Maven Package Vulnerabilities

All 3,225 Java / JVM artifacts with known CVEs, ranked by live CVE volume — 8,517 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 2,851.org.kohsuke:libpam4j1 CVE
  2. 2,852.org.kordamp.json:json-lib-core1 CVE
  3. 2,853.org.lilicurroad.jenkins:packageversion1 CVE
  4. 2,854.org.linlinjava:litemall-wx-api1 CVE
  5. 2,855.org.liquibase:liquibase-core1 CVE
  6. 2,856.org.lucee:lucee1 CVE
  7. 2,857.org.mapfish:print.print-servlet1 CVE
  8. 2,858.org.mengyun:tcc-transaction1 CVE
  9. 2,859.org.mindrot:jbcrypt1 CVE
  10. 2,860.org.mitre:openid-connect-parent1 CVE
  11. 2,861.org.mock-server:mockserver1 CVE
  12. 2,862.org.mongodb:mongodb-driver1 CVE
  13. 2,863.org.mongodb:mongodb-driver-legacy1 CVE
  14. 2,864.org.mongodb:mongodb-driver-sync1 CVE
  15. 2,865.org.mongodb:mongo-java-driver1 CVE
  16. 2,866.org.mortbay.jetty:jetty-webapp1 CVE
  17. 2,867.org.mozilla:rhino1 CVE
  18. 2,868.org.msgpack:msgpack-core1 CVE
  19. 2,869.org.mustangproject:library1 CVE
  20. 2,870.org.mustangproject:validator1 CVE
  21. 2,871.org.mvel:mvel21 CVE
  22. 2,872.org.mybatis:mybatis1 CVE
  23. 2,873.org.nanohttpd:nanohttpd-nanolets1 CVE
  24. 2,874.org.neo4j:neo4j-cypher1 CVE
  25. 2,875.org.neo4j:neo4j-enterprise1 CVE
  26. 2,876.org.neo4j:neo4j-kernel1 CVE
  27. 2,877.org.neo4j.procedure:apoc-core1 CVE
  28. 2,878.org.netbeans.html:pom1 CVE
  29. 2,879.org.ngrinder:ngrinder-core1 CVE
  30. 2,880.org.ninjaframework:ninja-core1 CVE
  31. 2,881.org.noear:solon-faas-luffy1 CVE
  32. 2,882.org.noear:solon-view1 CVE
  33. 2,883.org.noear:solon-web-staticfiles1 CVE
  34. 2,884.org.nokogiri:nekohtml1 CVE
  35. 2,885.org.nuxeo.ecm.platform:nuxeo-platform-oauth1 CVE
  36. 2,886.org.ohdsi:WebAPI1 CVE
  37. 2,887.org.onosproject:onos-base1 CVE
  38. 2,888.org.openapitools:openapi-generator-maven-plugin1 CVE
  39. 2,889.org.openapitools:openapi-generator-project1 CVE
  40. 2,890.org.opencastproject:opencast-common-jpa-impl1 CVE
  41. 2,891.org.opencastproject:opencast-elasticsearch-impl1 CVE
  42. 2,892.org.opencastproject:opencast-engage-paella-player-71 CVE
  43. 2,893.org.opencastproject:opencast-oaipmh-api1 CVE
  44. 2,894.org.opencastproject:opencast-publication-service-oaipmh-remote1 CVE
  45. 2,895.org.opencastproject:opencast-user-interface-configuration1 CVE
  46. 2,896.org.opencrx:opencrx-core-config1 CVE
  47. 2,897.org.opencrx:opencrx-gradle1 CVE
  48. 2,898.org.opendaylight.aaa:aaa-artifacts1 CVE
  49. 2,899.org.opendaylight.integration:distribution-karaf1 CVE
  50. 2,900.org.opendaylight.mdsal:mdsal-artifacts1 CVE

Which Maven packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →