Maven Package Vulnerabilities

All 3,225 Java / JVM artifacts with known CVEs, ranked by live CVE volume — 8,517 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 2,351.org.apereo.cas:cas-server-webapp1 CVE
  2. 2,352.org.apktool:apktool-lib1 CVE
  3. 2,353.org.assertj:assertj-core1 CVE
  4. 2,354.org.b3log:symphony1 CVE
  5. 2,355.org.bedework:bw-webdav1 CVE
  6. 2,356.org.bedework.caleng:bw-calendar-engine1 CVE
  7. 2,357.org.biscuitsec:biscuit1 CVE
  8. 2,358.org.bitcoinj:bitcoinj-core1 CVE
  9. 2,359.org.bonitasoft.connectors:bonita-connector-webservice1 CVE
  10. 2,360.org.bonitasoft.console:bonita-web-server1 CVE
  11. 2,361.org.bonitasoft.engine:bonita-server1 CVE
  12. 2,362.org.bonitasoft.platform:platform-resources1 CVE
  13. 2,363.org.boofcv:boofcv-core1 CVE
  14. 2,364.org.bouncycastle:bcpg-jdk121 CVE
  15. 2,365.org.bouncycastle:bcpg-jdk141 CVE
  16. 2,366.org.bouncycastle:bcpg-jdk151 CVE
  17. 2,367.org.bouncycastle:bcpg-jdk15on1 CVE
  18. 2,368.org.bouncycastle:bcpg-jdk15to181 CVE
  19. 2,369.org.bouncycastle:bcpg-jdk161 CVE
  20. 2,370.org.bouncycastle:bcpg-jdk18on1 CVE
  21. 2,371.org.bouncycastle:bcpkix-debug-jdk141 CVE
  22. 2,372.org.bouncycastle:bcpkix-debug-jdk15to181 CVE
  23. 2,373.org.bouncycastle:bcpkix-debug-jdk18on1 CVE
  24. 2,374.org.bouncycastle:bcpkix-fips1 CVE
  25. 2,375.org.bouncycastle:bcpkix-jdk141 CVE
  26. 2,376.org.bouncycastle:bcprov-debug-lts8on1 CVE
  27. 2,377.org.bouncycastle:bcprov-ext-debug-jdk141 CVE
  28. 2,378.org.bouncycastle:bcprov-ext-debug-jdk15to181 CVE
  29. 2,379.org.bouncycastle:bcprov-ext-debug-jdk18on1 CVE
  30. 2,380.org.bouncycastle:bcprov-jdk121 CVE
  31. 2,381.org.broadleafcommerce:broadleaf1 CVE
  32. 2,382.org.bytedeco:javacv1 CVE
  33. 2,383.org.checkerframework.annotatedlib:commons-io1 CVE
  34. 2,384.org.codehaus.castor:castor1 CVE
  35. 2,385.org.codehaus.izpack:izpack-installer1 CVE
  36. 2,386.org.codehaus.janino:janino-parent1 CVE
  37. 2,387.org.codehaus.xfire:xfire-core1 CVE
  38. 2,388.org.cometd.java:cometd-java-oort1 CVE
  39. 2,389.org.cometd.java:cometd-java-server-common1 CVE
  40. 2,390.org.conductoross:conductor-core1 CVE
  41. 2,391.org.craftercms:crafter-engine1 CVE
  42. 2,392.org.craftercms:crafter-search1 CVE
  43. 2,393.org.cryptacular:cryptacular1 CVE
  44. 2,394.org.deeplearning4j:dl4j-examples1 CVE
  45. 2,395.org.deeplearning4j:platform-tests1 CVE
  46. 2,396.org.docx4j:docx4j-core1 CVE
  47. 2,397.org.dromara.warm:warm-flow-plugin-modes-sb1 CVE
  48. 2,398.org.dspace:dspace-server-webapp1 CVE
  49. 2,399.org.eclipse.angus:smtp1 CVE
  50. 2,400.org.eclipse.birt:org.eclipse.birt.report.viewer1 CVE

Which Maven packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →