Maven Package Vulnerabilities

All 3,225 Java / JVM artifacts with known CVEs, ranked by live CVE volume — 8,517 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 251.org.jenkins-ci.tools:git-parameter6 CVEs
  2. 252.org.pytorch:executorch-android6 CVEs
  3. 253.org.wildfly:wildfly-parent6 CVEs
  4. 254.org.xerial.snappy:snappy-java6 CVEs
  5. 255.org.xwiki.commons:xwiki-commons-xml6 CVEs
  6. 256.org.xwiki.platform:xwiki-platform-flamingo-skin-resources6 CVEs
  7. 257.ca.uhn.hapi.fhir:org.hl7.fhir.convertors5 CVEs
  8. 258.ca.uhn.hapi.fhir:org.hl7.fhir.dstu25 CVEs
  9. 259.com.alibaba:dubbo5 CVEs
  10. 260.com.liferay:com.liferay.portal.search.web5 CVEs
  11. 261.com.mabl.integration.jenkins:mabl-integration5 CVEs
  12. 262.com.rapid7:jenkinsci-appspider-plugin5 CVEs
  13. 263.com.shopizer:shopizer5 CVEs
  14. 264.com.synopsys.jenkinsci:ownership5 CVEs
  15. 265.com.vaadin:vaadin5 CVEs
  16. 266.edu.stanford.nlp:stanford-corenlp5 CVEs
  17. 267.info.magnolia:magnolia-core5 CVEs
  18. 268.io.jenkins.plugins:neuvector-vulnerability-scanner5 CVEs
  19. 269.io.jenkins.plugins:pipeline-groovy-lib5 CVEs
  20. 270.io.netty.incubator:netty-incubator-codec-bhttp5 CVEs
  21. 271.io.netty:netty-codec5 CVEs
  22. 272.io.netty:netty-codec-haproxy5 CVEs
  23. 273.io.projectreactor.netty:reactor-netty-http5 CVEs
  24. 274.io.quarkus:quarkus-vertx-http5 CVEs
  25. 275.org.apache.atlas:apache-atlas5 CVEs
  26. 276.org.apache.commons:commons-configuration25 CVEs
  27. 277.org.apache.hadoop:hadoop-client5 CVEs
  28. 278.org.apache.inlong:manager-dao5 CVEs
  29. 279.org.apache.iotdb:iotdb-core5 CVEs
  30. 280.org.apache.kylin:kylin-server-base5 CVEs
  31. 281.org.apache.shiro:shiro-web5 CVEs
  32. 282.org.apache.tika:tika-parsers5 CVEs
  33. 283.org.biouno:uno-choice5 CVEs
  34. 284.org.bouncycastle:bcprov-ext-jdk15on5 CVEs
  35. 285.org.codehaus.jettison:jettison5 CVEs
  36. 286.org.dspace:dspace-jspui5 CVEs
  37. 287.org.eclipse.jetty:jetty-http5 CVEs
  38. 288.org.fitnesse:fitnesse5 CVEs
  39. 289.org.jboss.resteasy:resteasy-bom5 CVEs
  40. 290.org.jeecgframework.boot:jeecg-module-system5 CVEs
  41. 291.org.jenkins-ci.plugins:aws-codecommit-trigger5 CVEs
  42. 292.org.jenkins-ci.plugins:codedx5 CVEs
  43. 293.org.jenkins-ci.plugins:credentials5 CVEs
  44. 294.org.jenkins-ci.plugins:delphix5 CVEs
  45. 295.org.jenkins-ci.plugins:extended-choice-parameter5 CVEs
  46. 296.org.jenkins-ci.plugins:fortify5 CVEs
  47. 297.org.jenkins-ci.plugins:github-branch-source5 CVEs
  48. 298.org.jenkins-ci.plugins:google-compute-engine5 CVEs
  49. 299.org.jenkins-ci.plugins:google-login5 CVEs
  50. 300.org.jenkins-ci.plugins:job-import-plugin5 CVEs

Which Maven packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →