Maven Package Vulnerabilities

All 3,225 Java / JVM artifacts with known CVEs, ranked by live CVE volume — 8,517 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 2,201.org.apache.nifi:nifi-security1 CVE
  2. 2,202.org.apache.nifi:nifi-security-utils1 CVE
  3. 2,203.org.apache.nifi:nifi-single-user-utils1 CVE
  4. 2,204.org.apache.nifi:nifi-stateless1 CVE
  5. 2,205.org.apache.nifi:nifi-web-security1 CVE
  6. 2,206.org.apache.nifi.registry:nifi-registry-core1 CVE
  7. 2,207.org.apache.nifi.registry:nifi-registry-web-api1 CVE
  8. 2,208.org.apache.nutch:nutch1 CVE
  9. 2,209.org.apache.ode:ode1 CVE
  10. 2,210.org.apache.olingo:odata-client-proxy1 CVE
  11. 2,211.org.apache.olingo:odata-server-core1 CVE
  12. 2,212.org.apache.openjpa:openjpa1 CVE
  13. 2,213.org.apache.openmeetings:openmeetings-db1 CVE
  14. 2,214.org.apache.openmeetings:openmeetings-install1 CVE
  15. 2,215.org.apache.orc:orc1 CVE
  16. 2,216.org.apache.ozone:ozone1 CVE
  17. 2,217.org.apache.parquet:parquet1 CVE
  18. 2,218.org.apache.pekko:pekko-management_2.121 CVE
  19. 2,219.org.apache.pekko:pekko-management_2.131 CVE
  20. 2,220.org.apache.pekko:pekko-management_31 CVE
  21. 2,221.org.apache.pinot:pinot-broker1 CVE
  22. 2,222.org.apache.pinot:pinot-common1 CVE
  23. 2,223.org.apache.poi:poi-examples1 CVE
  24. 2,224.org.apache.poi:poi-ooxml1 CVE
  25. 2,225.org.apache.portals.pluto:chatRoomDemo1 CVE
  26. 2,226.org.apache.portals.pluto:pluto-container1 CVE
  27. 2,227.org.apache.pulsar:pulsar-broker-auth-sasl1 CVE
  28. 2,228.org.apache.pulsar:pulsar-client1 CVE
  29. 2,229.org.apache.pulsar:pulsar-io-kafka1 CVE
  30. 2,230.org.apache.pulsar:pulsar-io-kafka-connect-adaptor1 CVE
  31. 2,231.org.apache.pulsar:pulsar-websocket1 CVE
  32. 2,232.org.apache.qpid:qpid-broker-plugins-amqp-0-8-protocol1 CVE
  33. 2,233.org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol1 CVE
  34. 2,234.org.apache.qpid:qpid-client1 CVE
  35. 2,235.org.apache.qpid:qpid-jms-client1 CVE
  36. 2,236.org.apache.qpid:qpid-parent1 CVE
  37. 2,237.org.apache.ranger:ranger-hive-plugin1 CVE
  38. 2,238.org.apache.ranger:ranger-nifi-registry-plugin1 CVE
  39. 2,239.org.apache.ranger:security-admin-web1 CVE
  40. 2,240.org.apache.rave:rave-core1 CVE
  41. 2,241.org.apache.rave:rave-portal-resources1 CVE
  42. 2,242.org.apache.rave:rave-web1 CVE
  43. 2,243.org.apache.rocketmq:rocketmq-all1 CVE
  44. 2,244.org.apache.rocketmq:rocketmq-controller1 CVE
  45. 2,245.org.apache.seata:seata-core1 CVE
  46. 2,246.org.apache.seata:seata-parent1 CVE
  47. 2,247.org.apache.seata:seata-serializer-fury1 CVE
  48. 2,248.org.apache.seatunnel:seatunnel1 CVE
  49. 2,249.org.apache.seatunnel:seatunnel-engine-common1 CVE
  50. 2,250.org.apache.seatunnel:seatunnel-engine-server1 CVE

Which Maven packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →