Maven Package Vulnerabilities

All 3,225 Java / JVM artifacts with known CVEs, ranked by live CVE volume — 8,517 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 351.com.liferay:com.liferay.dynamic.data.mapping.form.field.type4 CVEs
  2. 352.com.liferay:com.liferay.frontend.taglib.clay4 CVEs
  3. 353.com.liferay:com.liferay.portal.vulcan.impl4 CVEs
  4. 354.com.mchange:c3p04 CVEs
  5. 355.com.surenpi.jenkins:phoenix-autotest4 CVEs
  6. 356.com.typesafe.akka:akka-http-core_2.114 CVEs
  7. 357.com.typesafe.akka:akka-http-core_2.124 CVEs
  8. 358.com.typesafe.play:play4 CVEs
  9. 359.com.typesafe.play:play_2.124 CVEs
  10. 360.io.crate:crate4 CVEs
  11. 361.io.goobi.viewer:viewer-core4 CVEs
  12. 362.io.hawt:project4 CVEs
  13. 363.io.jenkins.plugins:macstadium-orka4 CVEs
  14. 364.io.netty.incubator:netty-incubator-codec-ohttp4 CVEs
  15. 365.io.netty:netty-codec-http34 CVEs
  16. 366.io.ratpack:ratpack-core4 CVEs
  17. 367.io.strimzi:strimzi4 CVEs
  18. 368.io.swagger:swagger-codegen4 CVEs
  19. 369.io.undertow:undertow-parent4 CVEs
  20. 370.net.minidev:json-smart4 CVEs
  21. 371.org.apache.ant:ant4 CVEs
  22. 372.org.apache.any23:apache-any234 CVEs
  23. 373.org.apache.camel:camel-jms4 CVEs
  24. 374.org.apache.camel:camel-mail4 CVEs
  25. 375.org.apache.camel:camel-sjms4 CVEs
  26. 376.org.apache.cxf:cxf-rt-frontend-jaxrs4 CVEs
  27. 377.org.apache.cxf.fediz:fediz-spring24 CVEs
  28. 378.org.apache.inlong:inlong4 CVEs
  29. 379.org.apache.jena:jena4 CVEs
  30. 380.org.apache.kafka:kafka4 CVEs
  31. 381.org.apache.kafka:kafka_2.114 CVEs
  32. 382.org.apache.kafka:kafka_2.124 CVEs
  33. 383.org.apache.kafka:kafka_2.134 CVEs
  34. 384.org.apache.linkis:linkis-datasource4 CVEs
  35. 385.org.apache.opennlp:opennlp-tools4 CVEs
  36. 386.org.apache.pulsar:pulsar4 CVEs
  37. 387.org.apache.pulsar:pulsar-functions-worker4 CVEs
  38. 388.org.apache.qpid:qpid-broker4 CVEs
  39. 389.org.apache.sling:org.apache.sling.servlets.post4 CVEs
  40. 390.org.apache.solr:solr4 CVEs
  41. 391.org.apache.spark:spark-core_2.124 CVEs
  42. 392.org.apache.spark:spark-core_2.134 CVEs
  43. 393.org.apache.storm:storm4 CVEs
  44. 394.org.apache.ws.security:wss4j4 CVEs
  45. 395.org.apache.xmlgraphics:batik-bridge4 CVEs
  46. 396.org.bouncycastle:bcprov-ext-jdk164 CVEs
  47. 397.org.bouncycastle:bcprov-jdk164 CVEs
  48. 398.org.bouncycastle:bcprov-lts8on4 CVEs
  49. 399.org.bouncycastle:bctls-jdk144 CVEs
  50. 400.org.bouncycastle:bctls-jdk15to184 CVEs

Which Maven packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →