Maven Package Vulnerabilities

All 3,094 Java / JVM artifacts with known CVEs, ranked by live CVE volume — 8,000 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 3,051.org.xwiki.platform:xwiki-platform-tool-configuration-resources1 CVE
  2. 3,052.org.xwiki.platform:xwiki-platform-tool-jetty-resources1 CVE
  3. 3,053.org.xwiki.platform:xwiki-platform-uiextension-api1 CVE
  4. 3,054.org.xwiki.platform:xwiki-platform-user-profile-ui1 CVE
  5. 3,055.org.xwiki.platform:xwiki-platform-vfs-ui1 CVE
  6. 3,056.org.xwiki.platform:xwiki-platform-webjars1 CVE
  7. 3,057.org.xwiki.platform:xwiki-platform-web-war1 CVE
  8. 3,058.org.xwiki.platform:xwiki-platform-wiki-rest-default1 CVE
  9. 3,059.org.xwiki.platform:xwiki-platform-wysiwyg-api1 CVE
  10. 3,060.org.xwiki.platform:xwiki-platform-xar-model1 CVE
  11. 3,061.org.xwiki.platform:xwiki-platform-xclass-ui1 CVE
  12. 3,062.org.xwiki.rendering:xwiki-rendering-macro-footnotes1 CVE
  13. 3,063.org.xwiki.rendering:xwiki-rendering-syntax-annotatedhtml51 CVE
  14. 3,064.org.xwiki.rendering:xwiki-rendering-syntax-annotatedxhtml1 CVE
  15. 3,065.org.xwiki.rendering:xwiki-rendering-syntax-html1 CVE
  16. 3,066.org.xwiki.rendering:xwiki-rendering-syntax-html51 CVE
  17. 3,067.org.xwiki.rendering:xwiki-rendering-transformation-macro1 CVE
  18. 3,068.org.zaproxy:zap1 CVE
  19. 3,069.org.zeroturnaround:zt-zip1 CVE
  20. 3,070.org.zkoss.zk:zk1 CVE
  21. 3,071.org.zwobble.mammoth:mammoth1 CVE
  22. 3,072.pl.droidsonroids.yaml:snakeyaml1 CVE
  23. 3,073.postgresql:pljava-public1 CVE
  24. 3,074.pro.gravit.launcher:launchserver-api1 CVE
  25. 3,075.ren.helloworld:upload-pgyer1 CVE
  26. 3,076.ro.pippo:pippo-fastjson1 CVE
  27. 3,077.ro.pippo:pippo-jaxb1 CVE
  28. 3,078.ro.pippo:pippo-session1 CVE
  29. 3,079.RPD:bmc-rpd1 CVE
  30. 3,080.rubygems:jruby-openssl1 CVE
  31. 3,081.se.diabol.jenkins.pipeline:delivery-pipeline-plugin1 CVE
  32. 3,082.sh.hyper.plugins:hyper-commons1 CVE
  33. 3,083.software.amazon.encryption.s3:amazon-s3-encryption-client-java1 CVE
  34. 3,084.software.amazon.ion:ion-java1 CVE
  35. 3,085.software.amazon.jdbc:aws-advanced-jdbc-wrapper1 CVE
  36. 3,086.tech.andrey.jenkins:mission-control-view1 CVE
  37. 3,087.tech.pegasys.discovery:discovery1 CVE
  38. 3,088.tools.jackson.core:jackson-core1 CVE
  39. 3,089.top.tangyh.basic:lamp-core1 CVE
  40. 3,090.top.tangyh.basic:lamp-util1 CVE
  41. 3,091.uk.co.nichesolutions.logging.log4j:log4j-core1 CVE
  42. 3,092.us.codecraft:webmagic-core1 CVE
  43. 3,093.wonder:wonder1 CVE
  44. 3,094.xyz.erupt:erupt1 CVE

Which Maven packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Start Free Scan →