Vulnerable packages
Packages
Reverse lookup: every package coordinate seen in a CVE's affected list. Click a row to see every CVE that mentions it — with affected version range, fixed-in version, severity, and KEV status.
Sort by:
| # | Ecosystem | Package | CVEs | Latest CVE | purl |
|---|---|---|---|---|---|
| 1 | maven | org.jenkins-ci.main/jenkins-core | 249 | Mar 18, 2026 | pkg:maven/org.jenkins-ci.main/jenkins-core |
| 2 | maven | com.liferay.portal/release.portal.bom | 159 | Oct 31, 2025 | pkg:maven/com.liferay.portal/release.portal.bom |
| 3 | maven | org.apache.tomcat/tomcat | 148 | Apr 9, 2026 | pkg:maven/org.apache.tomcat/tomcat |
| 4 | maven | com.liferay.portal/release.dxp.bom | 125 | Sep 10, 2025 | pkg:maven/com.liferay.portal/release.dxp.bom |
| 5 | maven | org.keycloak/keycloak-services | 73 | Apr 30, 2026 | pkg:maven/org.keycloak/keycloak-services |
| 6 | maven | com.fasterxml.jackson.core/jackson-databind | 68 | Mar 18, 2023 | pkg:maven/com.fasterxml.jackson.core/jackson-databind |
| 7 | maven | org.apache.struts/struts2-core | 60 | Jan 11, 2026 | pkg:maven/org.apache.struts/struts2-core |
| 8 | maven | org.apache.tomcat.embed/tomcat-embed-core | 60 | Apr 9, 2026 | pkg:maven/org.apache.tomcat.embed/tomcat-embed-core |
| 9 | maven | org.keycloak/keycloak-core | 49 | Feb 18, 2025 | pkg:maven/org.keycloak/keycloak-core |
| 10 | maven | org.xwiki.platform/xwiki-platform-oldcore | 45 | Apr 15, 2026 | pkg:maven/org.xwiki.platform/xwiki-platform-oldcore |
| 11 | maven | org.elasticsearch/elasticsearch | 44 | Dec 15, 2025 | pkg:maven/org.elasticsearch/elasticsearch |
| 12 | maven | io.undertow/undertow-core | 39 | Mar 24, 2026 | pkg:maven/io.undertow/undertow-core |
| 13 | maven | net.mingsoft/ms-mcms | 39 | Feb 18, 2026 | pkg:maven/net.mingsoft/ms-mcms |
| 14 | maven | com.thoughtworks.xstream/xstream | 37 | Nov 8, 2024 | pkg:maven/com.thoughtworks.xstream/xstream |
| 15 | maven | com.jfinal/jfinal | 36 | Jan 23, 2024 | pkg:maven/com.jfinal/jfinal |
| 16 | maven | org.jenkins-ci.plugins/script-security | 35 | Apr 29, 2026 | pkg:maven/org.jenkins-ci.plugins/script-security |
| 17 | maven | org.opencms/opencms-core | 31 | May 8, 2026 | pkg:maven/org.opencms/opencms-core |
| 18 | maven | org.springframework.security/spring-security-core | 31 | Apr 22, 2026 | pkg:maven/org.springframework.security/spring-security-core |
| 19 | maven | org.apache.solr/solr-core | 30 | Jan 21, 2026 | pkg:maven/org.apache.solr/solr-core |
| 20 | maven | org.apache.tomcat/tomcat-catalina | 30 | Apr 9, 2026 | pkg:maven/org.apache.tomcat/tomcat-catalina |
| 21 | maven | org.eclipse.jetty/jetty-server | 26 | Mar 5, 2026 | pkg:maven/org.eclipse.jetty/jetty-server |
| 22 | maven | org.apache.openmeetings/openmeetings-parent | 25 | Apr 9, 2026 | pkg:maven/org.apache.openmeetings/openmeetings-parent |
| 23 | maven | org.bouncycastle/bcprov-jdk14 | 25 | Apr 15, 2026 | pkg:maven/org.bouncycastle/bcprov-jdk14 |
| 24 | maven | org.keycloak/keycloak-parent | 25 | Feb 2, 2026 | pkg:maven/org.keycloak/keycloak-parent |
| 25 | maven | org.bouncycastle/bcprov-jdk15on | 24 | May 14, 2024 | pkg:maven/org.bouncycastle/bcprov-jdk15on |
| 26 | maven | org.xwiki.platform/xwiki-platform-web-templates | 23 | Apr 15, 2026 | pkg:maven/org.xwiki.platform/xwiki-platform-web-templates |
| 27 | maven | org.apache.tomcat/tomcat-coyote | 22 | Apr 9, 2026 | pkg:maven/org.apache.tomcat/tomcat-coyote |
| 28 | maven | org.apache.nifi/nifi | 21 | Jun 15, 2022 | pkg:maven/org.apache.nifi/nifi |
| 29 | maven | org.cloudfoundry.identity/cloudfoundry-identity-server | 21 | Mar 5, 2026 | pkg:maven/org.cloudfoundry.identity/cloudfoundry-identity-server |
| 30 | maven | com.liferay.portal/com.liferay.portal.impl | 18 | Oct 31, 2025 | pkg:maven/com.liferay.portal/com.liferay.portal.impl |
| 31 | maven | org.apache.activemq/activemq-client | 18 | Apr 10, 2026 | pkg:maven/org.apache.activemq/activemq-client |
| 32 | maven | org.apache.jspwiki/jspwiki-main | 18 | Jul 31, 2025 | pkg:maven/org.apache.jspwiki/jspwiki-main |
| 33 | maven | org.springframework/spring-core | 18 | Sep 16, 2025 | pkg:maven/org.springframework/spring-core |
| 34 | maven | org.springframework/spring-webmvc | 18 | Apr 29, 2026 | pkg:maven/org.springframework/spring-webmvc |
| 35 | maven | org.apache.dolphinscheduler/dolphinscheduler | 17 | Apr 24, 2026 | pkg:maven/org.apache.dolphinscheduler/dolphinscheduler |
| 36 | maven | org.apache.geode/geode-core | 17 | Oct 25, 2022 | pkg:maven/org.apache.geode/geode-core |
| 37 | maven | org.apache.inlong/manager-pojo | 17 | May 28, 2025 | pkg:maven/org.apache.inlong/manager-pojo |
| 38 | maven | org.apache.dubbo/dubbo | 16 | Dec 15, 2023 | pkg:maven/org.apache.dubbo/dubbo |
| 39 | maven | org.apache.ranger/ranger | 16 | Jan 21, 2025 | pkg:maven/org.apache.ranger/ranger |
| 40 | maven | org.apache.struts.xwork/xwork-core | 16 | Jan 11, 2026 | pkg:maven/org.apache.struts.xwork/xwork-core |
| 41 | maven | org.bouncycastle/bcprov-jdk15 | 16 | Nov 23, 2023 | pkg:maven/org.bouncycastle/bcprov-jdk15 |
| 42 | maven | ai.h2o/h2o-core | 15 | Apr 23, 2026 | pkg:maven/ai.h2o/h2o-core |
| 43 | maven | io.netty/netty-codec-http | 15 | May 13, 2026 | pkg:maven/io.netty/netty-codec-http |
| 44 | maven | org.xwiki.platform/xwiki-platform-web | 15 | Feb 12, 2026 | pkg:maven/org.xwiki.platform/xwiki-platform-web |
| 45 | maven | org.geoserver.web/gs-web-app | 14 | Nov 25, 2025 | pkg:maven/org.geoserver.web/gs-web-app |
| 46 | maven | org.apache.hadoop/hadoop-main | 13 | Oct 21, 2020 | pkg:maven/org.apache.hadoop/hadoop-main |
| 47 | maven | org.apache.kylin/kylin | 13 | Oct 2, 2025 | pkg:maven/org.apache.kylin/kylin |
| 48 | maven | org.apache.tika/tika-core | 13 | Dec 4, 2025 | pkg:maven/org.apache.tika/tika-core |
| 49 | maven | org.jenkins-ci.plugins/git | 13 | Apr 29, 2026 | pkg:maven/org.jenkins-ci.plugins/git |
| 50 | maven | org.jenkins-ci.plugins.workflow/workflow-cps | 13 | Nov 13, 2024 | pkg:maven/org.jenkins-ci.plugins.workflow/workflow-cps |
| 51 | maven | org.apache.cassandra/cassandra-all | 12 | Apr 7, 2026 | pkg:maven/org.apache.cassandra/cassandra-all |
| 52 | maven | org.apache.cxf/cxf | 12 | Jun 16, 2021 | pkg:maven/org.apache.cxf/cxf |
| 53 | maven | org.apache.cxf/cxf-core | 12 | Jul 15, 2025 | pkg:maven/org.apache.cxf/cxf-core |
| 54 | maven | org.apache.hadoop/hadoop-common | 12 | Sep 25, 2024 | pkg:maven/org.apache.hadoop/hadoop-common |
| 55 | maven | org.apache.streampark/streampark | 12 | Dec 12, 2025 | pkg:maven/org.apache.streampark/streampark |
| 56 | maven | org.bouncycastle/bcprov-jdk15to18 | 12 | Apr 15, 2026 | pkg:maven/org.bouncycastle/bcprov-jdk15to18 |
| 57 | maven | org.jeecgframework.boot/jeecg-boot-parent | 12 | Oct 31, 2024 | pkg:maven/org.jeecgframework.boot/jeecg-boot-parent |
| 58 | maven | org.springframework/spring-web | 12 | Jun 12, 2025 | pkg:maven/org.springframework/spring-web |
| 59 | maven | com.xuxueli/xxl-job | 11 | Feb 8, 2024 | pkg:maven/com.xuxueli/xxl-job |
| 60 | maven | org.apache.archiva/archiva | 11 | Mar 1, 2024 | pkg:maven/org.apache.archiva/archiva |
| 61 | maven | org.apache.camel/camel-core | 11 | Feb 26, 2024 | pkg:maven/org.apache.camel/camel-core |
| 62 | maven | org.apache.commons/commons-compress | 11 | Feb 19, 2024 | pkg:maven/org.apache.commons/commons-compress |
| 63 | maven | org.apache.james/james-server | 11 | Feb 27, 2024 | pkg:maven/org.apache.james/james-server |
| 64 | maven | org.apache.jspwiki/jspwiki-war | 11 | May 25, 2023 | pkg:maven/org.apache.jspwiki/jspwiki-war |
| 65 | maven | org.apache.logging.log4j/log4j-core | 11 | Apr 10, 2026 | pkg:maven/org.apache.logging.log4j/log4j-core |
| 66 | maven | org.graylog2/graylog2-server | 11 | Jul 2, 2025 | pkg:maven/org.graylog2/graylog2-server |
| 67 | maven | org.igniterealtime.openfire/parent | 11 | Mar 19, 2020 | pkg:maven/org.igniterealtime.openfire/parent |
| 68 | maven | org.jenkins-ci.plugins/email-ext | 11 | May 16, 2023 | pkg:maven/org.jenkins-ci.plugins/email-ext |
| 69 | maven | org.mortbay.jetty/jetty | 11 | Jan 13, 2010 | pkg:maven/org.mortbay.jetty/jetty |
| 70 | maven | org.xwiki.platform/xwiki-platform-administration-ui | 11 | Dec 12, 2024 | pkg:maven/org.xwiki.platform/xwiki-platform-administration-ui |
| 71 | maven | struts/struts | 11 | Jul 30, 2025 | pkg:maven/struts/struts |
| 72 | maven | com.sonyericsson.jenkins.plugins.bfa/build-failure-analyzer | 10 | Sep 20, 2023 | pkg:maven/com.sonyericsson.jenkins.plugins.bfa/build-failure-analyzer |
| 73 | maven | com.vaadin/flow-server | 10 | Mar 10, 2026 | pkg:maven/com.vaadin/flow-server |
| 74 | maven | io.netty/netty | 10 | Dec 9, 2021 | pkg:maven/io.netty/netty |
| 75 | maven | org.apache.hive/hive-exec | 10 | Jan 28, 2025 | pkg:maven/org.apache.hive/hive-exec |
| 76 | maven | org.apache.inlong/manager-service | 10 | Jul 25, 2023 | pkg:maven/org.apache.inlong/manager-service |
| 77 | maven | org.apache.linkis/linkis | 10 | Jan 19, 2026 | pkg:maven/org.apache.linkis/linkis |
| 78 | maven | org.apache.shiro/shiro-core | 10 | Feb 10, 2026 | pkg:maven/org.apache.shiro/shiro-core |
| 79 | maven | org.apache.spark/spark-core_2.11 | 10 | Mar 14, 2026 | pkg:maven/org.apache.spark/spark-core_2.11 |
| 80 | maven | org.craftercms/crafter-studio | 10 | Jun 19, 2025 | pkg:maven/org.craftercms/crafter-studio |
| 81 | maven | org.jboss.netty/netty | 10 | Dec 9, 2021 | pkg:maven/org.jboss.netty/netty |
| 82 | maven | org.jenkins-ci.plugins.workflow/workflow-cps-global-lib | 10 | Oct 19, 2022 | pkg:maven/org.jenkins-ci.plugins.workflow/workflow-cps-global-lib |
| 83 | maven | org.springframework/spring-webflux | 10 | Apr 29, 2026 | pkg:maven/org.springframework/spring-webflux |
| 84 | maven | org.xwiki.platform/xwiki-platform-rest-server | 10 | Dec 10, 2025 | pkg:maven/org.xwiki.platform/xwiki-platform-rest-server |
| 85 | maven | cn.hutool/hutool-core | 9 | Dec 27, 2023 | pkg:maven/cn.hutool/hutool-core |
| 86 | maven | com.vaadin/vaadin-bom | 9 | Nov 2, 2021 | pkg:maven/com.vaadin/vaadin-bom |
| 87 | maven | io.jenkins/configuration-as-code | 9 | Jan 12, 2022 | pkg:maven/io.jenkins/configuration-as-code |
| 88 | maven | mysql/mysql-connector-java | 9 | Oct 17, 2023 | pkg:maven/mysql/mysql-connector-java |
| 89 | maven | org.apache.activemq/activemq-broker | 9 | Apr 24, 2026 | pkg:maven/org.apache.activemq/activemq-broker |
| 90 | maven | org.apache.activemq/apache-activemq | 9 | Apr 24, 2026 | pkg:maven/org.apache.activemq/apache-activemq |
| 91 | maven | org.apache.hive/hive | 9 | Jul 16, 2022 | pkg:maven/org.apache.hive/hive |
| 92 | maven | org.apache.spark/spark-core_2.10 | 9 | Mar 14, 2026 | pkg:maven/org.apache.spark/spark-core_2.10 |
| 93 | maven | org.apache.tapestry/tapestry-core | 9 | Dec 2, 2022 | pkg:maven/org.apache.tapestry/tapestry-core |
| 94 | maven | org.apache.xmlgraphics/batik | 9 | Oct 25, 2022 | pkg:maven/org.apache.xmlgraphics/batik |
| 95 | maven | org.apache.zookeeper/zookeeper | 9 | Mar 7, 2026 | pkg:maven/org.apache.zookeeper/zookeeper |
| 96 | maven | org.bouncycastle/bc-fips | 9 | Oct 24, 2025 | pkg:maven/org.bouncycastle/bc-fips |
| 97 | maven | org.bouncycastle/bcprov-jdk18on | 9 | Apr 15, 2026 | pkg:maven/org.bouncycastle/bcprov-jdk18on |
| 98 | maven | org.jenkins-ci.plugins/active-directory | 9 | Jul 12, 2023 | pkg:maven/org.jenkins-ci.plugins/active-directory |
| 99 | maven | org.jenkins-ci.plugins/config-file-provider | 9 | Aug 16, 2023 | pkg:maven/org.jenkins-ci.plugins/config-file-provider |
| 100 | maven | org.jenkins-ci.plugins/electricflow | 9 | Oct 25, 2023 | pkg:maven/org.jenkins-ci.plugins/electricflow |
- mavenMar 18, 2026pkg:maven/org.jenkins-ci.main/jenkins-core
- mavenOct 31, 2025pkg:maven/com.liferay.portal/release.portal.bom
- mavenApr 9, 2026pkg:maven/org.apache.tomcat/tomcat
- mavenSep 10, 2025pkg:maven/com.liferay.portal/release.dxp.bom
- mavenApr 30, 2026pkg:maven/org.keycloak/keycloak-services
- mavenMar 18, 2023pkg:maven/com.fasterxml.jackson.core/jackson-databind
- mavenJan 11, 2026pkg:maven/org.apache.struts/struts2-core
- mavenApr 9, 2026pkg:maven/org.apache.tomcat.embed/tomcat-embed-core
- mavenFeb 18, 2025pkg:maven/org.keycloak/keycloak-core
- mavenApr 15, 2026pkg:maven/org.xwiki.platform/xwiki-platform-oldcore
- mavenDec 15, 2025pkg:maven/org.elasticsearch/elasticsearch
- mavenMar 24, 2026pkg:maven/io.undertow/undertow-core
- mavenFeb 18, 2026pkg:maven/net.mingsoft/ms-mcms
- mavenNov 8, 2024pkg:maven/com.thoughtworks.xstream/xstream
- mavenJan 23, 2024pkg:maven/com.jfinal/jfinal
- mavenApr 29, 2026pkg:maven/org.jenkins-ci.plugins/script-security
- mavenMay 8, 2026pkg:maven/org.opencms/opencms-core
- mavenApr 22, 2026pkg:maven/org.springframework.security/spring-security-core
- mavenJan 21, 2026pkg:maven/org.apache.solr/solr-core
- mavenApr 9, 2026pkg:maven/org.apache.tomcat/tomcat-catalina
- mavenMar 5, 2026pkg:maven/org.eclipse.jetty/jetty-server
- mavenApr 9, 2026pkg:maven/org.apache.openmeetings/openmeetings-parent
- mavenApr 15, 2026pkg:maven/org.bouncycastle/bcprov-jdk14
- mavenFeb 2, 2026pkg:maven/org.keycloak/keycloak-parent
- mavenMay 14, 2024pkg:maven/org.bouncycastle/bcprov-jdk15on
- mavenApr 15, 2026pkg:maven/org.xwiki.platform/xwiki-platform-web-templates
- mavenApr 9, 2026pkg:maven/org.apache.tomcat/tomcat-coyote
- mavenJun 15, 2022pkg:maven/org.apache.nifi/nifi
- mavenMar 5, 2026pkg:maven/org.cloudfoundry.identity/cloudfoundry-identity-server
- mavenOct 31, 2025pkg:maven/com.liferay.portal/com.liferay.portal.impl
- mavenApr 10, 2026pkg:maven/org.apache.activemq/activemq-client
- mavenJul 31, 2025pkg:maven/org.apache.jspwiki/jspwiki-main
- mavenSep 16, 2025pkg:maven/org.springframework/spring-core
- mavenApr 29, 2026pkg:maven/org.springframework/spring-webmvc
- mavenApr 24, 2026pkg:maven/org.apache.dolphinscheduler/dolphinscheduler
- mavenOct 25, 2022pkg:maven/org.apache.geode/geode-core
- mavenMay 28, 2025pkg:maven/org.apache.inlong/manager-pojo
- mavenDec 15, 2023pkg:maven/org.apache.dubbo/dubbo
- mavenJan 21, 2025pkg:maven/org.apache.ranger/ranger
- mavenJan 11, 2026pkg:maven/org.apache.struts.xwork/xwork-core
- mavenNov 23, 2023pkg:maven/org.bouncycastle/bcprov-jdk15
- mavenApr 23, 2026pkg:maven/ai.h2o/h2o-core
- mavenMay 13, 2026pkg:maven/io.netty/netty-codec-http
- mavenFeb 12, 2026pkg:maven/org.xwiki.platform/xwiki-platform-web
- mavenNov 25, 2025pkg:maven/org.geoserver.web/gs-web-app
- mavenOct 21, 2020pkg:maven/org.apache.hadoop/hadoop-main
- mavenOct 2, 2025pkg:maven/org.apache.kylin/kylin
- mavenDec 4, 2025pkg:maven/org.apache.tika/tika-core
- mavenApr 29, 2026pkg:maven/org.jenkins-ci.plugins/git
- mavenNov 13, 2024pkg:maven/org.jenkins-ci.plugins.workflow/workflow-cps
- mavenApr 7, 2026pkg:maven/org.apache.cassandra/cassandra-all
- mavenJun 16, 2021pkg:maven/org.apache.cxf/cxf
- mavenJul 15, 2025pkg:maven/org.apache.cxf/cxf-core
- mavenSep 25, 2024pkg:maven/org.apache.hadoop/hadoop-common
- mavenDec 12, 2025pkg:maven/org.apache.streampark/streampark
- mavenApr 15, 2026pkg:maven/org.bouncycastle/bcprov-jdk15to18
- mavenOct 31, 2024pkg:maven/org.jeecgframework.boot/jeecg-boot-parent
- mavenJun 12, 2025pkg:maven/org.springframework/spring-web
- mavenFeb 8, 2024pkg:maven/com.xuxueli/xxl-job
- mavenMar 1, 2024pkg:maven/org.apache.archiva/archiva
- mavenFeb 26, 2024pkg:maven/org.apache.camel/camel-core
- mavenFeb 19, 2024pkg:maven/org.apache.commons/commons-compress
- mavenFeb 27, 2024pkg:maven/org.apache.james/james-server
- mavenMay 25, 2023pkg:maven/org.apache.jspwiki/jspwiki-war
- mavenApr 10, 2026pkg:maven/org.apache.logging.log4j/log4j-core
- mavenJul 2, 2025pkg:maven/org.graylog2/graylog2-server
- mavenMar 19, 2020pkg:maven/org.igniterealtime.openfire/parent
- mavenMay 16, 2023pkg:maven/org.jenkins-ci.plugins/email-ext
- mavenJan 13, 2010pkg:maven/org.mortbay.jetty/jetty
- mavenDec 12, 2024pkg:maven/org.xwiki.platform/xwiki-platform-administration-ui
- mavenJul 30, 2025pkg:maven/struts/struts
- mavenSep 20, 2023pkg:maven/com.sonyericsson.jenkins.plugins.bfa/build-failure-analyzer
- mavenMar 10, 2026pkg:maven/com.vaadin/flow-server
- mavenDec 9, 2021pkg:maven/io.netty/netty
- mavenJan 28, 2025pkg:maven/org.apache.hive/hive-exec
- mavenJul 25, 2023pkg:maven/org.apache.inlong/manager-service
- mavenJan 19, 2026pkg:maven/org.apache.linkis/linkis
- mavenFeb 10, 2026pkg:maven/org.apache.shiro/shiro-core
- mavenMar 14, 2026pkg:maven/org.apache.spark/spark-core_2.11
- mavenJun 19, 2025pkg:maven/org.craftercms/crafter-studio
- mavenDec 9, 2021pkg:maven/org.jboss.netty/netty
- mavenOct 19, 2022pkg:maven/org.jenkins-ci.plugins.workflow/workflow-cps-global-lib
- mavenApr 29, 2026pkg:maven/org.springframework/spring-webflux
- mavenDec 10, 2025pkg:maven/org.xwiki.platform/xwiki-platform-rest-server
- mavenDec 27, 2023pkg:maven/cn.hutool/hutool-core
- mavenNov 2, 2021pkg:maven/com.vaadin/vaadin-bom
- mavenJan 12, 2022pkg:maven/io.jenkins/configuration-as-code
- mavenOct 17, 2023pkg:maven/mysql/mysql-connector-java
- mavenApr 24, 2026pkg:maven/org.apache.activemq/activemq-broker
- mavenApr 24, 2026pkg:maven/org.apache.activemq/apache-activemq
- mavenJul 16, 2022pkg:maven/org.apache.hive/hive
- mavenMar 14, 2026pkg:maven/org.apache.spark/spark-core_2.10
- mavenDec 2, 2022pkg:maven/org.apache.tapestry/tapestry-core
- mavenOct 25, 2022pkg:maven/org.apache.xmlgraphics/batik
- mavenMar 7, 2026pkg:maven/org.apache.zookeeper/zookeeper
- mavenOct 24, 2025pkg:maven/org.bouncycastle/bc-fips
- mavenApr 15, 2026pkg:maven/org.bouncycastle/bcprov-jdk18on
- mavenJul 12, 2023pkg:maven/org.jenkins-ci.plugins/active-directory
- mavenAug 16, 2023pkg:maven/org.jenkins-ci.plugins/config-file-provider
- mavenOct 25, 2023pkg:maven/org.jenkins-ci.plugins/electricflow
Showing top 100 packages in maven by CVE count. Data union of GitHub Security Advisories + OSV.dev (refreshed every 15 min).