Maven Package Vulnerabilities

All 3,225 Java / JVM artifacts with known CVEs, ranked by live CVE volume — 8,517 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 3,201.org.zeroturnaround:zt-zip1 CVE
  2. 3,202.org.zkoss.zk:zk1 CVE
  3. 3,203.org.zwobble.mammoth:mammoth1 CVE
  4. 3,204.pl.droidsonroids.yaml:snakeyaml1 CVE
  5. 3,205.postgresql:pljava-public1 CVE
  6. 3,206.pro.gravit.launcher:launchserver-api1 CVE
  7. 3,207.ren.helloworld:upload-pgyer1 CVE
  8. 3,208.ro.pippo:pippo-fastjson1 CVE
  9. 3,209.ro.pippo:pippo-jaxb1 CVE
  10. 3,210.ro.pippo:pippo-session1 CVE
  11. 3,211.RPD:bmc-rpd1 CVE
  12. 3,212.rubygems:jruby-openssl1 CVE
  13. 3,213.se.diabol.jenkins.pipeline:delivery-pipeline-plugin1 CVE
  14. 3,214.sh.hyper.plugins:hyper-commons1 CVE
  15. 3,215.software.amazon.encryption.s3:amazon-s3-encryption-client-java1 CVE
  16. 3,216.software.amazon.ion:ion-java1 CVE
  17. 3,217.software.amazon.jdbc:aws-advanced-jdbc-wrapper1 CVE
  18. 3,218.tech.andrey.jenkins:mission-control-view1 CVE
  19. 3,219.tech.pegasys.discovery:discovery1 CVE
  20. 3,220.top.tangyh.basic:lamp-core1 CVE
  21. 3,221.top.tangyh.basic:lamp-util1 CVE
  22. 3,222.uk.co.nichesolutions.logging.log4j:log4j-core1 CVE
  23. 3,223.us.codecraft:webmagic-core1 CVE
  24. 3,224.wonder:wonder1 CVE
  25. 3,225.xyz.erupt:erupt1 CVE

Which Maven packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →