Maven Package Vulnerabilities

All 3,225 Java / JVM artifacts with known CVEs, ranked by live CVE volume — 8,517 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 2,151.org.apache.jspwiki:jspwiki-markdown1 CVE
  2. 2,152.org.apache.juddi:juddi-core1 CVE
  3. 2,153.org.apache.kafka:connect1 CVE
  4. 2,154.org.apache.kafka:kafka_2.8.01 CVE
  5. 2,155.org.apache.kafka:kafka_2.8.21 CVE
  6. 2,156.org.apache.kafka:kafka_2.9.11 CVE
  7. 2,157.org.apache.kafka:kafka_2.9.21 CVE
  8. 2,158.org.apache.kafka:kafka-metadata1 CVE
  9. 2,159.org.apache.karaf:cave1 CVE
  10. 2,160.org.apache.karaf.config:org.apache.karaf.config.core1 CVE
  11. 2,161.org.apache.karaf.decanter.collector:org.apache.karaf.decanter.collector.log.socket1 CVE
  12. 2,162.org.apache.karaf:karaf1 CVE
  13. 2,163.org.apache.karaf.specs:org.apache.karaf.specs.java.xml1 CVE
  14. 2,164.org.apache.kerby:ldap-backend1 CVE
  15. 2,165.org.apache.knox:gateway-provider-identity-assertion-common1 CVE
  16. 2,166.org.apache.knox:gateway-service-knoxsso1 CVE
  17. 2,167.org.apache.kylin:kylin-spark-project1 CVE
  18. 2,168.org.apache.kyuubi:kyuubi-server_2.121 CVE
  19. 2,169.org.apache.linkis:linkis-engineconn1 CVE
  20. 2,170.org.apache.linkis:linkis-engineplugin-spark1 CVE
  21. 2,171.org.apache.linkis:linkis-metadata1 CVE
  22. 2,172.org.apache.linkis:linkis-metadata-query-service-jdbc1 CVE
  23. 2,173.org.apache.logging.log4j:log4j-1.2-api1 CVE
  24. 2,174.org.apache.logging.log4j:log4j-api1 CVE
  25. 2,175.org.apache.logging.log4j:log4j-layout-template-json1 CVE
  26. 2,176.org.apache.lucene:lucene-replicator1 CVE
  27. 2,177.org.apache.maven:maven-compat1 CVE
  28. 2,178.org.apache.maven:maven-core1 CVE
  29. 2,179.org.apache.maven.plugins:maven-archetype-plugin1 CVE
  30. 2,180.org.apache.maven.shared:maven-shared-utils1 CVE
  31. 2,181.org.apache.myfaces.shared:myfaces-shared-core1 CVE
  32. 2,182.org.apache.myfaces.trinidad:trinidad1 CVE
  33. 2,183.org.apache.nifi:nifi-asana-processors1 CVE
  34. 2,184.org.apache.nifi:nifi-ccda-processors1 CVE
  35. 2,185.org.apache.nifi:nifi-cdc-mysql-bundle1 CVE
  36. 2,186.org.apache.nifi:nifi-cdc-mysql-processors1 CVE
  37. 2,187.org.apache.nifi:nifi-dbcp-service1 CVE
  38. 2,188.org.apache.nifi:nifi-dbcp-service-api1 CVE
  39. 2,189.org.apache.nifi:nifi-dbcp-service-bundle1 CVE
  40. 2,190.org.apache.nifi:nifi-dbcp-service-nar1 CVE
  41. 2,191.org.apache.nifi:nifi-framework-cluster1 CVE
  42. 2,192.org.apache.nifi:nifi-framework-cluster-protocol1 CVE
  43. 2,193.org.apache.nifi:nifi-hadoop-dbcp-service1 CVE
  44. 2,194.org.apache.nifi:nifi-hbase_2-client-service1 CVE
  45. 2,195.org.apache.nifi:nifi-jetty1 CVE
  46. 2,196.org.apache.nifi:nifi-jolt-transform-json-ui1 CVE
  47. 2,197.org.apache.nifi:nifi-mongodb-services1 CVE
  48. 2,198.org.apache.nifi:nifi-other-graph-services-nar1 CVE
  49. 2,199.org.apache.nifi:nifi-parameter1 CVE
  50. 2,200.org.apache.nifi:nifi-record-serialization-services1 CVE

Which Maven packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →