Maven Package Vulnerabilities

All 3,225 Java / JVM artifacts with known CVEs, ranked by live CVE volume — 8,517 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 1,401.com.github.jknack:handlebars-springmvc1 CVE
  2. 1,402.com.github.jlangch:venice1 CVE
  3. 1,403.com.github.kevinsawicki:http-request1 CVE
  4. 1,404.com.github.kfcfans:powerjob1 CVE
  5. 1,405.com.github.pagehelper:pagehelper1 CVE
  6. 1,406.com.github.penggle:kaptcha1 CVE
  7. 1,407.com.github.samtools:htsjdk1 CVE
  8. 1,408.com.github.seancfoley:ipaddress1 CVE
  9. 1,409.com.github.seasarorg.mayaa:mayaa1 CVE
  10. 1,410.com.github.shyiko.ktlint:ktlint-core1 CVE
  11. 1,411.com.github.tomakehurst:wiremock-jre81 CVE
  12. 1,412.com.github.tomakehurst:wiremock-jre8-standalone1 CVE
  13. 1,413.com.github.ulisesbocchio:jasypt-spring-boot1 CVE
  14. 1,414.com.github.ulisesbocchio:jasypt-spring-boot-starter1 CVE
  15. 1,415.com.github.wxpay:wxpay-sdk1 CVE
  16. 1,416.com.glazedlists:glazedlists1 CVE
  17. 1,417.com.google.android.gms:play-services-basement1 CVE
  18. 1,418.com.google.cloud.tools:jib-core1 CVE
  19. 1,419.com.googlecode.aviator:aviator1 CVE
  20. 1,420.com.google.code.gson:gson1 CVE
  21. 1,421.com.googlecode.guava-osgi:guava-osgi1 CVE
  22. 1,422.com.googlecode.gwtupload:gwtupload1 CVE
  23. 1,423.com.googlecode.plist:dd-plist1 CVE
  24. 1,424.com.google.crypto.tink:tink1 CVE
  25. 1,425.com.google.gerrit:gerrit-plugin-api1 CVE
  26. 1,426.com.google.guava:guava-jdk51 CVE
  27. 1,427.com.google.gwt:gwt1 CVE
  28. 1,428.com.google.protobuf:protobuf-parent1 CVE
  29. 1,429.com.gradle:gradle-enterprise-maven-extension1 CVE
  30. 1,430.com.gradle.plugin-publish:com.gradle.plugin-publish.gradle.plugin1 CVE
  31. 1,431.com.gradle.publish:plugin-publish-plugin1 CVE
  32. 1,432.com.graphhopper:graphhopper-nav1 CVE
  33. 1,433.com.graphhopper:graphhopper-web-bundle1 CVE
  34. 1,434.com.guicedee.services:commons-text1 CVE
  35. 1,435.com.guicedee.services:log4j-core1 CVE
  36. 1,436.com.haulmont.addon.jpawebapi:jpawebapi-jpawebapi1 CVE
  37. 1,437.com.haulmont.addon.restapi:restapi-rest-api1 CVE
  38. 1,438.com.haulmont.cuba:cuba-core1 CVE
  39. 1,439.com.haulmont.cuba:cuba-web-toolkit1 CVE
  40. 1,440.com.hazelcast:hazelcast-all1 CVE
  41. 1,441.com.hazelcast.jet:hazelcast-jet1 CVE
  42. 1,442.com.hazelcast.jet:hazelcast-jet-enterprise1 CVE
  43. 1,443.com.hccake:ballcat-codegen1 CVE
  44. 1,444.com.hcl.security:ibm-application-security1 CVE
  45. 1,445.com.helger.commons:ph-json1 CVE
  46. 1,446.com.hoiio.jenkins:sms1 CVE
  47. 1,447.com.hotels.styx:styx-api1 CVE
  48. 1,448.com.ibeetl:beetl-core1 CVE
  49. 1,449.com.ibeetl:beetl-spring-classic1 CVE
  50. 1,450.com.ibm.devops:ibm-cloud-devops1 CVE

Which Maven packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →