Maven Package Vulnerabilities

All 3,225 Java / JVM artifacts with known CVEs, ranked by live CVE volume — 8,517 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 401.org.bouncycastle:bctls-jdk18on4 CVEs
  2. 402.org.codehaus.plexus:plexus-utils4 CVEs
  3. 403.org.craftercms:craftercms4 CVEs
  4. 404.org.directwebremoting:dwr4 CVEs
  5. 405.org.drools:drools-core4 CVEs
  6. 406.org.eclipse.jetty.http2:jetty-http2-common4 CVEs
  7. 407.org.eclipse.jetty:jetty-servlets4 CVEs
  8. 408.org.geoserver:gs-wfs4 CVEs
  9. 409.org.hibernate.validator:hibernate-validator4 CVEs
  10. 410.org.http4s:http4s-server_2.124 CVEs
  11. 411.org.jboss.resteasy:resteasy-core4 CVEs
  12. 412.org.jenkins-ci.plugins:ansible4 CVEs
  13. 413.org.jenkins-ci.plugins:assembla4 CVEs
  14. 414.org.jenkins-ci.plugins:bitbucket-oauth4 CVEs
  15. 415.org.jenkins-ci.plugins:build-publisher4 CVEs
  16. 416.org.jenkins-ci.plugins:ci-with-toad-edge4 CVEs
  17. 417.org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source4 CVEs
  18. 418.org.jenkins-ci.plugins:cloudbees-jenkins-advisor4 CVEs
  19. 419.org.jenkins-ci.plugins:cons3rt4 CVEs
  20. 420.org.jenkins-ci.plugins:contrast-continuous-application-security4 CVEs
  21. 421.org.jenkins-ci.plugins:coverity4 CVEs
  22. 422.org.jenkins-ci.plugins:crx-content-package-deployer4 CVEs
  23. 423.org.jenkins-ci.plugins:deployer-framework4 CVEs
  24. 424.org.jenkins-ci.plugins:gogs-webhook4 CVEs
  25. 425.org.jenkins-ci.plugins:hp-application-automation-tools-plugin4 CVEs
  26. 426.org.jenkins-ci.plugins:icescrum4 CVEs
  27. 427.org.jenkins-ci.plugins:jira4 CVEs
  28. 428.org.jenkins-ci.plugins:jira-steps4 CVEs
  29. 429.org.jenkins-ci.plugins:katalon4 CVEs
  30. 430.org.jenkins-ci.plugins:kubernetes-cd4 CVEs
  31. 431.org.jenkins-ci.plugins:labmanager4 CVEs
  32. 432.org.jenkins-ci.plugins:libvirt-slave4 CVEs
  33. 433.org.jenkins-ci.plugins:liquibase-runner4 CVEs
  34. 434.org.jenkins-ci.plugins:p44 CVEs
  35. 435.org.jenkins-ci.plugins:pipeline-build-step4 CVEs
  36. 436.org.jenkins-ci.plugins:promoted-builds4 CVEs
  37. 437.org.jenkins-ci.plugins:proxmox4 CVEs
  38. 438.org.jenkins-ci.plugins:rapiddeploy-jenkins4 CVEs
  39. 439.org.jenkins-ci.plugins:reportportal4 CVEs
  40. 440.org.jenkins-ci.plugins:requests4 CVEs
  41. 441.org.jenkins-ci.plugins:role-strategy4 CVEs
  42. 442.org.jenkins-ci.plugins:s34 CVEs
  43. 443.org.jenkins-ci.plugins:soapui-pro-functional-testing4 CVEs
  44. 444.org.jenkins-ci.plugins:ssh4 CVEs
  45. 445.org.jenkins-ci.plugins:teamconcert4 CVEs
  46. 446.org.jenkins-ci.plugins:tfs4 CVEs
  47. 447.org.jolokia:jolokia-core4 CVEs
  48. 448.org.jvnet.hudson.plugins:analysis-core4 CVEs
  49. 449.org.jvnet.hudson.plugins:storable-configs-plugin4 CVEs
  50. 450.org.mapfish.print:print-lib4 CVEs

Which Maven packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →