Maven Package Vulnerabilities

All 3,246 Java / JVM artifacts with known CVEs, ranked by live CVE volume — 8,603 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 2,401.org.broadleafcommerce:broadleaf1 CVE
  2. 2,402.org.bytedeco:javacv1 CVE
  3. 2,403.org.checkerframework.annotatedlib:commons-io1 CVE
  4. 2,404.org.codehaus.castor:castor1 CVE
  5. 2,405.org.codehaus.izpack:izpack-installer1 CVE
  6. 2,406.org.codehaus.janino:janino-parent1 CVE
  7. 2,407.org.codehaus.xfire:xfire-core1 CVE
  8. 2,408.org.cometd.java:cometd-java-oort1 CVE
  9. 2,409.org.cometd.java:cometd-java-server-common1 CVE
  10. 2,410.org.conductoross:conductor-core1 CVE
  11. 2,411.org.craftercms:crafter-engine1 CVE
  12. 2,412.org.craftercms:crafter-search1 CVE
  13. 2,413.org.cryptacular:cryptacular1 CVE
  14. 2,414.org.deeplearning4j:dl4j-examples1 CVE
  15. 2,415.org.deeplearning4j:platform-tests1 CVE
  16. 2,416.org.docx4j:docx4j-core1 CVE
  17. 2,417.org.dromara.warm:warm-flow-plugin-modes-sb1 CVE
  18. 2,418.org.dspace:dspace-server-webapp1 CVE
  19. 2,419.org.eclipse.angus:smtp1 CVE
  20. 2,420.org.eclipse.birt:org.eclipse.birt.report.viewer1 CVE
  21. 2,421.org.eclipse.californium:californium-core1 CVE
  22. 2,422.org.eclipse.californium:scandium1 CVE
  23. 2,423.org.eclipse.ditto:ditto1 CVE
  24. 2,424.org.eclipse.edc:connector-core1 CVE
  25. 2,425.org.eclipse.edc:transfer-data-plane1 CVE
  26. 2,426.org.eclipse.hawkbit:hawkbit-autoconfigure1 CVE
  27. 2,427.org.eclipse.hawkbit:hawkbit-boot-starter1 CVE
  28. 2,428.org.eclipse.hawkbit:hawkbit-boot-starter-ddi-api1 CVE
  29. 2,429.org.eclipse.hawkbit:hawkbit-boot-starter-dmf-api1 CVE
  30. 2,430.org.eclipse.hawkbit:hawkbit-boot-starter-mgmt-api1 CVE
  31. 2,431.org.eclipse.hawkbit:hawkbit-boot-starter-mgmt-ui1 CVE
  32. 2,432.org.eclipse.hawkbit:hawkbit-ddi-resource1 CVE
  33. 2,433.org.eclipse.hawkbit:hawkbit-starters1 CVE
  34. 2,434.org.eclipse.hawkbit:hawkbit-ui1 CVE
  35. 2,435.org.eclipse.hawkbit:hawkbit-update-server1 CVE
  36. 2,436.org.eclipse.hono:hono-core1 CVE
  37. 2,437.org.eclipse.jdt:org.eclipse.jdt.ui1 CVE
  38. 2,438.org.eclipse.jetty.ee10:jetty-ee101 CVE
  39. 2,439.org.eclipse.jetty.ee10:jetty-ee10-jaspi1 CVE
  40. 2,440.org.eclipse.jetty.ee11:jetty-ee11-jaspi1 CVE
  41. 2,441.org.eclipse.jetty.ee8:jetty-ee8-jaspi1 CVE
  42. 2,442.org.eclipse.jetty.ee8:jetty-ee8-security1 CVE
  43. 2,443.org.eclipse.jetty.ee9:jetty-ee9-jaspi1 CVE
  44. 2,444.org.eclipse.jetty.ee9:jetty-ee9-security1 CVE
  45. 2,445.org.eclipse.jetty.http2:http2-hpack1 CVE
  46. 2,446.org.eclipse.jetty.http2:jetty-http2-server1 CVE
  47. 2,447.org.eclipse.jetty.http3:http3-common1 CVE
  48. 2,448.org.eclipse.jetty.http3:http3-qpack1 CVE
  49. 2,449.org.eclipse.jetty.http3:jetty-http3-common1 CVE
  50. 2,450.org.eclipse.jetty:jetty-deploy1 CVE

Which Maven packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →