Maven Package Vulnerabilities

All 3,246 Java / JVM artifacts with known CVEs, ranked by live CVE volume — 8,603 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 701.org.typelevel:jawn-parser_2.133 CVEs
  2. 702.org.typelevel:jawn-parser_33 CVEs
  3. 703.org.verapdf:validation-model3 CVEs
  4. 704.org.verapdf:validation-model-jakarta3 CVEs
  5. 705.org.webjars.npm:xlsx3 CVEs
  6. 706.org.wildfly.core:wildfly-server3 CVEs
  7. 707.org.wso2.am:am-parent3 CVEs
  8. 708.org.wso2.carbon.registry:carbon-registry3 CVEs
  9. 709.org.xwiki.platform:xwiki-platform-icon-ui3 CVEs
  10. 710.org.xwiki.platform:xwiki-platform-invitation-ui3 CVEs
  11. 711.org.xwiki.platform:xwiki-platform-panels-ui3 CVEs
  12. 712.org.xwiki.platform:xwiki-platform-search-solr-api3 CVEs
  13. 713.org.xwiki.platform:xwiki-platform-security-requiredrights-default3 CVEs
  14. 714.org.xwiki.rendering:xwiki-rendering-xml3 CVEs
  15. 715.org.zeroturnaround:zt-zip3 CVEs
  16. 716.ro.pippo:pippo-core3 CVEs
  17. 717.tech.powerjob:powerjob-server-starter3 CVEs
  18. 718.aendter.jenkins.plugins:filesystem-list-parameter-plugin2 CVEs
  19. 719.ai.djl:api2 CVEs
  20. 720.ch.qos.logback:logback-classic2 CVEs
  21. 721.cn.dev33:sa-token-core2 CVEs
  22. 722.cn.hippo4j:hippo4j-all2 CVEs
  23. 723.cn.hippo4j:hippo4j-core2 CVEs
  24. 724.co.fs2:fs2-io_2.122 CVEs
  25. 725.co.fs2:fs2-io_2.132 CVEs
  26. 726.co.fs2:fs2-io_32 CVEs
  27. 727.com.aizuda:snail-job2 CVEs
  28. 728.com.alauda.jenkins.plugins:alauda-devops-pipeline2 CVEs
  29. 729.com.alipay.sofa:hessian2 CVEs
  30. 730.com.amazonaws:aws-encryption-sdk-java2 CVEs
  31. 731.com.amazonaws:codedeploy2 CVEs
  32. 732.com.amazon.jenkins.fleet:ec2-fleet2 CVEs
  33. 733.com.apica:ApicaLoadtest2 CVEs
  34. 734.com.barchart.jenkins:maven-release-cascade2 CVEs
  35. 735.com.blazemeter.plugins:BlazeMeterJenkinsPlugin2 CVEs
  36. 736.com.bstek.ureport:ureport2-console2 CVEs
  37. 737.com.charleskorn.kaml:kaml2 CVEs
  38. 738.com.compuware.jenkins:compuware-ispw-operations2 CVEs
  39. 739.com.compuware.jenkins:compuware-scm-downloader2 CVEs
  40. 740.com.compuware.jenkins:compuware-topaz-utilities2 CVEs
  41. 741.com.compuware.jenkins:compuware-xpediter-code-coverage2 CVEs
  42. 742.com.cronutils:cron-utils2 CVEs
  43. 743.com.datadoghq:dd-java-agent2 CVEs
  44. 744.com.drewnoakes:metadata-extractor2 CVEs
  45. 745.com.erudika:para-core2 CVEs
  46. 746.com.erudika:para-server2 CVEs
  47. 747.com.esotericsoftware.yamlbeans:yamlbeans2 CVEs
  48. 748.com.fasterxml.jackson.dataformat:jackson-dataformat-xml2 CVEs
  49. 749.com.gitblit:gitblit2 CVEs
  50. 750.com.github.liuyueyi.media:batik-codec-fix2 CVEs

Which Maven packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →