Maven Package Vulnerabilities

All 3,088 Java / JVM artifacts with known CVEs, ranked by live CVE volume — 7,981 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 151.org.apache.atlas:atlas-common7 CVEs
  2. 152.org.apache.axis:axis7 CVEs
  3. 153.org.apache.cxf:apache-cxf7 CVEs
  4. 154.org.apache.derby:derby7 CVEs
  5. 155.org.apache.ignite:ignite-core7 CVEs
  6. 156.org.apache.inlong:manager-web7 CVEs
  7. 157.org.apache.kafka:kafka-clients7 CVEs
  8. 158.org.apache.karaf:apache-karaf7 CVEs
  9. 159.org.apache.poi:poi7 CVEs
  10. 160.org.apache.syncope:syncope-core7 CVEs
  11. 161.org.infinispan:infinispan-core7 CVEs
  12. 162.org.jboss.resteasy:resteasy-client7 CVEs
  13. 163.org.jeecgframework.boot:jeecg-boot-base7 CVEs
  14. 164.org.jenkins-ci.plugins:artifactory7 CVEs
  15. 165.org.jenkins-ci.plugins:htmlpublisher7 CVEs
  16. 166.org.jenkins-ci.plugins:jobConfigHistory7 CVEs
  17. 167.org.jenkins-ci.plugins:mercurial7 CVEs
  18. 168.org.jenkins-ci.plugins:openshift-deployer7 CVEs
  19. 169.org.jenkins-ci.plugins:rundeck7 CVEs
  20. 170.org.jruby:jruby-stdlib7 CVEs
  21. 171.org.opencastproject:opencast-kernel7 CVEs
  22. 172.org.opensearch.plugin:opensearch-security7 CVEs
  23. 173.org.owasp.antisamy:antisamy7 CVEs
  24. 174.org.springframework.cloud:spring-cloud-config-server7 CVEs
  25. 175.org.webjars:bootstrap7 CVEs
  26. 176.org.webjars.npm:jquery-ui7 CVEs
  27. 177.tech.powerjob:powerjob7 CVEs
  28. 178.axis:axis6 CVEs
  29. 179.ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may6 CVEs
  30. 180.ca.uhn.hapi.fhir:org.hl7.fhir.dstu36 CVEs
  31. 181.ca.uhn.hapi.fhir:org.hl7.fhir.r46 CVEs
  32. 182.cn.hutool:hutool-json6 CVEs
  33. 183.com.datapipe.jenkins.plugins:hashicorp-vault-plugin6 CVEs
  34. 184.com.google.protobuf:protobuf-java6 CVEs
  35. 185.com.jflyfox:jflyfox_jfinal6 CVEs
  36. 186.com.liferay.portal:com.liferay.portal.kernel6 CVEs
  37. 187.com.nimbusds:nimbus-jose-jwt6 CVEs
  38. 188.com.sonyericsson.hudson.plugins.gerrit:gerrit-trigger6 CVEs
  39. 189.com.vaadin:vaadin-server6 CVEs
  40. 190.com.xebialabs.deployit.ci:deployit-plugin6 CVEs
  41. 191.com.xuxueli:xxl-job-core6 CVEs
  42. 192.gov.nsa.emissary:emissary6 CVEs
  43. 193.hudson.plugins:project-inheritance6 CVEs
  44. 194.log4j:log4j6 CVEs
  45. 195.net.snowflake:snowflake-jdbc6 CVEs
  46. 196.org.apache.httpcomponents:httpclient6 CVEs
  47. 197.org.apache.kylin:kylin-core-common6 CVEs
  48. 198.org.apache.mesos:mesos6 CVEs
  49. 199.org.apache.pulsar:pulsar-broker6 CVEs
  50. 200.org.apache.shenyu:shenyu-common6 CVEs

Which Maven packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Start Free Scan →