Maven Package Vulnerabilities

All 3,225 Java / JVM artifacts with known CVEs, ranked by live CVE volume — 8,517 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 2,301.org.apache.syncope.core:syncope-core-provisioning-api1 CVE
  2. 2,302.org.apache.systemds:systemds1 CVE
  3. 2,303.org.apache.taglibs:taglibs-standard1 CVE
  4. 2,304.org.apache.taglibs:taglibs-standard-impl1 CVE
  5. 2,305.org.apache.tapestry:tapestry-project1 CVE
  6. 2,306.org.apache.tika:tika-server1 CVE
  7. 2,307.org.apache.tomcat.experimental:tomcat-embed-programmatic1 CVE
  8. 2,308.org.apache.tomcat:jasper1 CVE
  9. 2,309.org.apache.tomcat:jsp-api1 CVE
  10. 2,310.org.apache.tomcat:servlet-api1 CVE
  11. 2,311.org.apache.tomcat:tomcat-catalina-jmx-remote1 CVE
  12. 2,312.org.apache.tomcat:tomcat-embed-core1 CVE
  13. 2,313.org.apache.tomcat:tomcat-juli1 CVE
  14. 2,314.org.apache.tomcat:tomcat-servlet-api1 CVE
  15. 2,315.org.apache.tomee:apache-tomee1 CVE
  16. 2,316.org.apache.tomee:tomee1 CVE
  17. 2,317.org.apache.tomee:tomee-webapp1 CVE
  18. 2,318.org.apache.uima:uima-ducc-parent1 CVE
  19. 2,319.org.apache.uima:uima-ducc-web1 CVE
  20. 2,320.org.apache.uima:uimafit-core1 CVE
  21. 2,321.org.apache.uima:uimaj1 CVE
  22. 2,322.org.apache.uima:uimaj-as-core1 CVE
  23. 2,323.org.apache.velocity.tools:velocity-tools-parent1 CVE
  24. 2,324.org.apache.velocity:velocity1 CVE
  25. 2,325.org.apache.velocity:velocity-engine-parent1 CVE
  26. 2,326.org.apache.velocity:velocity-tools1 CVE
  27. 2,327.org.apache.wicket:wicket1 CVE
  28. 2,328.org.apache.wicket:wicket-auth-roles1 CVE
  29. 2,329.org.apache.wicket:wicket-util1 CVE
  30. 2,330.org.apache.xmlbeans:xmlbeans1 CVE
  31. 2,331.org.apache.xmlgraphics:batik-script1 CVE
  32. 2,332.org.apache.xmlgraphics:batik-svgbrowser1 CVE
  33. 2,333.org.apache.xmlgraphics:batik-svgrasterizer1 CVE
  34. 2,334.org.apache.xmlgraphics:batik-transcoder1 CVE
  35. 2,335.org.apache.xmlgraphics:fop1 CVE
  36. 2,336.org.apache.xmlgraphics:fop-core1 CVE
  37. 2,337.org.apache.xmlgraphics:xmlgraphics-commons1 CVE
  38. 2,338.org.apache.xmlrpc:xmlrpc-common1 CVE
  39. 2,339.org.apache.zeppelin:sap1 CVE
  40. 2,340.org.apache.zeppelin:zeppelin-shell1 CVE
  41. 2,341.org.apereo.cas:cas-server-core-configuration-metadata-repository1 CVE
  42. 2,342.org.apereo.cas:cas-server-core-services-api1 CVE
  43. 2,343.org.apereo.cas:cas-server-core-services-authentication1 CVE
  44. 2,344.org.apereo.cas:cas-server-core-web1 CVE
  45. 2,345.org.apereo.cas:cas-server-support-oauth-core-api1 CVE
  46. 2,346.org.apereo.cas:cas-server-support-oidc1 CVE
  47. 2,347.org.apereo.cas:cas-server-support-otp-mfa-core1 CVE
  48. 2,348.org.apereo.cas:cas-server-support-shell1 CVE
  49. 2,349.org.apereo.cas:cas-server-support-simple-mfa1 CVE
  50. 2,350.org.apereo.cas:cas-server-support-x509-core1 CVE

Which Maven packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →