Maven Package Vulnerabilities

All 3,225 Java / JVM artifacts with known CVEs, ranked by live CVE volume — 8,517 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 2,901.org.opendaylight.odlparent:opendaylight-karaf-resources1 CVE
  2. 2,902.org.opendaylight.sfc:sfc-parent1 CVE
  3. 2,903.org.openid4java:openid4java1 CVE
  4. 2,904.org.openidentityplatform.openam:openam1 CVE
  5. 2,905.org.openidentityplatform.openam:openam-auth-msisdn1 CVE
  6. 2,906.org.openidentityplatform.openam:openam-auth-oauth21 CVE
  7. 2,907.org.openidentityplatform.openam:openam-core-rest1 CVE
  8. 2,908.org.openidentityplatform.openam:openam-federation1 CVE
  9. 2,909.org.openidentityplatform.openam:openam-push-notification1 CVE
  10. 2,910.org.openidentityplatform.openam:openam-radius1 CVE
  11. 2,911.org.openidentityplatform.openam:openam-scripting1 CVE
  12. 2,912.org.openjfx:javafx-media1 CVE
  13. 2,913.org.open-metadata:openmetadata-sdk1 CVE
  14. 2,914.org.open-metadata:platform1 CVE
  15. 2,915.org.openmrs.api:openmrs-api1 CVE
  16. 2,916.org.opennms.core:org.opennms.core.daemon1 CVE
  17. 2,917.org.opennms.core:org.opennms.core.xml1 CVE
  18. 2,918.org.opennms.features:org.opennms.features.measurements1 CVE
  19. 2,919.org.opennms:opennms-base-assembly1 CVE
  20. 2,920.org.opennms:opennms-config1 CVE
  21. 2,921.org.opennms:opennms-provision1 CVE
  22. 2,922.org.opennms:opennms-util1 CVE
  23. 2,923.org.opennms:opennms-web-api1 CVE
  24. 2,924.org.openrefine.dependencies:butterfly1 CVE
  25. 2,925.org.openrefine:extensions1 CVE
  26. 2,926.org.opensearch.dataprepper.plugins:opensearch1 CVE
  27. 2,927.org.opensearch:opensearch-common1 CVE
  28. 2,928.org.opensearch.plugin:opensearch-observability1 CVE
  29. 2,929.org.opensearch.plugin:opensearch-reports-scheduler1 CVE
  30. 2,930.org.owasp:csrfguard1 CVE
  31. 2,931.org.owasp:dependency-check-ant1 CVE
  32. 2,932.org.owasp:dependency-check-cli1 CVE
  33. 2,933.org.pac4j:pac4j-jwt1 CVE
  34. 2,934.org.pac4j:pac4j-oidc1 CVE
  35. 2,935.org.pac4j:pac4j-saml1 CVE
  36. 2,936.org.picketlink:picketlink-common1 CVE
  37. 2,937.org.picketlink:picketlink-tomcat-common1 CVE
  38. 2,938.org.postgresql:pgjdbc-aggregate1 CVE
  39. 2,939.org.powertac:server-interface1 CVE
  40. 2,940.org.python:jython1 CVE
  41. 2,941.org.quartz-scheduler:quartz1 CVE
  42. 2,942.org.redisson:redisson1 CVE
  43. 2,943.org.restlet.jse:org.restlet.ext.jaxrs1 CVE
  44. 2,944.org.rundeck:rundeckapp1 CVE
  45. 2,945.org.sakaiproject:chat-base1 CVE
  46. 2,946.org.sakaiproject.conversations:sakai-conversations-impl1 CVE
  47. 2,947.org.sakaiproject.profile2:profile2-api1 CVE
  48. 2,948.org.sakaiproject.profile2:profile2-impl1 CVE
  49. 2,949.org.sakaiproject.rubrics:rubrics-impl1 CVE
  50. 2,950.org.scala-lang:scala-compiler1 CVE

Which Maven packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →