Maven Package Vulnerabilities

All 3,225 Java / JVM artifacts with known CVEs, ranked by live CVE volume — 8,517 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 1,301.cc.tweaked:cc-tweaked-1.20.6-core1 CVE
  2. 1,302.cc.tweaked:cc-tweaked-1.20-core1 CVE
  3. 1,303.cc.tweaked:cc-tweaked-1.21-core1 CVE
  4. 1,304.cn.dreampie:resty1 CVE
  5. 1,305.cn.hutool:hutool-extra1 CVE
  6. 1,306.cn.hutool:hutool-http1 CVE
  7. 1,307.cn.hutool:hutool-parent1 CVE
  8. 1,308.co.elastic.apm:apm-agent-parent1 CVE
  9. 1,309.co.elastic.apm:elastic-apm-agent1 CVE
  10. 1,310.co.fs2:fs2-io1 CVE
  11. 1,311.co.fs2:fs2-io_0.261 CVE
  12. 1,312.co.fs2:fs2-io_0.271 CVE
  13. 1,313.co.fs2:fs2-io_2.111 CVE
  14. 1,314.co.fs2:fs2-io_2.12.0-M41 CVE
  15. 1,315.co.fs2:fs2-io_2.12.0-M51 CVE
  16. 1,316.co.fs2:fs2-io_2.12.0-RC11 CVE
  17. 1,317.co.fs2:fs2-io_2.12.0-RC21 CVE
  18. 1,318.co.fs2:fs2-io_2.13.0-M51 CVE
  19. 1,319.co.fs2:fs2-io_sjs1_2.131 CVE
  20. 1,320.co.fs2:fs2-io_sjs1_31 CVE
  21. 1,321.com.adobe.cq:core.wcm.components.core1 CVE
  22. 1,322.com.adobe.xmp:xmpcore1 CVE
  23. 1,323.com.aerospike:aerospike-client1 CVE
  24. 1,324.com.alibaba:hessian-lite1 CVE
  25. 1,325.com.alibaba.nacos:nacos-client1 CVE
  26. 1,326.com.alibaba.nacos:nacos-spring-context1 CVE
  27. 1,327.com.alibaba.oneagent:one-java-agent-plugin1 CVE
  28. 1,328.com.alipay.sofa.acts:acts-common-util1 CVE
  29. 1,329.com.alipay.sofa:rpc-sofa-boot-starter1 CVE
  30. 1,330.com.amazonaws:aws-android-sdk-mobile-client1 CVE
  31. 1,331.com.amazonaws:aws-codebuild1 CVE
  32. 1,332.com.amazonaws:aws-codepipeline1 CVE
  33. 1,333.com.amazonaws:aws-java-sdk-s31 CVE
  34. 1,334.com.amazon.ion:ion-java1 CVE
  35. 1,335.com.anrisoftware.globalpom:globalpomutils1 CVE
  36. 1,336.com.applatix.jenkins:applatix1 CVE
  37. 1,337.com.atlassian.connect:atlassian-connect-spring-boot1 CVE
  38. 1,338.com.atlassian.connect:atlassian-connect-spring-boot-starter1 CVE
  39. 1,339.com.axis.jenkins.plugins.eiffel:eiffel-broadcaster1 CVE
  40. 1,340.com.axis.system.jenkins.plugins.downstream:yet-another-build-visualizer1 CVE
  41. 1,341.com.azure:azure-core-amqp1 CVE
  42. 1,342.com.azure:azure-identity1 CVE
  43. 1,343.com.azure:azure-security-keyvault-keys1 CVE
  44. 1,344.com.azure:azure-storage-blob1 CVE
  45. 1,345.com.baidu.mapp:brcc-core1 CVE
  46. 1,346.com.baomidou:dynamic-datasource-spring1 CVE
  47. 1,347.com.baomidou:mybatis-plus1 CVE
  48. 1,348.com.bmuschko:gradle-vagrant-plugin1 CVE
  49. 1,349.com.brianfromoregon:caliper-ci1 CVE
  50. 1,350.com.browserup:browserup-proxy1 CVE

Which Maven packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →