Maven Package Vulnerabilities

All 3,246 Java / JVM artifacts with known CVEs, ranked by live CVE volume — 8,603 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 1,901.io.undertow:undertow-servlet1 CVE
  2. 1,902.io.unitycatalog:unitycatalog-server1 CVE
  3. 1,903.io.vertx:vertx-grpc-client1 CVE
  4. 1,904.io.vertx:vertx-grpc-server1 CVE
  5. 1,905.io.vertx:vertx-stomp1 CVE
  6. 1,906.io.whitesource:curekit1 CVE
  7. 1,907.io.zipkin:zipkin-server1 CVE
  8. 1,908.it.geosolutions.jaiext.jiffle:jt-jiffle1 CVE
  9. 1,909.it.geosolutions.jaiext.jiffle:jt-jiffle-language1 CVE
  10. 1,910.it.infuse.jenkins:usemango-runner1 CVE
  11. 1,911.jenkins.ci.plugins.computerqueue:computer-queue-plugin1 CVE
  12. 1,912.jenkins.xtc:extensivetesting1 CVE
  13. 1,913.jp.ikedam.jenkins.plugins:extensible-choice-parameter1 CVE
  14. 1,914.junit:junit1 CVE
  15. 1,915.lambdaisland:uri1 CVE
  16. 1,916.lsfusion.platform:server1 CVE
  17. 1,917.me.leejay.jenkins:date-parameter1 CVE
  18. 1,918.ml.combust.mleap:mleap-runtime_2.121 CVE
  19. 1,919.ml.shifu:shifu1 CVE
  20. 1,920.net.arangamani.jenkins:gem-publisher1 CVE
  21. 1,921.net.devtech:arrp1 CVE
  22. 1,922.net.hasor:cobble-lang1 CVE
  23. 1,923.net.hurstfrost.jenkins:avatar1 CVE
  24. 1,924.net.i2p.crypto:eddsa1 CVE
  25. 1,925.net.i2p:i2p1 CVE
  26. 1,926.net.liftweb:lift-webkit1 CVE
  27. 1,927.net.liftweb:lift-webkit_2.7.71 CVE
  28. 1,928.net.liftweb:lift-webkit_2.8.01 CVE
  29. 1,929.net.liftweb:lift-webkit_2.8.11 CVE
  30. 1,930.net.liftweb:lift-webkit_2.8.21 CVE
  31. 1,931.net.liftweb:lift-webkit_2.9.01 CVE
  32. 1,932.net.liftweb:lift-webkit_2.9.0-11 CVE
  33. 1,933.net.liftweb:lift-webkit_2.9.11 CVE
  34. 1,934.net.minidev:json-smart-mini1 CVE
  35. 1,935.net.pwall.json:jsonutil1 CVE
  36. 1,936.net.ripe.rpki:rpki-validator-31 CVE
  37. 1,937.net.risesoft:risenet-y9boot-support-platform-service1 CVE
  38. 1,938.net.sf.json-lib:json-lib1 CVE
  39. 1,939.net.sf.robocode:robocode.battle1 CVE
  40. 1,940.net.sf.robocode:robocode.host1 CVE
  41. 1,941.net.sf.sojo:sojo1 CVE
  42. 1,942.net.snowflake:snowflake-jdbc-fips1 CVE
  43. 1,943.net.snowflake:snowflake-jdbc-thin1 CVE
  44. 1,944.net.sourceforge.htmlcleaner:htmlcleaner1 CVE
  45. 1,945.net.sourceforge.pmd:pmd-designer1 CVE
  46. 1,946.net.sourceforge.pmd:pmd-ui1 CVE
  47. 1,947.nl.basjes.parse.useragent:yauaa1 CVE
  48. 1,948.nl.basjes.parse.useragent:yauaa-beam1 CVE
  49. 1,949.nl.basjes.parse.useragent:yauaa-beam-sql1 CVE
  50. 1,950.nl.basjes.parse.useragent:yauaa-drill1 CVE

Which Maven packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →