Maven Package Vulnerabilities

All 3,086 Java / JVM artifacts with known CVEs, ranked by live CVE volume — 7,979 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 1,951.org.apache.dolphinscheduler:dolphinscheduler-alert-plugins1 CVE
  2. 1,952.org.apache.dolphinscheduler:dolphinscheduler-dao1 CVE
  3. 1,953.org.apache.dolphinscheduler:dolphinscheduler-rpc1 CVE
  4. 1,954.org.apache.dolphinscheduler:dolphinscheduler-server1 CVE
  5. 1,955.org.apache.dolphinscheduler:dolphinscheduler-service1 CVE
  6. 1,956.org.apache.dolphinscheduler:dolphinscheduler-task-api1 CVE
  7. 1,957.org.apache.drill:drill-common1 CVE
  8. 1,958.org.apache.drill.exec:drill-java-exec1 CVE
  9. 1,959.org.apache.druid.extensions:druid-basic-security1 CVE
  10. 1,960.org.apache.druid.extensions:druid-pac4j1 CVE
  11. 1,961.org.apache.dubbo:dubbo-common1 CVE
  12. 1,962.org.apache.dubbo:dubbo-rpc-http-invoker1 CVE
  13. 1,963.org.apache.eventmesh:eventmesh-connector-rabbitmq1 CVE
  14. 1,964.org.apache.eventmesh:eventmesh-meta-raft1 CVE
  15. 1,965.org.apache.eventmesh:eventmesh-runtime1 CVE
  16. 1,966.org.apache-extras.beanshell:bsh1 CVE
  17. 1,967.org.apache.felix:org.apache.felix.healthcheck.webconsoleplugin1 CVE
  18. 1,968.org.apache.felix:org.apache.felix.http.webconsoleplugin1 CVE
  19. 1,969.org.apache.felix:org.apache.felix.webconsole1 CVE
  20. 1,970.org.apache.fesod:fesod-sheet1 CVE
  21. 1,971.org.apache.flex.blazeds:flex-messaging-core1 CVE
  22. 1,972.org.apache.flex.blazeds:flex-messaging-remoting1 CVE
  23. 1,973.org.apache.flink:flink-cdc-pipeline-connectors1 CVE
  24. 1,974.org.apache.flink:flink-connector-db2-cdc1 CVE
  25. 1,975.org.apache.flink:flink-connector-mysql-cdc1 CVE
  26. 1,976.org.apache.flink:flink-connector-oracle-cdc1 CVE
  27. 1,977.org.apache.flink:flink-connector-sqlserver-cdc1 CVE
  28. 1,978.org.apache.flink:flink-core1 CVE
  29. 1,979.org.apache.flink:flink-runtime1 CVE
  30. 1,980.org.apache.flink:flink-runtime_2.111 CVE
  31. 1,981.org.apache.flink:flink-runtime_2.121 CVE
  32. 1,982.org.apache.flink:flink-table-api-java1 CVE
  33. 1,983.org.apache.flink:flink-table-planner_2.121 CVE
  34. 1,984.org.apache.flink:flink-table-runtime1 CVE
  35. 1,985.org.apache.fluss:fluss-common1 CVE
  36. 1,986.org.apache.geode:geode-web1 CVE
  37. 1,987.org.apache.geode:geode-web-api1 CVE
  38. 1,988.org.apache.geronimo.framework:geronimo-jmx-remoting1 CVE
  39. 1,989.org.apache.geronimo:geronimo1 CVE
  40. 1,990.org.apache.hadoop:hadoop-hdfs-native-client1 CVE
  41. 1,991.org.apache.hadoop:hadoop-ozone-ozone-manager1 CVE
  42. 1,992.org.apache.hadoop:hadoop-yarn-project1 CVE
  43. 1,993.org.apache.hadoop:hadoop-yarn-server1 CVE
  44. 1,994.org.apache.hadoop:hadoop-yarn-server-common1 CVE
  45. 1,995.org.apache.hadoop:hadoop-yarn-server-nodemanager1 CVE
  46. 1,996.org.apache.hama:hama-core1 CVE
  47. 1,997.org.apache.hbase:hbase-thrift1 CVE
  48. 1,998.org.apache.helix:helix-core1 CVE
  49. 1,999.org.apache.helix:helix-rest1 CVE
  50. 2,000.org.apache.heron:heron-api1 CVE

Which Maven packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Start Free Scan →