Maven Package Vulnerabilities

All 3,225 Java / JVM artifacts with known CVEs, ranked by live CVE volume — 8,517 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 2,251.org.apache.seatunnel:seatunnel-web1 CVE
  2. 2,252.org.apache.sentry:sentry1 CVE
  3. 2,253.org.apache.servicecomb:java-chassis1 CVE
  4. 2,254.org.apache.servicemix.bundles:org.apache.servicemix.bundles.commons-io1 CVE
  5. 2,255.org.apache.shardingsphere:shardingsphere-proxy1 CVE
  6. 2,256.org.apache.shenyu:shenyu1 CVE
  7. 2,257.org.apache.shenyu:shenyu-bootstrap1 CVE
  8. 2,258.org.apache.shindig:shindig-php1 CVE
  9. 2,259.org.apache.shiro:shiro-all1 CVE
  10. 2,260.org.apache.shiro:shiro-spring-boot-starter1 CVE
  11. 2,261.org.apache.sis.core:sis-metadata1 CVE
  12. 2,262.org.apache.skywalking:apm-webapp1 CVE
  13. 2,263.org.apache.skywalking:oap-server1 CVE
  14. 2,264.org.apache.skywalking:server-core1 CVE
  15. 2,265.org.apache.sling:org.apache.sling.commons.json1 CVE
  16. 2,266.org.apache.sling:org.apache.sling.commons.log1 CVE
  17. 2,267.org.apache.sling:org.apache.sling.commons.messaging.mail1 CVE
  18. 2,268.org.apache.sling:org.apache.sling.engine1 CVE
  19. 2,269.org.apache.sling:org.apache.sling.i18n1 CVE
  20. 2,270.org.apache.sling:org.apache.sling.jcr.base1 CVE
  21. 2,271.org.apache.sling:org.apache.sling.jcr.contentloader1 CVE
  22. 2,272.org.apache.sling:org.apache.sling.resourcemerger1 CVE
  23. 2,273.org.apache.sling:org.apache.sling.servlets.resolver1 CVE
  24. 2,274.org.apache.solr:solr-solrj-streaming1 CVE
  25. 2,275.org.apache.spark:spark-core1 CVE
  26. 2,276.org.apache.spark:spark-hive-thriftserver_2.111 CVE
  27. 2,277.org.apache.spark:spark-hive-thriftserver_2.121 CVE
  28. 2,278.org.apache.spark:spark-network-common_2.121 CVE
  29. 2,279.org.apache.spark:spark-network-common_2.131 CVE
  30. 2,280.org.apache.spark:spark-parent_2.111 CVE
  31. 2,281.org.apache.sshd:sshd-git1 CVE
  32. 2,282.org.apache.sshd:sshd-mina1 CVE
  33. 2,283.org.apache.sshd:sshd-sftp1 CVE
  34. 2,284.org.apache.storm:storm-kafka1 CVE
  35. 2,285.org.apache.storm:storm-kafka-client1 CVE
  36. 2,286.org.apache.storm:storm-metrics-prometheus1 CVE
  37. 2,287.org.apache.storm:storm-webapp1 CVE
  38. 2,288.org.apache.streampark:streampark-common_2.111 CVE
  39. 2,289.org.apache.streampark:streampark-common_2.121 CVE
  40. 2,290.org.apache.streampipes:streampipes-resource-management1 CVE
  41. 2,291.org.apache.struts:struts2-convention-plugin1 CVE
  42. 2,292.org.apache.struts:struts2-dojo-plugin1 CVE
  43. 2,293.org.apache.struts:struts2-struts1-plugin1 CVE
  44. 2,294.org.apache.struts:struts-extras1 CVE
  45. 2,295.org.apache.struts:struts-parent1 CVE
  46. 2,296.org.apache.struts:struts-tiles1 CVE
  47. 2,297.org.apache.submarine:submarine-commons-utils1 CVE
  48. 2,298.org.apache.synapse:synapse-core1 CVE
  49. 2,299.org.apache.syncope.client:syncope-client-console1 CVE
  50. 2,300.org.apache.syncope.client:syncope-client-enduser1 CVE

Which Maven packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →