Maven Package Vulnerabilities

All 3,086 Java / JVM artifacts with known CVEs, ranked by live CVE volume — 7,980 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 851.org.apache.iotdb:iotdb-grafana-connector2 CVEs
  2. 852.org.apache.iotdb:iotdb-parent2 CVEs
  3. 853.org.apache.iotdb:iotdb-server2 CVEs
  4. 854.org.apache.isis.core:isis-core2 CVEs
  5. 855.org.apache.jena:jena-fuseki2 CVEs
  6. 856.org.apache.juddi:juddi-client2 CVEs
  7. 857.org.apache.kafka:kafka_2.102 CVEs
  8. 858.org.apache.karaf.management:org.apache.karaf.management.server2 CVEs
  9. 859.org.apache.kylin:kylin-common-service2 CVEs
  10. 860.org.apache.kylin:kylin-core-metadata2 CVEs
  11. 861.org.apache.kylin:kylin-ops-server2 CVEs
  12. 862.org.apache.kylin:kylin-server2 CVEs
  13. 863.org.apache.logging.log4j:log4j2 CVEs
  14. 864.org.apache.myfaces.core:myfaces-impl2 CVEs
  15. 865.org.apache.nifi:nifi-dbcp-base2 CVEs
  16. 866.org.apache.nifi:nifi-framework-core2 CVEs
  17. 867.org.apache.nifi:nifi-hikari-dbcp-service2 CVEs
  18. 868.org.apache.nifi:nifi-standard-processors2 CVEs
  19. 869.org.apache.nifi:nifi-web-ui2 CVEs
  20. 870.org.apache.parquet:parquet-avro2 CVEs
  21. 871.org.apache.pdfbox:pdfbox-parent2 CVEs
  22. 872.org.apache.pinot:pinot2 CVEs
  23. 873.org.apache.pinot:pinot-controller2 CVEs
  24. 874.org.apache.poi:poi-scratchpad2 CVEs
  25. 875.org.apache.polaris:polaris-core2 CVEs
  26. 876.org.apache.polaris:polaris-runtime-service2 CVEs
  27. 877.org.apache.portals.jetspeed-2:jetspeed-commons2 CVEs
  28. 878.org.apache.qpid:proton-j2 CVEs
  29. 879.org.apache.rocketmq:rocketmq-broker2 CVEs
  30. 880.org.apache.rocketmq:rocketmq-namesrv2 CVEs
  31. 881.org.apache.sanselan:sanselan2 CVEs
  32. 882.org.apache.seata:seata-config-core2 CVEs
  33. 883.org.apache.shardingsphere:shardingsphere2 CVEs
  34. 884.org.apache.shiro:shiro-jakarta-ee2 CVEs
  35. 885.org.apache.shiro:shiro-root2 CVEs
  36. 886.org.apache.sling:org.apache.sling.auth.core2 CVEs
  37. 887.org.apache.solr:solr-solrj2 CVEs
  38. 888.org.apache.spark:spark-core_2.122 CVEs
  39. 889.org.apache.spark:spark-core_2.132 CVEs
  40. 890.org.apache.spark:spark-parent_2.122 CVEs
  41. 891.org.apache.storm:storm-client2 CVEs
  42. 892.org.apache.submarine:submarine-server-core2 CVEs
  43. 893.org.apache.syncope.client.idrepo:syncope-client-idrepo-common-ui2 CVEs
  44. 894.org.apache.syncope.client.idrepo:syncope-client-idrepo-console2 CVEs
  45. 895.org.apache.syncope.core:syncope-core-spring2 CVEs
  46. 896.org.apache.tika:tika-parser-pdf-module2 CVEs
  47. 897.org.apache.tiles:tiles-core2 CVEs
  48. 898.org.apache.tomcat.embed:tomcat-embed-jasper2 CVEs
  49. 899.org.apache.tomcat.embed:tomcat-embed-websocket2 CVEs
  50. 900.org.apache.tomcat:tomcat-coyote-ffm2 CVEs

Which Maven packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Start Free Scan →