Maven Package Vulnerabilities

All 3,225 Java / JVM artifacts with known CVEs, ranked by live CVE volume — 8,517 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 1,001.org.bouncycastle:bcprov-ext-jdk142 CVEs
  2. 1,002.org.bouncycastle:bcprov-ext-jdk15to182 CVEs
  3. 1,003.org.bouncycastle:bcprov-ext-jdk18on2 CVEs
  4. 1,004.org.clojure:clojure2 CVEs
  5. 1,005.org.codefirst.jenkins.asakusasatellite:asakusa-satellite-plugin2 CVEs
  6. 1,006.org.codehaus.jackson:jackson-mapper-asl2 CVEs
  7. 1,007.org.codehaus.mevenide:netbeans2 CVEs
  8. 1,008.org.codehaus.plexus:plexus-archiver2 CVEs
  9. 1,009.org.codelibs.fess:fess2 CVEs
  10. 1,010.org.connectbot.sshlib:sshlib2 CVEs
  11. 1,011.org.continuousassurance.swamp.jenkins:swamp2 CVEs
  12. 1,012.org.cyclonedx:cyclonedx-core-java2 CVEs
  13. 1,013.org.datadog.jenkins.plugins:datadog2 CVEs
  14. 1,014.org.dojotoolkit:dojo2 CVEs
  15. 1,015.org.dom4j:dom4j2 CVEs
  16. 1,016.org.dspace:dspace-xmlui2 CVEs
  17. 1,017.org.eclipse.basyx:basyx.sdk2 CVEs
  18. 1,018.org.eclipse.hawkbit:hawkbit-parent2 CVEs
  19. 1,019.org.eclipse.jetty.ee10:jetty-ee10-servlets2 CVEs
  20. 1,020.org.eclipse.jetty.ee8:jetty-ee8-servlets2 CVEs
  21. 1,021.org.eclipse.jetty.ee9:jetty-ee9-servlets2 CVEs
  22. 1,022.org.eclipse.jetty.http2:http2-server2 CVEs
  23. 1,023.org.elasticsearch.plugin:x-pack-core2 CVEs
  24. 1,024.org.elasticsearch.plugin:x-pack-security2 CVEs
  25. 1,025.org.geoserver.extension:gs-wps-core2 CVEs
  26. 1,026.org.geoserver:gs-rest2 CVEs
  27. 1,027.org.glassfish.jsftemplating:jsftemplating2 CVEs
  28. 1,028.org.glassfish.main.admingui:console-cluster-plugin2 CVEs
  29. 1,029.org.glassfish:mojarra-parent2 CVEs
  30. 1,030.org.gradle:gradle-core2 CVEs
  31. 1,031.org.grails:grails-core2 CVEs
  32. 1,032.org.grails:grails-databinding2 CVEs
  33. 1,033.org.grails.plugins:asset-pipeline2 CVEs
  34. 1,034.org.graylog:graylog-parent2 CVEs
  35. 1,035.org.hjson:hjson2 CVEs
  36. 1,036.org.hl7.fhir.publisher:org.hl7.fhir.publisher.cli2 CVEs
  37. 1,037.org.hl7.fhir.publisher:org.hl7.fhir.publisher.core2 CVEs
  38. 1,038.org.hswebframework.web:hsweb-commons2 CVEs
  39. 1,039.org.htmlunit:htmlunit2 CVEs
  40. 1,040.org.http4s:blaze-http_2.132 CVEs
  41. 1,041.org.http4s:blaze-http_32 CVEs
  42. 1,042.org.http4s:http4s-blaze-server_2.122 CVEs
  43. 1,043.org.http4s:http4s-core2 CVEs
  44. 1,044.org.http4s:http4s-server_2.102 CVEs
  45. 1,045.org.http4s:http4s-server_2.112 CVEs
  46. 1,046.org.http4s:http4s-server_2.13.0-M52 CVEs
  47. 1,047.org.infinispan:infinispan-server-rest2 CVEs
  48. 1,048.org.jboss.eap:wildfly-undertow2 CVEs
  49. 1,049.org.jboss:jboss-ejb-client2 CVEs
  50. 1,050.org.jenkins-ci.main:cli2 CVEs

Which Maven packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →