Maven Package Vulnerabilities

All 3,225 Java / JVM artifacts with known CVEs, ranked by live CVE volume — 8,517 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 2,101.org.apache.geronimo.framework:geronimo-jmx-remoting1 CVE
  2. 2,102.org.apache.geronimo:geronimo1 CVE
  3. 2,103.org.apache.hadoop:hadoop-hdfs-native-client1 CVE
  4. 2,104.org.apache.hadoop:hadoop-ozone-ozone-manager1 CVE
  5. 2,105.org.apache.hadoop:hadoop-yarn-project1 CVE
  6. 2,106.org.apache.hadoop:hadoop-yarn-server1 CVE
  7. 2,107.org.apache.hadoop:hadoop-yarn-server-common1 CVE
  8. 2,108.org.apache.hadoop:hadoop-yarn-server-nodemanager1 CVE
  9. 2,109.org.apache.hama:hama-core1 CVE
  10. 2,110.org.apache.hbase:hbase-thrift1 CVE
  11. 2,111.org.apache.helix:helix-core1 CVE
  12. 2,112.org.apache.helix:helix-rest1 CVE
  13. 2,113.org.apache.heron:heron-api1 CVE
  14. 2,114.org.apache.heron:heron-simulator1 CVE
  15. 2,115.org.apache.hive:hive-common1 CVE
  16. 2,116.org.apache.hive:hive-llap-common1 CVE
  17. 2,117.org.apache.hive:hive-metastore1 CVE
  18. 2,118.org.apache.hop:hop1 CVE
  19. 2,119.org.apache.httpcomponents.core5:httpcore51 CVE
  20. 2,120.org.apache.httpcomponents.core5:httpcore5-h21 CVE
  21. 2,121.org.apache.hugegraph:hg-pd-core1 CVE
  22. 2,122.org.apache.hugegraph:hugegraph-core1 CVE
  23. 2,123.org.apache.hugegraph:hugegraph-hubble1 CVE
  24. 2,124.org.apache.hugegraph:hugegraph-server1 CVE
  25. 2,125.org.apache.inlong:inlong-common1 CVE
  26. 2,126.org.apache.inlong:manager-workflow1 CVE
  27. 2,127.org.apache.inlong:tubemq-core1 CVE
  28. 2,128.org.apache.iotdb:flink-tsfile-connector1 CVE
  29. 2,129.org.apache.iotdb:iotdb-confignode1 CVE
  30. 2,130.org.apache.iotdb:iotdb-jdbc1 CVE
  31. 2,131.org.apache.iotdb:node-commons1 CVE
  32. 2,132.org.apache.iotdb:tsfile1 CVE
  33. 2,133.org.apache.jackrabbit:jackrabbit1 CVE
  34. 2,134.org.apache.jackrabbit:jackrabbit-jcr-commons1 CVE
  35. 2,135.org.apache.jackrabbit:jackrabbit-spi-commons1 CVE
  36. 2,136.org.apache.jackrabbit:jackrabbit-standalone1 CVE
  37. 2,137.org.apache.jackrabbit:jackrabbit-standalone-components1 CVE
  38. 2,138.org.apache.jackrabbit:jackrabbit-webapp1 CVE
  39. 2,139.org.apache.jackrabbit:jackrabbit-webdav1 CVE
  40. 2,140.org.apache.jackrabbit:oak-core1 CVE
  41. 2,141.org.apache.james:apache-mime4j-core1 CVE
  42. 2,142.org.apache.james:apache-mime4j-storage1 CVE
  43. 2,143.org.apache.james.hupa:hupa-parent1 CVE
  44. 2,144.org.apache.james:james-project1 CVE
  45. 2,145.org.apache.james:james-server-jmap-draft1 CVE
  46. 2,146.org.apache.james:javax-mail-extension1 CVE
  47. 2,147.org.apache.james.protocols:protocols-imap1 CVE
  48. 2,148.org.apache.jena:jena-core1 CVE
  49. 2,149.org.apache.jena:jena-sdb1 CVE
  50. 2,150.org.apache.johnzon:johnzon-mapper1 CVE

Which Maven packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →