Maven Package Vulnerabilities

All 3,225 Java / JVM artifacts with known CVEs, ranked by live CVE volume — 8,517 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 2,451.org.eclipse.vorto:org.eclipse.vorto.core1 CVE
  2. 2,452.org.eclipse.xtend:org.eclipse.xtend.core1 CVE
  3. 2,453.org.eclipse.xtext:org.eclipse.xtext1 CVE
  4. 2,454.org.elasticsearch.client:elasticsearch-rest-client1 CVE
  5. 2,455.org.elasticsearch:elasticsearch-grok1 CVE
  6. 2,456.org.elasticsearch:elasticsearch-hadoop1 CVE
  7. 2,457.org.elasticsearch.plugin:reindex-client1 CVE
  8. 2,458.org.elasticsearch.plugin:x-pack1 CVE
  9. 2,459.org.esigate:esigate-core1 CVE
  10. 2,460.org.ethereum:ethereumj-core1 CVE
  11. 2,461.org.exist-db:exist-core1 CVE
  12. 2,462.org.expressme:JOpenId1 CVE
  13. 2,463.org.fedoraproject.jenkins.plugins:copr1 CVE
  14. 2,464.org.ff4j:ff4j-core1 CVE
  15. 2,465.org.fhir:ucum1 CVE
  16. 2,466.org.folio:mod-data-export-spring1 CVE
  17. 2,467.org.folio:mod-remote-storage1 CVE
  18. 2,468.org.folio:spring-module-core1 CVE
  19. 2,469.org.fourthline.cling:cling-core1 CVE
  20. 2,470.org.freemarker:freemarker1 CVE
  21. 2,471.org.fusesource.hawtjni:hawtjni-runtime1 CVE
  22. 2,472.org.gaul:s3proxy1 CVE
  23. 2,473.org.geonetwork-opensource:gn-services1 CVE
  24. 2,474.org.geonetwork-opensource:gn-web-app1 CVE
  25. 2,475.org.geoserver.community:gs-jdbcconfig1 CVE
  26. 2,476.org.geoserver.extension:gs-db21 CVE
  27. 2,477.org.geoserver.extension:gs-mapml1 CVE
  28. 2,478.org.geoserver:gs-gwc-rest1 CVE
  29. 2,479.org.geoserver:gs-ows1 CVE
  30. 2,480.org.geoserver:gs-platform1 CVE
  31. 2,481.org.geoserver:gs-wps1 CVE
  32. 2,482.org.geoserver.main:gs-main1 CVE
  33. 2,483.org.geoserver.web:gs-app1 CVE
  34. 2,484.org.geoserver.web:gs-web-core1 CVE
  35. 2,485.org.geoserver.web:gs-web-sec-core1 CVE
  36. 2,486.org.geotools:gt-app-schema1 CVE
  37. 2,487.org.geotools:gt-complex1 CVE
  38. 2,488.org.geotools:gt-jdbc1 CVE
  39. 2,489.org.geotools.jdbc:gt-jdbc-postgis1 CVE
  40. 2,490.org.geotools.xsd:gt-xsd-core1 CVE
  41. 2,491.org.geysermc:connector1 CVE
  42. 2,492.org.geysermc.geyser:core1 CVE
  43. 2,493.org.glassfish:jakarta.el1 CVE
  44. 2,494.org.glassfish:jakarta.faces1 CVE
  45. 2,495.org.glassfish:javax.el1 CVE
  46. 2,496.org.glassfish.jersey.core:jersey-client1 CVE
  47. 2,497.org.glassfish.jersey.core:jersey-common1 CVE
  48. 2,498.org.glassfish.main.admingui:admingui1 CVE
  49. 2,499.org.glassfish.main.admin:rest-service1 CVE
  50. 2,500.org.glassfish.main.orb:orb-connector1 CVE

Which Maven packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →