Maven Package Vulnerabilities

All 3,225 Java / JVM artifacts with known CVEs, ranked by live CVE volume — 8,517 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 201.ca.uhn.hapi.fhir:org.hl7.fhir.validation.cli6 CVEs
  2. 202.cn.hutool:hutool-json6 CVEs
  3. 203.com.coravy.hudson.plugins.github:github6 CVEs
  4. 204.com.datapipe.jenkins.plugins:hashicorp-vault-plugin6 CVEs
  5. 205.com.fasterxml.jackson.core:jackson-core6 CVEs
  6. 206.com.github.junrar:junrar6 CVEs
  7. 207.com.google.protobuf:protobuf-java6 CVEs
  8. 208.com.jflyfox:jflyfox_jfinal6 CVEs
  9. 209.com.liferay.portal:com.liferay.portal.kernel6 CVEs
  10. 210.com.nimbusds:nimbus-jose-jwt6 CVEs
  11. 211.com.sonyericsson.hudson.plugins.gerrit:gerrit-trigger6 CVEs
  12. 212.com.vaadin:vaadin-server6 CVEs
  13. 213.com.xebialabs.deployit.ci:deployit-plugin6 CVEs
  14. 214.com.xuxueli:xxl-job-core6 CVEs
  15. 215.gov.nsa.emissary:emissary6 CVEs
  16. 216.hudson.plugins:project-inheritance6 CVEs
  17. 217.io.netty:netty-codec-redis6 CVEs
  18. 218.log4j:log4j6 CVEs
  19. 219.net.sf.mpxj:mpxj6 CVEs
  20. 220.org.apache.cxf:cxf-rt-rs-security-oauth26 CVEs
  21. 221.org.apache.httpcomponents:httpclient6 CVEs
  22. 222.org.apache.kylin:kylin-core-common6 CVEs
  23. 223.org.apache.mesos:mesos6 CVEs
  24. 224.org.apache.nifi:nifi-web-api6 CVEs
  25. 225.org.apache.pulsar:pulsar-broker6 CVEs
  26. 226.org.apache.shenyu:shenyu-common6 CVEs
  27. 227.org.apache.solr:solr-parent6 CVEs
  28. 228.org.apache.storm:storm-core6 CVEs
  29. 229.org.apache.streampipes:streampipes-parent6 CVEs
  30. 230.org.apache.struts:struts2-rest-plugin6 CVEs
  31. 231.org.apache.struts:struts-core6 CVEs
  32. 232.org.apache.thrift:libthrift6 CVEs
  33. 233.org.apache.tika:tika6 CVEs
  34. 234.org.apache.tomcat:tomcat-util6 CVEs
  35. 235.org.apache.zeppelin:zeppelin-server6 CVEs
  36. 236.org.csanchez.jenkins.plugins:kubernetes6 CVEs
  37. 237.org.glassfish.main.admingui:console-common6 CVEs
  38. 238.org.hibernate:hibernate-validator6 CVEs
  39. 239.org.igniterealtime.openfire:xmppserver6 CVEs
  40. 240.org.jeecgframework.boot:jeecg-boot-base-core6 CVEs
  41. 241.org.jenkins-ci.plugins:azure-ad6 CVEs
  42. 242.org.jenkins-ci.plugins:azure-vm-agents6 CVEs
  43. 243.org.jenkins-ci.plugins:ec2-deployment-dashboard6 CVEs
  44. 244.org.jenkins-ci.plugins:fortify-on-demand-uploader6 CVEs
  45. 245.org.jenkins-ci.plugins:ghprb6 CVEs
  46. 246.org.jenkins-ci.plugins:git-client6 CVEs
  47. 247.org.jenkins-ci.plugins:gitlab-oauth6 CVEs
  48. 248.org.jenkins-ci.plugins:gitlab-plugin6 CVEs
  49. 249.org.jenkins-ci.plugins:pipeline-maven6 CVEs
  50. 250.org.jenkins-ci.plugins:repository-connector6 CVEs

Which Maven packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →