Maven Package Vulnerabilities

All 3,246 Java / JVM artifacts with known CVEs, ranked by live CVE volume — 8,603 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 2,901.org.ngrinder:ngrinder-core1 CVE
  2. 2,902.org.ninjaframework:ninja-core1 CVE
  3. 2,903.org.noear:solon-faas-luffy1 CVE
  4. 2,904.org.noear:solon-view1 CVE
  5. 2,905.org.noear:solon-web-staticfiles1 CVE
  6. 2,906.org.nokogiri:nekohtml1 CVE
  7. 2,907.org.nuxeo.ecm.platform:nuxeo-platform-oauth1 CVE
  8. 2,908.org.ohdsi:WebAPI1 CVE
  9. 2,909.org.onosproject:onos-base1 CVE
  10. 2,910.org.openapitools:openapi-generator-maven-plugin1 CVE
  11. 2,911.org.openapitools:openapi-generator-project1 CVE
  12. 2,912.org.opencastproject:opencast-common-jpa-impl1 CVE
  13. 2,913.org.opencastproject:opencast-elasticsearch-impl1 CVE
  14. 2,914.org.opencastproject:opencast-engage-paella-player-71 CVE
  15. 2,915.org.opencastproject:opencast-oaipmh-api1 CVE
  16. 2,916.org.opencastproject:opencast-publication-service-oaipmh-remote1 CVE
  17. 2,917.org.opencastproject:opencast-user-interface-configuration1 CVE
  18. 2,918.org.opencrx:opencrx-core-config1 CVE
  19. 2,919.org.opencrx:opencrx-gradle1 CVE
  20. 2,920.org.opendaylight.aaa:aaa-artifacts1 CVE
  21. 2,921.org.opendaylight.integration:distribution-karaf1 CVE
  22. 2,922.org.opendaylight.mdsal:mdsal-artifacts1 CVE
  23. 2,923.org.opendaylight.odlparent:opendaylight-karaf-resources1 CVE
  24. 2,924.org.opendaylight.sfc:sfc-parent1 CVE
  25. 2,925.org.openid4java:openid4java1 CVE
  26. 2,926.org.openidentityplatform.openam:openam1 CVE
  27. 2,927.org.openidentityplatform.openam:openam-auth-msisdn1 CVE
  28. 2,928.org.openidentityplatform.openam:openam-auth-oauth21 CVE
  29. 2,929.org.openidentityplatform.openam:openam-core-rest1 CVE
  30. 2,930.org.openidentityplatform.openam:openam-federation1 CVE
  31. 2,931.org.openidentityplatform.openam:openam-push-notification1 CVE
  32. 2,932.org.openidentityplatform.openam:openam-radius1 CVE
  33. 2,933.org.openidentityplatform.openam:openam-scripting1 CVE
  34. 2,934.org.openjfx:javafx-media1 CVE
  35. 2,935.org.open-metadata:openmetadata-sdk1 CVE
  36. 2,936.org.open-metadata:platform1 CVE
  37. 2,937.org.openmrs.api:openmrs-api1 CVE
  38. 2,938.org.opennms.core:org.opennms.core.daemon1 CVE
  39. 2,939.org.opennms.core:org.opennms.core.xml1 CVE
  40. 2,940.org.opennms.features:org.opennms.features.measurements1 CVE
  41. 2,941.org.opennms:opennms-base-assembly1 CVE
  42. 2,942.org.opennms:opennms-config1 CVE
  43. 2,943.org.opennms:opennms-provision1 CVE
  44. 2,944.org.opennms:opennms-util1 CVE
  45. 2,945.org.opennms:opennms-web-api1 CVE
  46. 2,946.org.openrefine.dependencies:butterfly1 CVE
  47. 2,947.org.openrefine:extensions1 CVE
  48. 2,948.org.opensearch.dataprepper.plugins:opensearch1 CVE
  49. 2,949.org.opensearch:opensearch-common1 CVE
  50. 2,950.org.opensearch.plugin:opensearch-observability1 CVE

Which Maven packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →