Maven Package Vulnerabilities

All 3,086 Java / JVM artifacts with known CVEs, ranked by live CVE volume — 7,979 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 2,001.org.apache.heron:heron-simulator1 CVE
  2. 2,002.org.apache.hive:hive-common1 CVE
  3. 2,003.org.apache.hive:hive-llap-common1 CVE
  4. 2,004.org.apache.hive:hive-metastore1 CVE
  5. 2,005.org.apache.hop:hop1 CVE
  6. 2,006.org.apache.hugegraph:hg-pd-core1 CVE
  7. 2,007.org.apache.hugegraph:hugegraph-core1 CVE
  8. 2,008.org.apache.hugegraph:hugegraph-hubble1 CVE
  9. 2,009.org.apache.hugegraph:hugegraph-server1 CVE
  10. 2,010.org.apache.inlong:inlong-common1 CVE
  11. 2,011.org.apache.inlong:manager-workflow1 CVE
  12. 2,012.org.apache.inlong:tubemq-core1 CVE
  13. 2,013.org.apache.iotdb:flink-tsfile-connector1 CVE
  14. 2,014.org.apache.iotdb:iotdb-confignode1 CVE
  15. 2,015.org.apache.iotdb:iotdb-jdbc1 CVE
  16. 2,016.org.apache.iotdb:node-commons1 CVE
  17. 2,017.org.apache.iotdb:tsfile1 CVE
  18. 2,018.org.apache.jackrabbit:jackrabbit1 CVE
  19. 2,019.org.apache.jackrabbit:jackrabbit-jcr-commons1 CVE
  20. 2,020.org.apache.jackrabbit:jackrabbit-spi-commons1 CVE
  21. 2,021.org.apache.jackrabbit:jackrabbit-standalone1 CVE
  22. 2,022.org.apache.jackrabbit:jackrabbit-standalone-components1 CVE
  23. 2,023.org.apache.jackrabbit:jackrabbit-webapp1 CVE
  24. 2,024.org.apache.jackrabbit:jackrabbit-webdav1 CVE
  25. 2,025.org.apache.jackrabbit:oak-core1 CVE
  26. 2,026.org.apache.james:apache-mime4j-core1 CVE
  27. 2,027.org.apache.james:apache-mime4j-storage1 CVE
  28. 2,028.org.apache.james.hupa:hupa-parent1 CVE
  29. 2,029.org.apache.james:james-project1 CVE
  30. 2,030.org.apache.james:james-server-jmap-draft1 CVE
  31. 2,031.org.apache.james:javax-mail-extension1 CVE
  32. 2,032.org.apache.james.protocols:protocols-imap1 CVE
  33. 2,033.org.apache.jena:jena-core1 CVE
  34. 2,034.org.apache.jena:jena-sdb1 CVE
  35. 2,035.org.apache.johnzon:johnzon-mapper1 CVE
  36. 2,036.org.apache.jspwiki:jspwiki-markdown1 CVE
  37. 2,037.org.apache.juddi:juddi-core1 CVE
  38. 2,038.org.apache.kafka:connect1 CVE
  39. 2,039.org.apache.kafka:kafka_2.8.01 CVE
  40. 2,040.org.apache.kafka:kafka_2.8.21 CVE
  41. 2,041.org.apache.kafka:kafka_2.9.11 CVE
  42. 2,042.org.apache.kafka:kafka_2.9.21 CVE
  43. 2,043.org.apache.kafka:kafka-metadata1 CVE
  44. 2,044.org.apache.karaf:cave1 CVE
  45. 2,045.org.apache.karaf.config:org.apache.karaf.config.core1 CVE
  46. 2,046.org.apache.karaf.decanter.collector:org.apache.karaf.decanter.collector.log.socket1 CVE
  47. 2,047.org.apache.karaf:karaf1 CVE
  48. 2,048.org.apache.karaf.specs:org.apache.karaf.specs.java.xml1 CVE
  49. 2,049.org.apache.kerby:ldap-backend1 CVE
  50. 2,050.org.apache.knox:gateway-provider-identity-assertion-common1 CVE

Which Maven packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Start Free Scan →