Maven Package Vulnerabilities

All 3,246 Java / JVM artifacts with known CVEs, ranked by live CVE volume — 8,603 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 2,351.org.apache.xmlgraphics:batik-script1 CVE
  2. 2,352.org.apache.xmlgraphics:batik-svgbrowser1 CVE
  3. 2,353.org.apache.xmlgraphics:batik-svgrasterizer1 CVE
  4. 2,354.org.apache.xmlgraphics:batik-transcoder1 CVE
  5. 2,355.org.apache.xmlgraphics:fop1 CVE
  6. 2,356.org.apache.xmlgraphics:fop-core1 CVE
  7. 2,357.org.apache.xmlgraphics:xmlgraphics-commons1 CVE
  8. 2,358.org.apache.xmlrpc:xmlrpc-common1 CVE
  9. 2,359.org.apache.zeppelin:sap1 CVE
  10. 2,360.org.apache.zeppelin:zeppelin-shell1 CVE
  11. 2,361.org.apereo.cas:cas-server-core-configuration-metadata-repository1 CVE
  12. 2,362.org.apereo.cas:cas-server-core-services-api1 CVE
  13. 2,363.org.apereo.cas:cas-server-core-services-authentication1 CVE
  14. 2,364.org.apereo.cas:cas-server-core-web1 CVE
  15. 2,365.org.apereo.cas:cas-server-support-oauth-core-api1 CVE
  16. 2,366.org.apereo.cas:cas-server-support-oidc1 CVE
  17. 2,367.org.apereo.cas:cas-server-support-otp-mfa-core1 CVE
  18. 2,368.org.apereo.cas:cas-server-support-shell1 CVE
  19. 2,369.org.apereo.cas:cas-server-support-simple-mfa1 CVE
  20. 2,370.org.apereo.cas:cas-server-support-x509-core1 CVE
  21. 2,371.org.apereo.cas:cas-server-webapp1 CVE
  22. 2,372.org.apktool:apktool-lib1 CVE
  23. 2,373.org.assertj:assertj-core1 CVE
  24. 2,374.org.b3log:symphony1 CVE
  25. 2,375.org.bedework:bw-webdav1 CVE
  26. 2,376.org.bedework.caleng:bw-calendar-engine1 CVE
  27. 2,377.org.biscuitsec:biscuit1 CVE
  28. 2,378.org.bitcoinj:bitcoinj-core1 CVE
  29. 2,379.org.bonitasoft.connectors:bonita-connector-webservice1 CVE
  30. 2,380.org.bonitasoft.console:bonita-web-server1 CVE
  31. 2,381.org.bonitasoft.engine:bonita-server1 CVE
  32. 2,382.org.bonitasoft.platform:platform-resources1 CVE
  33. 2,383.org.boofcv:boofcv-core1 CVE
  34. 2,384.org.bouncycastle:bcpg-jdk121 CVE
  35. 2,385.org.bouncycastle:bcpg-jdk141 CVE
  36. 2,386.org.bouncycastle:bcpg-jdk151 CVE
  37. 2,387.org.bouncycastle:bcpg-jdk15on1 CVE
  38. 2,388.org.bouncycastle:bcpg-jdk15to181 CVE
  39. 2,389.org.bouncycastle:bcpg-jdk161 CVE
  40. 2,390.org.bouncycastle:bcpg-jdk18on1 CVE
  41. 2,391.org.bouncycastle:bcpkix-debug-jdk141 CVE
  42. 2,392.org.bouncycastle:bcpkix-debug-jdk15to181 CVE
  43. 2,393.org.bouncycastle:bcpkix-debug-jdk18on1 CVE
  44. 2,394.org.bouncycastle:bcpkix-fips1 CVE
  45. 2,395.org.bouncycastle:bcpkix-jdk141 CVE
  46. 2,396.org.bouncycastle:bcprov-debug-lts8on1 CVE
  47. 2,397.org.bouncycastle:bcprov-ext-debug-jdk141 CVE
  48. 2,398.org.bouncycastle:bcprov-ext-debug-jdk15to181 CVE
  49. 2,399.org.bouncycastle:bcprov-ext-debug-jdk18on1 CVE
  50. 2,400.org.bouncycastle:bcprov-jdk121 CVE

Which Maven packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →