CVEs
  25. 725.com.apica:ApicaLoadtest2 CVEs
  26. 726.com.barchart.jenkins:maven-release-cascade2 CVEs
  27. 727.com.blazemeter.plugins:BlazeMeterJenkinsPlugin2 CVEs
  28. 728.com.bstek.ureport:ureport2-console2 CVEs
  29. 729.com.charleskorn.kaml:kaml2 CVEs
  30. 730.com.compuware.jenkins:compuware-ispw-operations2 CVEs
  31. 731.com.compuware.jenkins:compuware-scm-downloader2 CVEs
  32. 732.com.compuware.jenkins:compuware-topaz-utilities2 CVEs
  33. 733.com.compuware.jenkins:compuware-xpediter-code-coverage2 CVEs
  34. 734.com.cronutils:cron-utils2 CVEs
  35. 735.com.datadoghq:dd-java-agent2 CVEs
  36. 736.com.drewnoakes:metadata-extractor2 CVEs
  37. 737.com.erudika:para-core2 CVEs
  38. 738.com.erudika:para-server2 CVEs
  39. 739.com.esotericsoftware.yamlbeans:yamlbeans2 CVEs
  40. 740.com.fasterxml.jackson.dataformat:jackson-dataformat-xml2 CVEs
  41. 741.com.gitblit:gitblit2 CVEs
  42. 742.com.github.liuyueyi.media:batik-codec-fix2 CVEs
  43. 743.com.github.psi-probe:psi-probe-core2 CVEs
  44. 744.com.googlecode.wicket-jquery-ui:wicket-jquery-ui-parent2 CVEs
  45. 745.com.google.oauth-client:google-oauth-client2 CVEs
  46. 746.com.google.protobuf:protobuf-kotlin-lite2 CVEs
  47. 747.com.inflectra.spiratest.plugins:inflectra-spira-integration2 CVEs
  48. 748.com.itextpdf:itextpdf2 CVEs
  49. 749.com.liferay:com.liferay.adaptive.media.web2 CVEs
  50. 750.com.liferay:com.liferay.asset.taglib2 CVEs

Which Maven packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →