Ecosyste.ms: Advisories

Moderate 8,836 High 7,269 Critical 3,070 Low 1,144

maven 5,864 packagist 4,634 pypi 4,352 npm 3,812 go 2,295 nuget 1,552 cargo 882 rubygems 880 swift 33 hex 32 actions 20 pub 9

org.jenkins-ci.main:jenkins-core 193 org.apache.tomcat:tomcat 132 com.fasterxml.jackson.core:jackson-databind 69 org.apache.struts:struts2-core 55 org.keycloak:keycloak-core 51 com.liferay.portal:release.portal.bom 46 org.apache.tomcat.embed:tomcat-embed-core 38 org.xwiki.platform:xwiki-platform-oldcore 37 com.thoughtworks.xstream:xstream 37 org.elasticsearch:elasticsearch 36 org.keycloak:keycloak-services 36 com.jfinal:jfinal 36 net.mingsoft:ms-mcms 35 io.undertow:undertow-core 34 org.jenkins-ci.plugins:script-security 33 org.apache.solr:solr-core 25 org.keycloak:keycloak-parent 25 org.springframework.security:spring-security-core 24 org.eclipse.jetty:jetty-server 24 org.bouncycastle:bcprov-jdk14 22 org.apache.nifi:nifi 21 org.apache.openmeetings:openmeetings-parent 21 org.cloudfoundry.identity:cloudfoundry-identity-server 20 org.springframework:spring-core 19 org.xwiki.platform:xwiki-platform-web-templates 19 com.liferay.portal:release.dxp.bom 18 com.vaadin:vaadin-bom 18 org.apache.geode:geode-core 17 org.apache.dubbo:dubbo 16 org.apache.activemq:activemq-client 16 org.bouncycastle:bcprov-jdk15 16 org.apache.jspwiki:jspwiki-main 16 org.apache.struts.xwork:xwork-core 15 org.xwiki.platform:xwiki-platform-web 14 org.apache.tomcat:tomcat-coyote 14 org.apache.inlong:manager-pojo 14 org.jenkins-ci.plugins.workflow:workflow-cps 13 org.apache.hadoop:hadoop-main 13 org.apache.cxf:cxf 13 org.apache.dolphinscheduler:dolphinscheduler 12 com.vaadin:flow-server 12 org.bouncycastle:bcprov-jdk15on 12 org.apache.hadoop:hadoop-common 12 org.jeecgframework.boot:jeecg-boot-parent 12 org.jenkins-ci.plugins:git 12 org.apache.cxf:cxf-core 11 org.jenkins-ci.plugins:email-ext 11 com.xuxueli:xxl-job 11 org.apache.camel:camel-core 11 org.igniterealtime.openfire:parent 11 org.apache.james:james-server 11 org.jeecgframework.boot:jeecg-boot-common 11 org.apache.ranger:ranger 11 org.mortbay.jetty:jetty 11 org.springframework:spring-webmvc 11 org.apache.commons:commons-compress 11 org.apache.tika:tika-core 11 org.apache.jspwiki:jspwiki-war 11 io.netty:netty 10 org.xwiki.platform:xwiki-platform-administration-ui 10 org.springframework:spring-web 10 org.jboss.netty:netty 10 org.apache.inlong:manager-service 10 org.jenkins-ci.plugins.workflow:workflow-cps-global-lib 10 org.apache.tomcat:tomcat-catalina 10 org.apache.xmlgraphics:batik 9 org.opencms:opencms-core 9 org.jenkins-ci.plugins:config-file-provider 9 org.apache.linkis:linkis 9 org.apache.shiro:shiro-core 9 org.opencrx:opencrx-core-models 9 org.apache.archiva:archiva 9 cn.hutool:hutool-core 9 org.apache.tapestry:tapestry-core 9 bootstrap 9 twbs/bootstrap 9 bootstrap 9 org.webjars:bootstrap 9 org.bouncycastle:bcprov-jdk15to18 9 org.opennms:opennms 9 io.jenkins:configuration-as-code 9 org.jenkins-ci.plugins:electricflow 9 org.jenkins-ci.plugins:active-directory 9 org.craftercms:crafter-studio 9 org.apache.hive:hive 9 com.sonyericsson.jenkins.plugins.bfa:build-failure-analyzer 9 org.apache.kylin:kylin 9 bootstrap 9 org.apache.ozone:ozone-main 8 com.hazelcast:hazelcast 8 jquery 8 pyspark 8 io.jenkins.blueocean:blueocean 8 org.apache.zeppelin:zeppelin 8 org.apache.ambari:ambari 8 org.apache.santuario:xmlsec 8 org.webjars.npm:jquery 8 org.jenkins-ci.plugins:ec2 8 org.postgresql:postgresql 8 org.yaml:snakeyaml 8 mysql:mysql-connector-java 8 org.apache.pdfbox:pdfbox 8 org.apache.hive:hive-exec 8 org.graylog2:graylog2-server 8 jquery-rails 8 org.apache.derby:derby 7 org.apache.poi:poi 7 org.apache.spark:spark-core_2.11 7 org.jenkins-ci.plugins:jobConfigHistory 7 org.jruby:jruby-stdlib 7 rubygems-update 7 org.webjars.npm:jquery-ui 7 org.apache.logging.log4j:log4j-core 7 org.apache.cxf:apache-cxf 7 jQuery.UI.Combined 7 bootstrap.sass 7 io.jenkins.plugins:cavisson-ns-nd-integration 7 bootstrap-sass 7 org.owasp.esapi:esapi 7 jquery-ui-rails 7 jQuery 7 org.apache.inlong:manager-web 7 io.dataease:dataease-plugin-common 7 jquery-ui 7 org.apache.tika:tika 7 org.jenkins-ci.plugins:mercurial 7 org.jboss.resteasy:resteasy-client 7 org.owasp.antisamy:antisamy 7 org.jenkins-ci.plugins:rundeck 7 org.jenkins-ci.plugins:subversion 7 io.jenkins.plugins:miniorange-saml-sp 7 org.jenkins-ci.plugins:oic-auth 7 io.atomix:atomix 7 org.jeecgframework.boot:jeecg-boot-base 7 org.jenkins-ci.plugins:artifactory 7 org.apache.hive:hive-service 7 net.opentsdb:opentsdb 7 org.jenkins-ci.plugins:openshift-deployer 7 io.jenkins.plugins:warnings-ng 7 org.apache.atlas:atlas-common 7 org.silverpeas.core:silverpeas-core-web 7 org.apache.activemq:activemq-parent 7 org.apache.karaf:apache-karaf 7 cn.hutool:hutool-json 6 org.apache.httpcomponents:httpclient 6 org.apache.mesos:mesos 6 org.apache.shenyu:shenyu-common 6 org.opencastproject:opencast-kernel 6 org.jenkins-ci.plugins:pipeline-maven 6 commons-fileupload:commons-fileupload 6 org.apache.spark:spark-core_2.10 6 org.apache.storm:storm-core 6 org.jenkins-ci.plugins:gitlab-oauth 6 org.xwiki.commons:xwiki-commons-xml 6 io.netty:netty-codec-http 6 org.jenkins-ci.plugins:azure-vm-agents 6 org.apache.syncope:syncope-core 6 org.apache.druid:druid 6 org.apache.struts:struts2-rest-plugin 6 org.apache.axis:axis 6 com.jflyfox:jflyfox_jfinal 6 axis:axis 6 org.bouncycastle:bcprov-jdk18on 6 org.opensearch.plugin:opensearch-security 6 org.apache.solr:solr-parent 6 com.sonyericsson.hudson.plugins.gerrit:gerrit-trigger 6 com.xebialabs.deployit.ci:deployit-plugin 6 de.tum.in.ase:artemis-java-test-sandbox 6 io.netty:netty-handler 6 org.csanchez.jenkins.plugins:kubernetes 6 hudson.plugins:project-inheritance 6 org.jenkins-ci.plugins:ec2-deployment-dashboard 6 org.jenkins-ci.plugins:fortify-on-demand-uploader 6 com.google.protobuf:protobuf-java 6 org.jenkins-ci.plugins:repository-connector 6 org.apache.pulsar:pulsar-broker 6 org.infinispan:infinispan-core 6 tech.powerjob:powerjob 6 com.nimbusds:nimbus-jose-jwt 5 io.vertx:vertx-core 5 org.jenkins-ci.plugins:sinatra-chef-builder 5 com.datapipe.jenkins.plugins:hashicorp-vault-plugin 5 org.apache.cassandra:cassandra-all 5 org.jenkins-ci.plugins:extended-choice-parameter 5 xerces:xercesImpl 5 org.jenkins-ci.plugins:htmlpublisher 5 org.jenkins-ci.plugins:publish-over-ssh 5 org.apache.hadoop:hadoop-client 5 org.jenkins-ci.plugins:aws-codecommit-trigger 5 org.jenkins-ci.plugins:azure-ad 5 org.jenkins-ci.plugins:websphere-deployer 5 org.apache.inlong:manager-dao 5 edu.stanford.nlp:stanford-corenlp 5 org.biouno:uno-choice 5 org.xwiki.platform:xwiki-platform-flamingo-skin-resources 5 org.zenframework.z8.dependencies.commons:log4j-1.2.17 5 org.jenkins-ci.plugins:scriptler 5 org.apache.streampark:streampark 5 org.jenkins-ci.plugins:ghprb 5 org.jenkins-ci.plugins:google-login 5

https://github.com/xwiki/xwiki-platform 183 https://github.com/jenkinsci/jenkins 150 https://github.com/apache/tomcat 101 https://github.com/keycloak/keycloak 73 https://github.com/FasterXML/jackson-databind 70 https://github.com/apache/struts 46 https://github.com/spring-projects/spring-framework 45 https://github.com/x-stream/xstream 37 https://github.com/apache/activemq 33 https://github.com/CVEProject/cvelist 28 https://github.com/apache/inlong 27 https://github.com/apache/nifi 23 https://github.com/eclipse/jetty.project 23 https://github.com/apache/cxf 21 https://github.com/jenkinsci/script-security-plugin 21 https://github.com/netty/netty 21 https://github.com/undertow-io/undertow 20 https://github.com/OpenNMS/opennms 20 https://github.com/jeecgboot/jeecg-boot 20 https://github.com/bcgit/bc-java 19 https://github.com/cloudfoundry/uaa 19 https://github.com/geoserver/geoserver 18 https://github.com/vaadin/platform 17 https://github.com/opencast/opencast 17 https://github.com/apache/camel 15 https://github.com/xuxueli/xxl-job 14 https://github.com/apache/dolphinscheduler 13 https://github.com/ming-soft/MCMS 13 https://github.com/quarkusio/quarkus 13 https://github.com/OpenRefine/OpenRefine 13 https://github.com/dromara/hutool 13 https://github.com/apache/kylin 12 https://github.com/spring-projects/spring-security 11 https://github.com/igniterealtime/Openfire 11 https://github.com/vaadin/flow 11 https://github.com/Graylog2/graylog2-server 10 https://github.com/DSpace/DSpace 10 https://github.com/apache/zeppelin 10 https://github.com/jenkinsci/git-plugin 10 https://github.com/apache/lucene-solr 9 https://github.com/dataease/dataease 9 https://github.com/jquery/jquery 9 https://github.com/cui2shark/cms 9 https://github.com/nahsra/antisamy 8 https://github.com/xwiki/xwiki-commons 8 https://github.com/hazelcast/hazelcast 8 https://github.com/opensearch-project/security 8 https://github.com/jenkinsci/config-file-provider-plugin 8 https://github.com/twbs/bootstrap 7 https://github.com/OpenTSDB/opentsdb 7 https://github.com/vaadin/framework 7 https://github.com/apache/xmlgraphics-batik 7 https://github.com/pgjdbc/pgjdbc 7 https://github.com/jenkinsci/blueocean-plugin 7 https://github.com/infinispan/infinispan 7 https://github.com/RhinoSecurityLabs/CVEs 7 https://github.com/ratpack/ratpack 7 https://github.com/jflyfox/jfinal_cms 7 https://github.com/apache/hadoop 7 https://github.com/rubygems/rubygems 7 https://github.com/rundeck/rundeck 7 https://github.com/line/armeria 6 https://github.com/ls1intum/Ares 6 https://github.com/http4s/http4s 6 https://github.com/jenkinsci/fortify-on-demand-uploader-plugin 6 https://github.com/apache/pulsar 6 https://github.com/jenkinsci/gerrit-trigger-plugin 6 https://github.com/cui2shark/security 6 https://github.com/jenkinsci/electricflow-plugin 6 https://github.com/jenkinsci/ec2-plugin 6 https://github.com/protocolbuffers/protobuf 6 https://bitbucket.org/snakeyaml/snakeyaml 6 https://github.com/OpenAPITools/openapi-generator 6 https://github.com/playframework/playframework 6 https://github.com/jenkinsci/configuration-as-code-plugin 6 https://github.com/apache/tika 6 https://github.com/apache/syncope 6 https://github.com/jenkinsci/build-failure-analyzer-plugin 6 https://github.com/vert-x3/vertx-web 6 https://github.com/ESAPI/esapi-java-legacy 6 https://github.com/jquery/jquery-ui 6 https://github.com/resteasy/resteasy 6 https://github.com/DrunkenShells/Disclosures 6 https://github.com/neo4j-contrib/neo4j-apoc-procedures 5 https://github.com/apache/geode 5 https://github.com/apache/shiro 5 https://github.com/apache/openmeetings 5 https://github.com/h2database/h2database 5 https://github.com/jenkinsci/support-core-plugin 5 https://github.com/jenkinsci/subversion-plugin 5 https://github.com/jenkinsci/codedx-plugin 5 https://github.com/PowerJob/PowerJob 5 https://github.com/apache/karaf 5 https://github.com/jenkinsci/m2release-plugin 5 https://github.com/apache/activemq-artemis 5 https://github.com/grails/grails-core 5 https://github.com/jenkinsci/junit-plugin 5 https://github.com/alibaba/nacos 5 https://github.com/jenkinsci/gitlab-plugin 5 https://github.com/jenkinsci/github-plugin 5 https://github.com/JLLeitschuh/security-research 5 https://github.com/ktorio/ktor 5 https://github.com/jenkinsci/active-directory-plugin 5 https://github.com/restlet/restlet-framework-java 5 https://github.com/alkacon/opencms-core 5 https://github.com/jetty/jetty.project 5 https://bitbucket.org/connect2id/nimbus-jose-jwt 5 https://github.com/jettison-json/jettison 5 https://github.com/jenkinsci/email-ext-plugin 5 https://github.com/jensdietrich/xshady-release 5 https://github.com/apache/shenyu 5 https://github.com/jenkinsci/workflow-cps-global-lib-plugin 5 https://github.com/jenkinsci/publish-over-ssh-plugin 5 https://github.com/shopizer-ecommerce/shopizer 4 https://github.com/skylot/jadx 4 https://github.com/jenkinsci/ansible-plugin 4 https://github.com/apache/solr 4 https://github.com/jenkinsci/active-choices-plugin 4 https://github.com/resteasy/Resteasy 4 https://github.com/reportportal/reportportal 4 https://github.com/jenkinsci/matrix-project-plugin 4 https://github.com/jenkinsci/nexus-platform-plugin 4 https://github.com/jenkinsci/p4-plugin 4 https://github.com/jenkinsci/libvirt-slave-plugin 4 https://github.com/jenkinsci/rundeck-plugin 4 https://github.com/jenkinsci/job-config-history-plugin 4 https://github.com/jenkinsci/htmlpublisher-plugin 4 https://github.com/jenkinsci/warnings-ng-plugin 4 https://github.com/jenkinsci/workflow-cps-plugin 4 https://github.com/jenkinsci/xldeploy-plugin 4 https://github.com/jfinal/jfinal 4 https://github.com/jenkinsci/hpe-application-automation-tools-plugin 4 https://github.com/joniles/mpxj 4 https://github.com/jenkinsci/gitlab-oauth-plugin 4 https://github.com/jenkinsci/fortify-plugin 4 https://github.com/HtmlUnit/htmlunit 4 https://github.com/micronaut-projects/micronaut-core 4 https://github.com/bcgit/bc-csharp 4 https://github.com/aws/aws-iot-device-sdk-java-v2 4 https://github.com/nightcloudos/new_cms 4 https://github.com/apiman/apiman 4 https://github.com/openhab/openhab-webui 4 https://github.com/jenkinsci/credentials-binding-plugin 4 https://github.com/itext/itext7 4 https://github.com/apache/streampipes 4 https://github.com/pippo-java/pippo 4 https://github.com/apache/httpcomponents-client 4 https://github.com/apache/druid 4 https://github.com/xerial/snappy-java 4 https://github.com/stanfordnlp/corenlp 4 https://github.com/yamcs/yamcs 4 https://github.com/eclipse-ee4j/glassfish 3 https://github.com/eclipse-vertx/vert.x 3 https://github.com/grpc/grpc 3 https://github.com/apolloconfig/apollo 3 https://github.com/peteroupc/CBOR-Java 3 https://github.com/pf4j/pf4j 3 https://github.com/matrix-org/matrix-android-sdk2 3 https://github.com/jenkinsci/hashicorp-vault-plugin 3 https://github.com/jenkinsci/crx-content-package-deployer-plugin 3 https://github.com/apache/storm 3 https://github.com/jeremylong/DependencyCheck 3 https://github.com/graphql-java/graphql-java 3 https://github.com/jenkinsci/git-client-plugin 3 https://github.com/dnsjava/dnsjava 3 https://github.com/jenkinsci/jira-plugin 3 https://github.com/AsyncHttpClient/async-http-client 3 https://github.com/wildfly/wildfly-core 3 https://github.com/jhy/jsoup 3 https://github.com/xwiki/xwiki-rendering 3 https://svn.apache.org/viewvc/lucene/dev 3 https://github.com/jenkinsci/bitbucket-oauth-plugin 3 https://github.com/intranda/goobi-viewer-core 3 https://github.com/eclipse-ee4j/mojarra 3 https://github.com/opengoofy/hippo4j 3 https://github.com/mitreid-connect/OpenID-Connect-Java-Spring-Server 3 https://github.com/OpenIdentityPlatform/OpenAM 3 https://github.com/jenkinsci/git-parameter-plugin 3 https://github.com/open-metadata/OpenMetadata 3 https://github.com/jenkinsci/code-coverage-api-plugin 3 https://github.com/wso2/carbon-registry 3 https://github.com/jenkinsci/cvs-plugin 3 https://github.com/eclipse/lemminx 3 https://github.com/Jarvis-616/cms 3 https://github.com/apache/dubbo 3 https://github.com/ysuzhangbin/cms 3 https://github.com/jenkinsci/cloudbees-jenkins-advisor-plugin 3 https://github.com/jenkinsci/database-plugin 3 https://github.com/wildfly/wildfly 3 https://github.com/jenkinsci/ci-with-toad-edge-plugin 3 https://github.com/apereo/cas 3 https://github.com/orientechnologies/orientdb 3 https://github.com/jenkinsci/gitlab-branch-source-plugin 3 https://github.com/jenkinsci/cas-plugin 3 https://github.com/OWASP/json-sanitizer 3 https://github.com/jenkinsci/scriptler-plugin 3 https://github.com/mbechler/marshalsec 3 https://github.com/apache/cxf-fediz 3 https://github.com/rhuss/jolokia 3