Maven Package Vulnerabilities

All 3,086 Java / JVM artifacts with known CVEs, ranked by live CVE volume — 7,979 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 201.org.apache.solr:solr-parent6 CVEs
  2. 202.org.apache.storm:storm-core6 CVEs
  3. 203.org.apache.streampipes:streampipes-parent6 CVEs
  4. 204.org.apache.struts:struts2-rest-plugin6 CVEs
  5. 205.org.apache.struts:struts-core6 CVEs
  6. 206.org.apache.tika:tika6 CVEs
  7. 207.org.apache.tomcat:tomcat-util6 CVEs
  8. 208.org.apache.zeppelin:zeppelin-server6 CVEs
  9. 209.org.csanchez.jenkins.plugins:kubernetes6 CVEs
  10. 210.org.geoserver:gs-main6 CVEs
  11. 211.org.glassfish.main.admingui:console-common6 CVEs
  12. 212.org.hibernate:hibernate-validator6 CVEs
  13. 213.org.igniterealtime.openfire:xmppserver6 CVEs
  14. 214.org.jeecgframework.boot:jeecg-boot-base-core6 CVEs
  15. 215.org.jenkins-ci.plugins:azure-ad6 CVEs
  16. 216.org.jenkins-ci.plugins:azure-vm-agents6 CVEs
  17. 217.org.jenkins-ci.plugins:ec2-deployment-dashboard6 CVEs
  18. 218.org.jenkins-ci.plugins:fortify-on-demand-uploader6 CVEs
  19. 219.org.jenkins-ci.plugins:ghprb6 CVEs
  20. 220.org.jenkins-ci.plugins:gitlab-oauth6 CVEs
  21. 221.org.jenkins-ci.plugins:gitlab-plugin6 CVEs
  22. 222.org.jenkins-ci.plugins:pipeline-maven6 CVEs
  23. 223.org.jenkins-ci.plugins:repository-connector6 CVEs
  24. 224.org.keycloak:keycloak-server-spi-private6 CVEs
  25. 225.org.openidentityplatform.openam:openam-oauth26 CVEs
  26. 226.org.pytorch:executorch-android6 CVEs
  27. 227.org.silverpeas.core:silverpeas-core6 CVEs
  28. 228.org.springframework.security:spring-security-web6 CVEs
  29. 229.org.wildfly:wildfly-parent6 CVEs
  30. 230.org.xwiki.commons:xwiki-commons-xml6 CVEs
  31. 231.org.xwiki.platform:xwiki-platform-flamingo-skin-resources6 CVEs
  32. 232.org.yamcs:yamcs-core6 CVEs
  33. 233.ca.uhn.hapi.fhir:org.hl7.fhir.convertors5 CVEs
  34. 234.ca.uhn.hapi.fhir:org.hl7.fhir.dstu25 CVEs
  35. 235.com.alibaba:dubbo5 CVEs
  36. 236.com.coravy.hudson.plugins.github:github5 CVEs
  37. 237.com.liferay:com.liferay.portal.search.web5 CVEs
  38. 238.com.mabl.integration.jenkins:mabl-integration5 CVEs
  39. 239.com.rapid7:jenkinsci-appspider-plugin5 CVEs
  40. 240.com.shopizer:shopizer5 CVEs
  41. 241.com.synopsys.jenkinsci:ownership5 CVEs
  42. 242.com.vaadin:vaadin5 CVEs
  43. 243.edu.stanford.nlp:stanford-corenlp5 CVEs
  44. 244.info.magnolia:magnolia-core5 CVEs
  45. 245.io.jenkins.plugins:neuvector-vulnerability-scanner5 CVEs
  46. 246.io.netty:netty-codec5 CVEs
  47. 247.io.netty:netty-codec-haproxy5 CVEs
  48. 248.io.netty:netty-codec-redis5 CVEs
  49. 249.io.projectreactor.netty:reactor-netty-http5 CVEs
  50. 250.org.apache.atlas:apache-atlas5 CVEs

Which Maven packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Start Free Scan →