Maven Package Vulnerabilities

All 3,225 Java / JVM artifacts with known CVEs, ranked by live CVE volume — 8,517 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 851.io.netty:netty-codec-stomp2 CVEs
  2. 852.io.netty:netty-codec-xml2 CVEs
  3. 853.io.netty:netty-common2 CVEs
  4. 854.io.netty:netty-transport-native-epoll2 CVEs
  5. 855.io.netty:netty-transport-sctp2 CVEs
  6. 856.io.opentelemetry:opentelemetry-api2 CVEs
  7. 857.io.pebbletemplates:pebble2 CVEs
  8. 858.io.projectreactor.netty:reactor-netty2 CVEs
  9. 859.io.qameta.allure:allure-generator2 CVEs
  10. 860.io.quarkiverse.openapi.generator:quarkus-openapi-generator2 CVEs
  11. 861.io.quarkus:quarkus-core2 CVEs
  12. 862.io.quarkus:quarkus-rest2 CVEs
  13. 863.io.quarkus.resteasy.reactive:resteasy-reactive2 CVEs
  14. 864.io.spinnaker.clouddriver:clouddriver-artifacts2 CVEs
  15. 865.io.spinnaker.orca:orca-core2 CVEs
  16. 866.io.spray:spray-json_2.102 CVEs
  17. 867.io.spray:spray-json_2.112 CVEs
  18. 868.io.spray:spray-json_2.122 CVEs
  19. 869.io.swagger:swagger-parser2 CVEs
  20. 870.javagh.jenkins:mashup-portlets-plugin2 CVEs
  21. 871.jenkins:repository2 CVEs
  22. 872.lsfusion.platform:web-client2 CVEs
  23. 873.net.jpountz.lz4:lz42 CVEs
  24. 874.net.mingsoft:ms-basic2 CVEs
  25. 875.net.praqma:matrix-reloaded2 CVEs
  26. 876.net.sf.jasperreports:jasperreports2 CVEs
  27. 877.net.sf.robocode:robocode.core2 CVEs
  28. 878.net.sourceforge.collections:collections-generic2 CVEs
  29. 879.net.sourceforge.htmlunit:htmlunit2 CVEs
  30. 880.net.sourceforge.htmlunit:neko-htmlunit2 CVEs
  31. 881.net.sourceforge.plantuml:plantuml2 CVEs
  32. 882.net.sourceforge.plantuml:plantuml-mit2 CVEs
  33. 883.nl.nl-portal:documenten-api2 CVEs
  34. 884.ognl:ognl2 CVEs
  35. 885.ome:pom-bio-formats2 CVEs
  36. 886.org.6wind.jenkins:lockable-resources2 CVEs
  37. 887.org.a2aproject.sdk:a2a-java-sdk-server-common2 CVEs
  38. 888.org.alluxio:alluxio-parent2 CVEs
  39. 889.org.apache.activemq:activemq-jaas2 CVEs
  40. 890.org.apache.activemq:activemq-mqtt2 CVEs
  41. 891.org.apache.activemq:activemq-openwire-legacy2 CVEs
  42. 892.org.apache.activemq:activemq-web2 CVEs
  43. 893.org.apache.activemq:apache-artemis2 CVEs
  44. 894.org.apache.activemq:artemis-core-client2 CVEs
  45. 895.org.apache.activemq:artemis-openwire-protocol2 CVEs
  46. 896.org.apache.avro:avro2 CVEs
  47. 897.org.apache.axis2.wso2:axis22 CVEs
  48. 898.org.apache.brooklyn:brooklyn2 CVEs
  49. 899.org.apache.camel:camel-activemq2 CVEs
  50. 900.org.apache.camel:camel-activemq62 CVEs

Which Maven packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →