Maven Package Vulnerabilities

All 3,225 Java / JVM artifacts with known CVEs, ranked by live CVE volume — 8,517 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 1,351.com.bstek.uflo:uflo-core1 CVE
  2. 1,352.com.capacitorjs:core1 CVE
  3. 1,353.com.catalogic.ecxjenkins:catalogic-ecx1 CVE
  4. 1,354.com.caverock:androidsvg1 CVE
  5. 1,355.com.cedarsoftware:json-io1 CVE
  6. 1,356.com.clever-cloud:biscuit-java1 CVE
  7. 1,357.com.clickhouse:clickhouse-client1 CVE
  8. 1,358.com.clickhouse:clickhouse-jdbc1 CVE
  9. 1,359.com.clickhouse:clickhouse-r2dbc1 CVE
  10. 1,360.com.cloudbees.jenkins.plugins:kubernetes-credentials-provider1 CVE
  11. 1,361.com.cloudbees.jenkins.plugins:xpdev1 CVE
  12. 1,362.com.cloudcoreo.plugins:cloudcoreo-deploytime1 CVE
  13. 1,363.com.codenameone:codenameone-core1 CVE
  14. 1,364.com.compuware.jenkins:compuware-common-configuration1 CVE
  15. 1,365.com.compuware.jenkins:compuware-strobe-measurement1 CVE
  16. 1,366.com.compuware.jenkins:compuware-zadviser-api1 CVE
  17. 1,367.com.cosium.vet:vet1 CVE
  18. 1,368.com.ctrip.framework.apollo:apollo-core1 CVE
  19. 1,369.com.databricks:databricks-jdbc1 CVE
  20. 1,370.com.datadoghq:datadog-api-client1 CVE
  21. 1,371.com.datatheorem.mobileappsecurity.jenkins.plugin:datatheorem-mobile-app-security1 CVE
  22. 1,372.com.datomic:datomic-free1 CVE
  23. 1,373.com.diamondq.common:common-thirdparty.jcasbin1 CVE
  24. 1,374.com.diffplug.gradle:goomph1 CVE
  25. 1,375.com.diffplug.spotless:spotless-eclipse-cdt1 CVE
  26. 1,376.com.diffplug.spotless:spotless-eclipse-groovy1 CVE
  27. 1,377.com.diffplug.spotless:spotless-eclipse-wtp1 CVE
  28. 1,378.com.diffplug.spotless:spotless-maven-plugin1 CVE
  29. 1,379.com.diffplug.spotless:spotless-plugin-gradle1 CVE
  30. 1,380.com.dotcms:dotcms1 CVE
  31. 1,381.com.ds.tools.hudson:crowd1 CVE
  32. 1,382.com.dubture.jenkins:digitalocean-plugin1 CVE
  33. 1,383.com.elasticbox.jenkins-ci.plugins:elasticbox1 CVE
  34. 1,384.com.enonic.xp:lib-auth1 CVE
  35. 1,385.com.exadel.flamingo.flex:amf-serializer1 CVE
  36. 1,386.com.fastasyncworldedit:FastAsyncWorldEdit-Bukkit1 CVE
  37. 1,387.com.fastasyncworldedit:FastAsyncWorldEdit-Core1 CVE
  38. 1,388.com.fasterxml.jackson.dataformat:jackson-dataformat-cbor1 CVE
  39. 1,389.com.fasterxml.jackson.dataformat:jackson-dataformat-toml1 CVE
  40. 1,390.com.fasterxml.jackson.datatype:jackson-datatype-jsr3101 CVE
  41. 1,391.com.fasterxml.util:java-merge-sort1 CVE
  42. 1,392.com.fasterxml.woodstox:woodstox-core1 CVE
  43. 1,393.com.foxinmy:weixin4j-base1 CVE
  44. 1,394.com.github.binarywang:weixin-java-common1 CVE
  45. 1,395.com.github.blynkkk:blynk-server1 CVE
  46. 1,396.com.github.briandilley.jsonrpc4j:jsonrpc4j1 CVE
  47. 1,397.com.github.dgarijo:Widoco1 CVE
  48. 1,398.com.github.fracpete:vfsjfilechooser21 CVE
  49. 1,399.com.github:hyavijava1 CVE
  50. 1,400.com.github.jknack:handlebars1 CVE

Which Maven packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →