Maven Package Vulnerabilities

All 3,225 Java / JVM artifacts with known CVEs, ranked by live CVE volume — 8,517 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 2,501.org.glassfish.main.web:web1 CVE
  2. 2,502.org.glassfish.main.web:web-core1 CVE
  3. 2,503.org.gluu:oxauth-common1 CVE
  4. 2,504.org.grails.plugins:fields1 CVE
  5. 2,505.org.graniteds:granite-core1 CVE
  6. 2,506.org.graniteds:granite-server-core1 CVE
  7. 2,507.org.hibernate.reactive:hibernate-reactive-core1 CVE
  8. 2,508.org.hl7.fhir.publisher:org.hl7.fhir.publisher1 CVE
  9. 2,509.org.hornetq:hornetq-core-client1 CVE
  10. 2,510.org.hornetq:hornetq-server1 CVE
  11. 2,511.org.hornetq.rest:hornetq-rest1 CVE
  12. 2,512.org.hsqldb:hsqldb1 CVE
  13. 2,513.org.hswebframework.web:hsweb-authorization-oauth21 CVE
  14. 2,514.org.hswebframework.web:hsweb-system-file1 CVE
  15. 2,515.org.http4k:http4k-format-xml1 CVE
  16. 2,516.org.http4s:blaze-core_2.111 CVE
  17. 2,517.org.http4s:blaze-core_2.121 CVE
  18. 2,518.org.http4s:blaze-core_2.131 CVE
  19. 2,519.org.http4s:blaze-http_2.121 CVE
  20. 2,520.org.http4s:http4s-blaze-server_31 CVE
  21. 2,521.org.http4s:http4s-core_2.101 CVE
  22. 2,522.org.http4s:http4s-core_2.111 CVE
  23. 2,523.org.http4s:http4s-core_2.121 CVE
  24. 2,524.org.http4s:http4s-core_2.131 CVE
  25. 2,525.org.http4s:http4s-ember-server_2.121 CVE
  26. 2,526.org.http4s:http4s-ember-server_2.131 CVE
  27. 2,527.org.http4s:http4s-ember-server_31 CVE
  28. 2,528.org.http4s:http4s-scala-xml_2.121 CVE
  29. 2,529.org.http4s:http4s-scala-xml_2.131 CVE
  30. 2,530.org.http4s:http4s-scala-xml_31 CVE
  31. 2,531.org.hudsonci.lib.guava:guava1 CVE
  32. 2,532.org.hyperledger.besu:evm1 CVE
  33. 2,533.org.hyperledger.fabric-chaincode-java:fabric-chaincode-shim1 CVE
  34. 2,534.org.hyperledger.fabric-sdk-java:fabric-sdk-java1 CVE
  35. 2,535.org.igniterealtime.openfire:openfire1 CVE
  36. 2,536.org.igniterealtime.smack:smack-core1 CVE
  37. 2,537.org.infinispan:infinispan-cachestore-jdbc1 CVE
  38. 2,538.org.infinispan:infinispan-cachestore-jdbc-common1 CVE
  39. 2,539.org.infinispan:infinispan-cachestore-remote1 CVE
  40. 2,540.org.infinispan:infinispan-cachestore-sql1 CVE
  41. 2,541.org.infinispan:infinispan-cli-client1 CVE
  42. 2,542.org.infinispan:infinispan-client-hotrod1 CVE
  43. 2,543.org.infinispan:infinispan-commons1 CVE
  44. 2,544.org.infinispan:infinispan-hotrod1 CVE
  45. 2,545.org.infinispan:infinispan-parent1 CVE
  46. 2,546.org.infinispan:infinispan-query1 CVE
  47. 2,547.org.infinispan:infinispan-server-core1 CVE
  48. 2,548.org.infinispan.protostream:protostream1 CVE
  49. 2,549.org.ini4j:ini4j1 CVE
  50. 2,550.org.iq80.snappy:snappy1 CVE

Which Maven packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →