Ecosyste.ms: Advisories

Moderate 8,559 High 6,707 Critical 2,930 Low 1,073

maven 5,662 packagist 4,372 pypi 4,006 npm 3,637 go 2,075 nuget 1,467 rubygems 827 cargo 824 swift 31 hex 30 actions 16 pub 8

org.jenkins-ci.main:jenkins-core 189 org.apache.tomcat:tomcat 133 com.fasterxml.jackson.core:jackson-databind 69 org.apache.struts:struts2-core 55 org.keycloak:keycloak-core 47 com.liferay.portal:release.portal.bom 45 org.apache.tomcat.embed:tomcat-embed-core 37 com.thoughtworks.xstream:xstream 36 com.jfinal:jfinal 36 org.xwiki.platform:xwiki-platform-oldcore 35 net.mingsoft:ms-mcms 35 org.elasticsearch:elasticsearch 35 org.jenkins-ci.plugins:script-security 32 org.keycloak:keycloak-services 31 io.undertow:undertow-core 30 org.apache.solr:solr-core 25 org.keycloak:keycloak-parent 25 org.eclipse.jetty:jetty-server 23 org.springframework.security:spring-security-core 23 org.bouncycastle:bcprov-jdk14 22 org.apache.nifi:nifi 22 org.apache.openmeetings:openmeetings-parent 21 org.cloudfoundry.identity:cloudfoundry-identity-server 20 org.springframework:spring-core 19 com.vaadin:vaadin-bom 18 com.liferay.portal:release.dxp.bom 18 org.xwiki.platform:xwiki-platform-web-templates 17 org.apache.geode:geode-core 17 org.apache.activemq:activemq-client 16 org.apache.jspwiki:jspwiki-main 16 org.apache.dubbo:dubbo 16 org.bouncycastle:bcprov-jdk15 16 org.apache.struts.xwork:xwork-core 15 org.xwiki.platform:xwiki-platform-web 14 org.apache.inlong:manager-pojo 14 org.apache.hadoop:hadoop-main 13 org.apache.cxf:cxf 13 org.jenkins-ci.plugins:git 12 com.vaadin:flow-server 12 org.apache.tomcat:tomcat-coyote 12 org.bouncycastle:bcprov-jdk15on 12 org.jenkins-ci.plugins.workflow:workflow-cps 12 org.mortbay.jetty:jetty 11 org.apache.hadoop:hadoop-common 11 org.apache.commons:commons-compress 11 org.apache.camel:camel-core 11 org.apache.jspwiki:jspwiki-war 11 org.apache.james:james-server 11 org.apache.cxf:cxf-core 11 org.apache.tika:tika-core 11 org.jeecgframework.boot:jeecg-boot-common 11 com.xuxueli:xxl-job 11 org.igniterealtime.openfire:parent 11 org.apache.ranger:ranger 11 org.jeecgframework.boot:jeecg-boot-parent 11 org.jenkins-ci.plugins:email-ext 11 org.apache.dolphinscheduler:dolphinscheduler 11 org.jenkins-ci.plugins.workflow:workflow-cps-global-lib 10 org.jboss.netty:netty 10 org.apache.inlong:manager-service 10 io.netty:netty 10 org.xwiki.platform:xwiki-platform-administration-ui 10 org.craftercms:crafter-studio 9 org.bouncycastle:bcprov-jdk15to18 9 com.sonyericsson.jenkins.plugins.bfa:build-failure-analyzer 9 org.opennms:opennms 9 io.jenkins:configuration-as-code 9 org.apache.tapestry:tapestry-core 9 org.springframework:spring-webmvc 9 org.apache.archiva:archiva 9 org.springframework:spring-web 9 org.jenkins-ci.plugins:config-file-provider 9 org.apache.shiro:shiro-core 9 org.opencms:opencms-core 9 org.jenkins-ci.plugins:active-directory 9 cn.hutool:hutool-core 9 org.apache.xmlgraphics:batik 9 org.opencrx:opencrx-core-models 9 org.jenkins-ci.plugins:electricflow 9 org.apache.tomcat:tomcat-catalina 9 org.apache.hive:hive 9 com.hazelcast:hazelcast 8 org.graylog2:graylog2-server 8 io.jenkins.blueocean:blueocean 8 org.apache.kylin:kylin 8 org.apache.santuario:xmlsec 8 org.jenkins-ci.plugins:ec2 8 org.apache.hive:hive-exec 8 org.webjars.npm:jquery 8 jquery-rails 8 jquery 8 org.apache.pdfbox:pdfbox 8 org.apache.ozone:ozone-main 8 org.yaml:snakeyaml 8 org.apache.zeppelin:zeppelin 8 mysql:mysql-connector-java 8 org.postgresql:postgresql 8 org.apache.ambari:ambari 8 jquery-ui 7 jquery-ui-rails 7 org.webjars.npm:jquery-ui 7 jQuery.UI.Combined 7 io.jenkins.plugins:miniorange-saml-sp 7 org.owasp.antisamy:antisamy 7 org.jenkins-ci.plugins:jobConfigHistory 7 org.jeecgframework.boot:jeecg-boot-base 7 net.opentsdb:opentsdb 7 org.apache.cxf:apache-cxf 7 org.jenkins-ci.plugins:artifactory 7 org.owasp.esapi:esapi 7 org.apache.logging.log4j:log4j-core 7 org.apache.karaf:apache-karaf 7 org.jboss.resteasy:resteasy-client 7 org.apache.inlong:manager-web 7 io.jenkins.plugins:cavisson-ns-nd-integration 7 org.apache.spark:spark-core_2.11 7 org.jenkins-ci.plugins:rundeck 7 org.jenkins-ci.plugins:mercurial 7 io.dataease:dataease-plugin-common 7 org.jruby:jruby-stdlib 7 org.apache.derby:derby 7 rubygems-update 7 org.apache.tika:tika 7 org.apache.activemq:activemq-parent 7 org.apache.poi:poi 7 org.apache.atlas:atlas-common 7 org.apache.hive:hive-service 7 org.silverpeas.core:silverpeas-core-web 7 org.apache.linkis:linkis 7 io.atomix:atomix 7 org.jenkins-ci.plugins:subversion 7 io.jenkins.plugins:warnings-ng 7 org.jenkins-ci.plugins:openshift-deployer 7 jQuery 7 org.apache.shenyu:shenyu-common 6 org.apache.pulsar:pulsar-broker 6 org.apache.struts:struts2-rest-plugin 6 org.jenkins-ci.plugins:repository-connector 6 org.apache.solr:solr-parent 6 org.apache.spark:spark-core_2.10 6 hudson.plugins:project-inheritance 6 org.jenkins-ci.plugins:azure-vm-agents 6 org.apache.mesos:mesos 6 com.sonyericsson.hudson.plugins.gerrit:gerrit-trigger 6 org.apache.httpcomponents:httpclient 6 io.netty:netty-handler 6 org.jenkins-ci.plugins:fortify-on-demand-uploader 6 io.netty:netty-codec-http 6 org.jenkins-ci.plugins:ec2-deployment-dashboard 6 de.tum.in.ase:artemis-java-test-sandbox 6 org.csanchez.jenkins.plugins:kubernetes 6 org.apache.axis:axis 6 org.opensearch.plugin:opensearch-security 6 org.opencastproject:opencast-kernel 6 com.jflyfox:jflyfox_jfinal 6 org.xwiki.commons:xwiki-commons-xml 6 axis:axis 6 commons-fileupload:commons-fileupload 6 org.jenkins-ci.plugins:pipeline-maven 6 cn.hutool:hutool-json 6 org.apache.storm:storm-core 6 org.apache.syncope:syncope-core 6 org.jenkins-ci.plugins:gitlab-oauth 6 org.bouncycastle:bcprov-jdk18on 6 com.xebialabs.deployit.ci:deployit-plugin 6 tech.powerjob:powerjob 6 org.jenkins-ci.plugins:ghprb 5 org.bouncycastle:bcprov-ext-jdk15on 5 org.apache.cassandra:cassandra-all 5 org.jenkins-ci.plugins:junit 5 info.magnolia:magnolia-core 5 org.springframework.amqp:spring-amqp 5 org.apache.druid:druid 5 org.springframework.security.oauth:spring-security-oauth2 5 org.jenkins-ci.plugins:openid 5 org.apache.zeppelin:zeppelin-server 5 com.synopsys.jenkinsci:ownership 5 org.jenkins-ci.plugins:fortify 5 com.google.protobuf:protobuf-java 5 com.ruoyi:ruoyi 5 org.apache.hadoop:hadoop-client 5 org.jboss.resteasy:resteasy-bom 5 org.jenkins-ci.plugins:extended-choice-parameter 5 org.dspace:dspace-jspui 5 org.jeecgframework.boot:jeecg-boot-base-core 5 org.neo4j.procedure:apoc 5 org.jenkins-ci.plugins:aws-codecommit-trigger 5 io.jenkins.plugins:neuvector-vulnerability-scanner 5 org.xwiki.platform:xwiki-platform-appwithinminutes-ui 5 org.apache.inlong:manager-dao 5 org.opennms:opennms-webapp 5 org.jenkins-ci.plugins:google-login 5 org.apache.zookeeper:zookeeper 5 org.jenkinsci.plugins:octoperf 5 edu.stanford.nlp:stanford-corenlp 5 org.wildfly:wildfly-parent 5 org.apache.struts:struts-core 5 org.xwiki.platform:xwiki-platform-flamingo-skin-resources 5 org.jenkins-ci.plugins:google-compute-engine 5 org.jenkins-ci.plugins:azure-ad 5

https://github.com/xwiki/xwiki-platform 174 https://github.com/jenkinsci/jenkins 148 https://github.com/apache/tomcat 97 https://github.com/FasterXML/jackson-databind 70 https://github.com/keycloak/keycloak 64 https://github.com/apache/struts 46 https://github.com/spring-projects/spring-framework 41 https://github.com/x-stream/xstream 36 https://github.com/apache/activemq 33 https://github.com/CVEProject/cvelist 28 https://github.com/apache/inlong 26 https://github.com/eclipse/jetty.project 23 https://github.com/apache/nifi 22 https://github.com/apache/cxf 21 https://github.com/jenkinsci/script-security-plugin 21 https://github.com/jeecgboot/jeecg-boot 20 https://github.com/netty/netty 20 https://github.com/OpenNMS/opennms 20 https://github.com/cloudfoundry/uaa 19 https://github.com/bcgit/bc-java 19 https://github.com/geoserver/geoserver 18 https://github.com/vaadin/platform 17 https://github.com/opencast/opencast 16 https://github.com/apache/camel 15 https://github.com/undertow-io/undertow 13 https://github.com/ming-soft/MCMS 13 https://github.com/xuxueli/xxl-job 13 https://github.com/dromara/hutool 13 https://github.com/quarkusio/quarkus 13 https://github.com/apache/dolphinscheduler 12 https://github.com/apache/kylin 12 https://github.com/igniterealtime/Openfire 11 https://github.com/vaadin/flow 11 https://github.com/apache/zeppelin 10 https://github.com/DSpace/DSpace 10 https://github.com/spring-projects/spring-security 10 https://github.com/jenkinsci/git-plugin 10 https://github.com/apache/lucene-solr 9 https://github.com/cui2shark/cms 9 https://github.com/jquery/jquery 9 https://github.com/Graylog2/graylog2-server 9 https://github.com/xwiki/xwiki-commons 8 https://github.com/hazelcast/hazelcast 8 https://github.com/nahsra/antisamy 8 https://github.com/opensearch-project/security 8 https://github.com/jenkinsci/config-file-provider-plugin 8 https://github.com/jflyfox/jfinal_cms 7 https://github.com/vaadin/framework 7 https://github.com/apache/xmlgraphics-batik 7 https://github.com/OpenTSDB/opentsdb 7 https://github.com/dataease/dataease 7 https://github.com/pgjdbc/pgjdbc 7 https://github.com/ratpack/ratpack 7 https://github.com/RhinoSecurityLabs/CVEs 7 https://github.com/rubygems/rubygems 7 https://github.com/rundeck/rundeck 7 https://github.com/jenkinsci/blueocean-plugin 7 https://github.com/OpenAPITools/openapi-generator 6 https://github.com/cui2shark/security 6 https://github.com/apache/tika 6 https://bitbucket.org/snakeyaml/snakeyaml 6 https://github.com/jenkinsci/build-failure-analyzer-plugin 6 https://github.com/playframework/playframework 6 https://github.com/jenkinsci/fortify-on-demand-uploader-plugin 6 https://github.com/vert-x3/vertx-web 6 https://github.com/resteasy/resteasy 6 https://github.com/jenkinsci/gerrit-trigger-plugin 6 https://github.com/apache/hadoop 6 https://github.com/DrunkenShells/Disclosures 6 https://github.com/ls1intum/Ares 6 https://github.com/jquery/jquery-ui 6 https://github.com/ESAPI/esapi-java-legacy 6 https://github.com/jenkinsci/ec2-plugin 6 https://github.com/http4s/http4s 6 https://github.com/line/armeria 6 https://github.com/apache/pulsar 6 https://github.com/OpenRefine/OpenRefine 6 https://github.com/jenkinsci/electricflow-plugin 6 https://github.com/jenkinsci/configuration-as-code-plugin 6 https://github.com/JLLeitschuh/security-research 5 https://github.com/jenkinsci/email-ext-plugin 5 https://github.com/apiman/apiman 5 https://github.com/jensdietrich/xshady-release 5 https://github.com/grails/grails-core 5 https://github.com/apache/geode 5 https://bitbucket.org/connect2id/nimbus-jose-jwt 5 https://github.com/apache/openmeetings 5 https://github.com/jettison-json/jettison 5 https://github.com/PowerJob/PowerJob 5 https://github.com/jenkinsci/workflow-cps-global-lib-plugin 5 https://github.com/jenkinsci/m2release-plugin 5 https://github.com/jenkinsci/junit-plugin 5 https://github.com/alibaba/nacos 5 https://github.com/jenkinsci/subversion-plugin 5 https://github.com/apache/shenyu 5 https://github.com/jenkinsci/publish-over-ssh-plugin 5 https://github.com/jenkinsci/github-plugin 5 https://github.com/apache/shiro 5 https://github.com/alkacon/opencms-core 5 https://github.com/jenkinsci/gitlab-plugin 5 https://github.com/apache/karaf 5 https://github.com/apache/syncope 5 https://github.com/neo4j-contrib/neo4j-apoc-procedures 5 https://github.com/jenkinsci/codedx-plugin 5 https://github.com/restlet/restlet-framework-java 5 https://github.com/jenkinsci/active-directory-plugin 5 https://github.com/h2database/h2database 5 https://github.com/protocolbuffers/protobuf 5 https://github.com/jenkinsci/support-core-plugin 5 https://github.com/jenkinsci/workflow-cps-plugin 4 https://github.com/pippo-java/pippo 4 https://github.com/jenkinsci/credentials-binding-plugin 4 https://github.com/apache/solr 4 https://github.com/shopizer-ecommerce/shopizer 4 https://github.com/infinispan/infinispan 4 https://github.com/skylot/jadx 4 https://github.com/jenkinsci/warnings-ng-plugin 4 https://github.com/apache/streampipes 4 https://github.com/itext/itext7 4 https://github.com/jfinal/jfinal 4 https://github.com/jenkinsci/p4-plugin 4 https://github.com/jenkinsci/job-config-history-plugin 4 https://github.com/jenkinsci/gitlab-oauth-plugin 4 https://github.com/jenkinsci/xldeploy-plugin 4 https://github.com/reportportal/reportportal 4 https://github.com/micronaut-projects/micronaut-core 4 https://github.com/jenkinsci/rundeck-plugin 4 https://github.com/jenkinsci/fortify-plugin 4 https://github.com/jenkinsci/libvirt-slave-plugin 4 https://github.com/ktorio/ktor 4 https://github.com/xerial/snappy-java 4 https://github.com/bcgit/bc-csharp 4 https://github.com/resteasy/Resteasy 4 https://github.com/apache/activemq-artemis 4 https://github.com/jenkinsci/matrix-project-plugin 4 https://github.com/jenkinsci/htmlpublisher-plugin 4 https://github.com/jenkinsci/active-choices-plugin 4 https://github.com/yamcs/yamcs 4 https://github.com/stanfordnlp/corenlp 4 https://github.com/jenkinsci/ansible-plugin 4 https://github.com/jenkinsci/hpe-application-automation-tools-plugin 4 https://github.com/apache/httpcomponents-client 4 https://github.com/nightcloudos/new_cms 4 https://github.com/jenkinsci/nexus-platform-plugin 4 https://github.com/HtmlUnit/htmlunit 4 https://github.com/aws/aws-iot-device-sdk-java-v2 4 https://github.com/jeremylong/DependencyCheck 3 https://github.com/jenkinsci/mailer-plugin 3 https://github.com/qos-ch/logback 3 https://github.com/apache/santuario-java 3 https://github.com/Rabb1ter/cms 3 https://github.com/jenkinsci/git-parameter-plugin 3 https://github.com/li-yu320/cms 3 https://github.com/jenkinsci/gitlab-branch-source-plugin 3 https://github.com/matrix-org/matrix-android-sdk2 3 https://github.com/mbechler/marshalsec 3 https://github.com/jenkinsci/git-client-plugin 3 https://github.com/LetianYuan/My-CVE-Public-References 3 https://github.com/Adobe-Consulting-Services/acs-aem-commons 3 https://github.com/mitreid-connect/OpenID-Connect-Java-Spring-Server 3 https://github.com/jenkinsci/azure-credentials-plugin 3 https://github.com/codehaus-plexus/plexus-utils 3 https://github.com/aws/amazon-redshift-jdbc-driver 3 https://github.com/AsyncHttpClient/async-http-client 3 https://github.com/jenkinsci/embeddable-build-status-plugin 3 https://github.com/jenkinsci/hashicorp-vault-plugin 3 https://github.com/opengoofy/hippo4j 3 https://github.com/OpenIdentityPlatform/OpenAM 3 https://github.com/jenkinsci/azure-vm-agents-plugin 3 https://github.com/open-metadata/OpenMetadata 3 https://github.com/ysuzhangbin/cms 3 https://github.com/jooby-project/jooby 3 https://github.com/orientechnologies/orientdb 3 https://github.com/joniles/mpxj 3 https://github.com/OWASP/json-sanitizer 3 https://github.com/crate/crate 3 https://github.com/peteroupc/CBOR-Java 3 https://github.com/pf4j/pf4j 3 https://github.com/apache/storm 3 https://github.com/jhy/jsoup 3 https://github.com/javamelody/javamelody 3 https://github.com/jenkinsci/cloudbees-jenkins-advisor-plugin 3 https://github.com/eclipse-vertx/vert.x 3 https://github.com/jenkinsci/liquibase-runner-plugin 3 https://github.com/spray/spray-json 3 https://github.com/jenkinsci/nomad-plugin 3 https://github.com/apache/commons-configuration 3 https://github.com/apache/james-project 3 https://github.com/spring-projects/spring-boot 3 https://github.com/apache/jackrabbit 3 https://github.com/jenkinsci/audit-trail-plugin 3 https://github.com/wso2/carbon-registry 3 https://github.com/apache/cxf-fediz 3 https://github.com/apache/derby 3 https://github.com/jenkinsci/mercurial-plugin 3 https://github.com/eclipse-ee4j/mojarra 3 https://github.com/jenkinsci/code-coverage-api-plugin 3 https://github.com/google/guava 3 https://github.com/jenkinsci/compuware-topaz-for-total-test-plugin 3