Maven Package Vulnerabilities

All 3,225 Java / JVM artifacts with known CVEs, ranked by live CVE volume — 8,517 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 2,951.org.scala-lang:scala-library1 CVE
  2. 2,952.org.scala-sbt:io_2.121 CVE
  3. 2,953.org.scala-sbt:io_2.131 CVE
  4. 2,954.org.scala-sbt:io_31 CVE
  5. 2,955.org.seleniumhq.selenium:selenium-grid1 CVE
  6. 2,956.org.seleniumhq.selenium:selenium-server1 CVE
  7. 2,957.org.silverpeas.core:silverpeas-core-configuration1 CVE
  8. 2,958.org.silverpeas.core:silverpeas-core-rs1 CVE
  9. 2,959.org.simpleframework:simple-xml1 CVE
  10. 2,960.org.skyscreamer:nevado-jms1 CVE
  11. 2,961.org.slf4j:slf4j-ext1 CVE
  12. 2,962.org.smartboot.servlet:servlet-core1 CVE
  13. 2,963.org.snmp4j:snmp4j-agent1 CVE
  14. 2,964.org.sonarsource.sonarqube:sonar-plugin-api1 CVE
  15. 2,965.org.sonarsource.sonarqube:sonar-web1 CVE
  16. 2,966.org.sonatype.nexus:nexus-extdirect1 CVE
  17. 2,967.org.sonatype.nexus.plugins:nexus-yum-repository-plugin1 CVE
  18. 2,968.org.sonatype.sisu:sisu-guava1 CVE
  19. 2,969.org.soot-oss:soot1 CVE
  20. 2,970.org.springaicommunity:mcp-client-security1 CVE
  21. 2,971.org.springblade:blade-core-tool1 CVE
  22. 2,972.org.springframework.ai:spring-ai-anthropic1 CVE
  23. 2,973.org.springframework.ai:spring-ai-azure-cosmos-db-store1 CVE
  24. 2,974.org.springframework.ai:spring-ai-bedrock-converse1 CVE
  25. 2,975.org.springframework.ai:spring-ai-elasticsearch-store1 CVE
  26. 2,976.org.springframework.ai:spring-ai-gemfire-store1 CVE
  27. 2,977.org.springframework.ai:spring-ai-mariadb-store1 CVE
  28. 2,978.org.springframework.ai:spring-ai-milvus-store1 CVE
  29. 2,979.org.springframework.ai:spring-ai-model1 CVE
  30. 2,980.org.springframework.ai:spring-ai-neo4j-store1 CVE
  31. 2,981.org.springframework.ai:spring-ai-opensearch-store1 CVE
  32. 2,982.org.springframework.ai:spring-ai-pdf-document-reader1 CVE
  33. 2,983.org.springframework.ai:spring-ai-redis-store1 CVE
  34. 2,984.org.springframework.ai:spring-ai-transformers1 CVE
  35. 2,985.org.springframework.ai:spring-ai-typesense-store1 CVE
  36. 2,986.org.springframework.boot:spring-boot-actuator1 CVE
  37. 2,987.org.springframework.boot:spring-boot-actuator-autoconfigure1 CVE
  38. 2,988.org.springframework.boot:spring-boot-devtools1 CVE
  39. 2,989.org.springframework.boot:spring-boot-elasticsearch1 CVE
  40. 2,990.org.springframework.boot:spring-boot-loader1 CVE
  41. 2,991.org.springframework.boot:spring-boot-loader-classic1 CVE
  42. 2,992.org.springframework.boot:spring-boot-rabbitmq1 CVE
  43. 2,993.org.springframework.boot:spring-boot-starter-mail1 CVE
  44. 2,994.org.springframework.boot:spring-boot-starter-web1 CVE
  45. 2,995.org.springframework.boot:spring-boot-starter-webflux1 CVE
  46. 2,996.org.springframework.cloud:spring-cloud-config1 CVE
  47. 2,997.org.springframework.cloud:spring-cloud-contract-shade1 CVE
  48. 2,998.org.springframework.cloud:spring-cloud-function-parent1 CVE
  49. 2,999.org.springframework.cloud:spring-cloud-gateway-server-mvc1 CVE
  50. 3,000.org.springframework.cloud:spring-cloud-gateway-server-webflux1 CVE

Which Maven packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →