Maven Package Vulnerabilities

All 3,225 Java / JVM artifacts with known CVEs, ranked by live CVE volume — 8,517 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 1,801.io.jenkins.plugins:thycotic-secret-server1 CVE
  2. 1,802.io.jenkins.plugins:tics1 CVE
  3. 1,803.io.jenkins.plugins:tuleap-oauth1 CVE
  4. 1,804.io.jenkins.plugins:user1st-utester1 CVE
  5. 1,805.io.jenkins.plugins:validating-email-parameter1 CVE
  6. 1,806.io.jenkins.plugins:visualexpert1 CVE
  7. 1,807.io.jenkins.plugins:zohoqengine1 CVE
  8. 1,808.io.jmix.rest:jmix-rest1 CVE
  9. 1,809.io.jooby:jooby1 CVE
  10. 1,810.io.jooby:jooby-netty1 CVE
  11. 1,811.io.jooby:jooby-pac4j1 CVE
  12. 1,812.io.jstach:jstachio1 CVE
  13. 1,813.io.kestra:core1 CVE
  14. 1,814.io.kestra:kestra-core1 CVE
  15. 1,815.io.kroxylicious:kroxylicious-runtime1 CVE
  16. 1,816.io.ktor:ktor-client-cio1 CVE
  17. 1,817.io.ktor:ktor-client-core1 CVE
  18. 1,818.io.ktor:ktor-client-core-jvm1 CVE
  19. 1,819.io.ktor:ktor-server-cio1 CVE
  20. 1,820.io.loader:loaderio-jenkins-plugin1 CVE
  21. 1,821.io.metersphere:metersphere1 CVE
  22. 1,822.io.micrometer:micrometer-jetty111 CVE
  23. 1,823.io.micrometer:micrometer-jetty121 CVE
  24. 1,824.io.micronaut:micronaut-context1 CVE
  25. 1,825.io.micronaut:micronaut-http1 CVE
  26. 1,826.io.micronaut:micronaut-http-client1 CVE
  27. 1,827.io.micronaut:micronaut-http-server-tck1 CVE
  28. 1,828.io.micronaut:micronaut-inject1 CVE
  29. 1,829.io.micronaut:micronaut-json-core1 CVE
  30. 1,830.io.micronaut.security:micronaut-security-oauth21 CVE
  31. 1,831.io.minio:minio1 CVE
  32. 1,832.io.netty.incubator:netty-incubator-codec-ohttp-hpke-classes-boringssl1 CVE
  33. 1,833.io.netty.incubator:netty-incubator-codec-ohttp-hpke-native-boringssl1 CVE
  34. 1,834.io.netty.incubator:netty-incubator-codec-quic1 CVE
  35. 1,835.io.netty:netty-codec-mqtt1 CVE
  36. 1,836.io.netty:netty-codec-smtp1 CVE
  37. 1,837.io.netty:netty-handler-proxy1 CVE
  38. 1,838.io.netty:netty-parent1 CVE
  39. 1,839.io.netty:netty-transport-classes-epoll1 CVE
  40. 1,840.io.netty:netty-transport-native-kqueue1 CVE
  41. 1,841.io.nextflow:nextflow1 CVE
  42. 1,842.io.openremote:openremote-agent1 CVE
  43. 1,843.io.opentelemetry:opentelemetry-extension-trace-propagators1 CVE
  44. 1,844.io.pebbletemplates:pebble-project1 CVE
  45. 1,845.io.pivotal.spring.cloud:spring-cloud-sso-connector1 CVE
  46. 1,846.io.prestosql:presto-server1 CVE
  47. 1,847.io.projectreactor.netty:reactor-netty-core1 CVE
  48. 1,848.io.prometheus.jmx:jmx_prometheus_httpserver1 CVE
  49. 1,849.io.prometheus.jmx:jmx_prometheus_httpserver_java61 CVE
  50. 1,850.io.qameta.allure:allure-commandline1 CVE

Which Maven packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →