Maven Package Vulnerabilities

All 3,225 Java / JVM artifacts with known CVEs, ranked by live CVE volume — 8,517 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 1,201.org.openmrs.web:openmrs-web2 CVEs
  2. 1,202.org.opennms:opennms-webapp-rest2 CVEs
  3. 1,203.org.openshift.jenkins:openshift-login2 CVEs
  4. 1,204.org.owasp:dependency-check-maven2 CVEs
  5. 1,205.org.pac4j:pac4j-core2 CVEs
  6. 1,206.org.primefaces:primefaces2 CVEs
  7. 1,207.org.python:jython-standalone2 CVEs
  8. 1,208.org.richfaces:richfaces2 CVEs
  9. 1,209.org.rundeck:rundeck-core2 CVEs
  10. 1,210.org.scala-sbt:sbt2 CVEs
  11. 1,211.org.silverpeas.core:silverpeas-core-api2 CVEs
  12. 1,212.org.sonatype.nexus:nexus-core2 CVEs
  13. 1,213.org.sonatype.nexus:nexus-repository2 CVEs
  14. 1,214.org.springframework.ai:spring-ai-advisors-vector-store2 CVEs
  15. 1,215.org.springframework.ai:spring-ai-client-chat2 CVEs
  16. 1,216.org.springframework.batch:spring-batch-core2 CVEs
  17. 1,217.org.springframework.boot:spring-boot-autoconfigure2 CVEs
  18. 1,218.org.springframework.boot:spring-boot-starter-actuator2 CVEs
  19. 1,219.org.springframework.cloud:spring-cloud-gateway-server2 CVEs
  20. 1,220.org.springframework.grpc:spring-grpc2 CVEs
  21. 1,221.org.springframework.security.oauth:spring-security-oauth2 CVEs
  22. 1,222.org.springframework.security:spring-security-oauth2-authorization-server2 CVEs
  23. 1,223.org.springframework.security:spring-security-oauth2-client2 CVEs
  24. 1,224.org.springframework.security:spring-security-oauth2-jose2 CVEs
  25. 1,225.org.springframework:spring-beans2 CVEs
  26. 1,226.org.springframework:spring-oxm2 CVEs
  27. 1,227.org.springframework:spring-websocket2 CVEs
  28. 1,228.org.springframework.ws:spring-xml2 CVEs
  29. 1,229.org.tap4j:tap2 CVEs
  30. 1,230.org.verapdf:core2 CVEs
  31. 1,231.org.verapdf:core-arlington2 CVEs
  32. 1,232.org.verapdf:core-jakarta2 CVEs
  33. 1,233.org.verapdf:library2 CVEs
  34. 1,234.org.verapdf:library-arlington2 CVEs
  35. 1,235.org.verapdf:library-jakarta2 CVEs
  36. 1,236.org.verapdf:parser2 CVEs
  37. 1,237.org.verapdf:verapdf-library2 CVEs
  38. 1,238.org.verapdf:verapdf-library-arlington2 CVEs
  39. 1,239.org.verapdf:verapdf-library-jakarta2 CVEs
  40. 1,240.org.webjars:swagger-ui2 CVEs
  41. 1,241.org.wildfly.bom:wildfly2 CVEs
  42. 1,242.org.wildfly.security:wildfly-elytron-http-oidc2 CVEs
  43. 1,243.org.wso2.identity.apps:authentication-portal2 CVEs
  44. 1,244.org.wso2.is:identity-server-parent2 CVEs
  45. 1,245.org.xwiki.commons:xwiki-commons-core2 CVEs
  46. 1,246.org.xwiki.commons:xwiki-commons-velocity2 CVEs
  47. 1,247.org.xwiki.contrib:application-ckeditor-ui2 CVEs
  48. 1,248.org.xwiki.contrib.blog:application-blog-ui2 CVEs
  49. 1,249.org.xwiki.contrib:macro-fullcalendar-pom2 CVEs
  50. 1,250.org.xwiki.contrib.oidc:oidc-authenticator2 CVEs

Which Maven packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →