Maven Package Vulnerabilities

All 3,246 Java / JVM artifacts with known CVEs, ranked by live CVE volume — 8,603 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 2,951.org.opensearch.plugin:opensearch-reports-scheduler1 CVE
  2. 2,952.org.owasp:csrfguard1 CVE
  3. 2,953.org.owasp:dependency-check-ant1 CVE
  4. 2,954.org.owasp:dependency-check-cli1 CVE
  5. 2,955.org.pac4j:pac4j-jwt1 CVE
  6. 2,956.org.pac4j:pac4j-oidc1 CVE
  7. 2,957.org.pac4j:pac4j-saml1 CVE
  8. 2,958.org.picketlink:picketlink-common1 CVE
  9. 2,959.org.picketlink:picketlink-tomcat-common1 CVE
  10. 2,960.org.postgresql:pgjdbc-aggregate1 CVE
  11. 2,961.org.powertac:server-interface1 CVE
  12. 2,962.org.python:jython1 CVE
  13. 2,963.org.quartz-scheduler:quartz1 CVE
  14. 2,964.org.redisson:redisson1 CVE
  15. 2,965.org.restlet.jse:org.restlet.ext.jaxrs1 CVE
  16. 2,966.org.rundeck:rundeckapp1 CVE
  17. 2,967.org.sakaiproject:chat-base1 CVE
  18. 2,968.org.sakaiproject.conversations:sakai-conversations-impl1 CVE
  19. 2,969.org.sakaiproject.profile2:profile2-api1 CVE
  20. 2,970.org.sakaiproject.profile2:profile2-impl1 CVE
  21. 2,971.org.sakaiproject.rubrics:rubrics-impl1 CVE
  22. 2,972.org.scala-lang:scala-compiler1 CVE
  23. 2,973.org.scala-lang:scala-library1 CVE
  24. 2,974.org.scala-sbt:io_2.121 CVE
  25. 2,975.org.scala-sbt:io_2.131 CVE
  26. 2,976.org.scala-sbt:io_31 CVE
  27. 2,977.org.seleniumhq.selenium:selenium-grid1 CVE
  28. 2,978.org.seleniumhq.selenium:selenium-server1 CVE
  29. 2,979.org.silverpeas.core:silverpeas-core-configuration1 CVE
  30. 2,980.org.silverpeas.core:silverpeas-core-rs1 CVE
  31. 2,981.org.simpleframework:simple-xml1 CVE
  32. 2,982.org.skyscreamer:nevado-jms1 CVE
  33. 2,983.org.slf4j:slf4j-ext1 CVE
  34. 2,984.org.smartboot.servlet:servlet-core1 CVE
  35. 2,985.org.snmp4j:snmp4j-agent1 CVE
  36. 2,986.org.sonarsource.sonarqube:sonar-plugin-api1 CVE
  37. 2,987.org.sonarsource.sonarqube:sonar-web1 CVE
  38. 2,988.org.sonatype.nexus:nexus-extdirect1 CVE
  39. 2,989.org.sonatype.nexus.plugins:nexus-yum-repository-plugin1 CVE
  40. 2,990.org.sonatype.sisu:sisu-guava1 CVE
  41. 2,991.org.soot-oss:soot1 CVE
  42. 2,992.org.springaicommunity:mcp-client-security1 CVE
  43. 2,993.org.springblade:blade-core-tool1 CVE
  44. 2,994.org.springframework.ai:spring-ai-anthropic1 CVE
  45. 2,995.org.springframework.ai:spring-ai-azure-cosmos-db-store1 CVE
  46. 2,996.org.springframework.ai:spring-ai-bedrock-converse1 CVE
  47. 2,997.org.springframework.ai:spring-ai-elasticsearch-store1 CVE
  48. 2,998.org.springframework.ai:spring-ai-gemfire-store1 CVE
  49. 2,999.org.springframework.ai:spring-ai-mariadb-store1 CVE
  50. 3,000.org.springframework.ai:spring-ai-milvus-store1 CVE

Which Maven packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →