Maven Package Vulnerabilities

All 3,086 Java / JVM artifacts with known CVEs, ranked by live CVE volume — 7,980 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 901.org.apache.tomcat:tomcat-websocket2 CVEs
  2. 902.org.apache.uima:uimaj-core2 CVEs
  3. 903.org.apache.wicket:wicket-parent2 CVEs
  4. 904.org.apache.wss4j:wss4j-ws-security-dom2 CVEs
  5. 905.org.apache.zeppelin:zeppelin-jdbc2 CVEs
  6. 906.org.apache.zeppelin:zeppelin-web2 CVEs
  7. 907.org.apereo.cas:cas-management-webapp-support2 CVEs
  8. 908.org.bouncycastle:bcpkix-jdk15on2 CVEs
  9. 909.org.bouncycastle:bcpkix-jdk15to182 CVEs
  10. 910.org.bouncycastle:bcprov-debug-jdk142 CVEs
  11. 911.org.bouncycastle:bcprov-debug-jdk15to182 CVEs
  12. 912.org.bouncycastle:bcprov-debug-jdk18on2 CVEs
  13. 913.org.bouncycastle:bcprov-ext-jdk142 CVEs
  14. 914.org.bouncycastle:bcprov-ext-jdk15to182 CVEs
  15. 915.org.bouncycastle:bcprov-ext-jdk18on2 CVEs
  16. 916.org.bouncycastle:bcprov-lts8on2 CVEs
  17. 917.org.clojure:clojure2 CVEs
  18. 918.org.codefirst.jenkins.asakusasatellite:asakusa-satellite-plugin2 CVEs
  19. 919.org.codehaus.jackson:jackson-mapper-asl2 CVEs
  20. 920.org.codehaus.mevenide:netbeans2 CVEs
  21. 921.org.codehaus.plexus:plexus-archiver2 CVEs
  22. 922.org.codelibs.fess:fess2 CVEs
  23. 923.org.connectbot.sshlib:sshlib2 CVEs
  24. 924.org.continuousassurance.swamp.jenkins:swamp2 CVEs
  25. 925.org.cyclonedx:cyclonedx-core-java2 CVEs
  26. 926.org.datadog.jenkins.plugins:datadog2 CVEs
  27. 927.org.dojotoolkit:dojo2 CVEs
  28. 928.org.dom4j:dom4j2 CVEs
  29. 929.org.dspace:dspace-xmlui2 CVEs
  30. 930.org.eclipse.basyx:basyx.sdk2 CVEs
  31. 931.org.eclipse.hawkbit:hawkbit-parent2 CVEs
  32. 932.org.eclipse.jetty.ee10:jetty-ee10-servlets2 CVEs
  33. 933.org.eclipse.jetty.ee8:jetty-ee8-servlets2 CVEs
  34. 934.org.eclipse.jetty.ee9:jetty-ee9-servlets2 CVEs
  35. 935.org.eclipse.jetty.http2:http2-server2 CVEs
  36. 936.org.geonetwork-opensource:geonetwork2 CVEs
  37. 937.org.geoserver.extension:gs-wps-core2 CVEs
  38. 938.org.geoserver:gs-rest2 CVEs
  39. 939.org.glassfish.jsftemplating:jsftemplating2 CVEs
  40. 940.org.glassfish.main.admingui:console-cluster-plugin2 CVEs
  41. 941.org.glassfish:mojarra-parent2 CVEs
  42. 942.org.gradle:gradle-core2 CVEs
  43. 943.org.grails:grails-core2 CVEs
  44. 944.org.grails:grails-databinding2 CVEs
  45. 945.org.grails.plugins:asset-pipeline2 CVEs
  46. 946.org.graylog:graylog-parent2 CVEs
  47. 947.org.hjson:hjson2 CVEs
  48. 948.org.hl7.fhir.publisher:org.hl7.fhir.publisher.cli2 CVEs
  49. 949.org.hl7.fhir.publisher:org.hl7.fhir.publisher.core2 CVEs
  50. 950.org.hswebframework.web:hsweb-commons2 CVEs

Which Maven packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Start Free Scan →