Maven Package Vulnerabilities

All 3,225 Java / JVM artifacts with known CVEs, ranked by live CVE volume — 8,517 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 951.org.apache.nifi:nifi-hikari-dbcp-service2 CVEs
  2. 952.org.apache.nifi:nifi-standard-processors2 CVEs
  3. 953.org.apache.nifi:nifi-web-ui2 CVEs
  4. 954.org.apache.parquet:parquet-avro2 CVEs
  5. 955.org.apache.pdfbox:pdfbox-examples2 CVEs
  6. 956.org.apache.pdfbox:pdfbox-parent2 CVEs
  7. 957.org.apache.pinot:pinot2 CVEs
  8. 958.org.apache.pinot:pinot-controller2 CVEs
  9. 959.org.apache.poi:poi-scratchpad2 CVEs
  10. 960.org.apache.polaris:polaris-core2 CVEs
  11. 961.org.apache.polaris:polaris-runtime-service2 CVEs
  12. 962.org.apache.portals.jetspeed-2:jetspeed-commons2 CVEs
  13. 963.org.apache.qpid:proton-j2 CVEs
  14. 964.org.apache.ranger:ranger-plugins-common2 CVEs
  15. 965.org.apache.rocketmq:rocketmq-broker2 CVEs
  16. 966.org.apache.rocketmq:rocketmq-namesrv2 CVEs
  17. 967.org.apache.sanselan:sanselan2 CVEs
  18. 968.org.apache.seata:seata-config-core2 CVEs
  19. 969.org.apache.servicemix.bundles:org.apache.servicemix.bundles.collections-generic2 CVEs
  20. 970.org.apache.servicemix.bundles:org.apache.servicemix.bundles.commons-collections2 CVEs
  21. 971.org.apache.shardingsphere:shardingsphere2 CVEs
  22. 972.org.apache.shiro:shiro-jakarta-ee2 CVEs
  23. 973.org.apache.shiro:shiro-root2 CVEs
  24. 974.org.apache.sling:org.apache.sling.auth.core2 CVEs
  25. 975.org.apache.solr:solr-solrj2 CVEs
  26. 976.org.apache.spark:spark-core_2.9.32 CVEs
  27. 977.org.apache.spark:spark-parent_2.122 CVEs
  28. 978.org.apache.storm:storm-client2 CVEs
  29. 979.org.apache.submarine:submarine-server-core2 CVEs
  30. 980.org.apache.syncope.client.idrepo:syncope-client-idrepo-common-ui2 CVEs
  31. 981.org.apache.syncope.client.idrepo:syncope-client-idrepo-console2 CVEs
  32. 982.org.apache.syncope.core:syncope-core-spring2 CVEs
  33. 983.org.apache.tika:tika-parser-pdf-module2 CVEs
  34. 984.org.apache.tiles:tiles-core2 CVEs
  35. 985.org.apache.tomcat.embed:tomcat-embed-jasper2 CVEs
  36. 986.org.apache.tomcat.embed:tomcat-embed-websocket2 CVEs
  37. 987.org.apache.tomcat:tomcat-coyote-ffm2 CVEs
  38. 988.org.apache.tomcat:tomcat-websocket2 CVEs
  39. 989.org.apache.uima:uimaj-core2 CVEs
  40. 990.org.apache.wicket:wicket-parent2 CVEs
  41. 991.org.apache.wss4j:wss4j-ws-security-dom2 CVEs
  42. 992.org.apache.zeppelin:zeppelin-jdbc2 CVEs
  43. 993.org.apache.zeppelin:zeppelin-web2 CVEs
  44. 994.org.apereo.cas:cas-management-webapp-support2 CVEs
  45. 995.org.bouncycastle:bcpkix-jdk15on2 CVEs
  46. 996.org.bouncycastle:bcpkix-jdk15to182 CVEs
  47. 997.org.bouncycastle:bcprov-debug-jdk142 CVEs
  48. 998.org.bouncycastle:bcprov-debug-jdk15on2 CVEs
  49. 999.org.bouncycastle:bcprov-debug-jdk15to182 CVEs
  50. 1,000.org.bouncycastle:bcprov-debug-jdk18on2 CVEs

Which Maven packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →