Moderate 10,397 High 8,206 Critical 3,367 Low 1,514

maven 6,686 packagist 5,255 pypi 4,793 npm 4,276 go 2,834 nuget 1,521 cargo 1,086 rubygems 892 hex 38 actions 37 swift 34 pub 10

org.jenkins-ci.main:jenkins-core 241 org.apache.tomcat:tomcat 134 com.liferay.portal:release.portal.bom 133 com.liferay.portal:release.dxp.bom 125 com.fasterxml.jackson.core:jackson-databind 69 org.apache.struts:struts2-core 55 org.keycloak:keycloak-core 50 org.xwiki.platform:xwiki-platform-oldcore 43 org.keycloak:keycloak-services 42 org.elasticsearch:elasticsearch 41 org.apache.tomcat.embed:tomcat-embed-core 39 com.thoughtworks.xstream:xstream 37 com.jfinal:jfinal 36 net.mingsoft:ms-mcms 36 io.undertow:undertow-core 35 org.jenkins-ci.plugins:script-security 33 org.apache.solr:solr-core 28 org.springframework.security:spring-security-core 27 org.opencms:opencms-core 27 org.eclipse.jetty:jetty-server 25 org.keycloak:keycloak-parent 24 org.apache.openmeetings:openmeetings-parent 22 org.bouncycastle:bcprov-jdk14 21 org.apache.nifi:nifi 21 org.apache.tomcat:tomcat-catalina 21 org.xwiki.platform:xwiki-platform-web-templates 20 org.cloudfoundry.identity:cloudfoundry-identity-server 20 org.apache.jspwiki:jspwiki-main 18 org.springframework:spring-core 18 com.vaadin:vaadin-bom 18 org.apache.geode:geode-core 17 org.apache.inlong:manager-pojo 17 org.apache.ranger:ranger 16 org.apache.activemq:activemq-client 16 org.apache.dubbo:dubbo 16 org.apache.tomcat:tomcat-coyote 15 org.apache.struts.xwork:xwork-core 15 org.bouncycastle:bcprov-jdk15 15 org.xwiki.platform:xwiki-platform-web 14 org.apache.dolphinscheduler:dolphinscheduler 14 org.springframework:spring-webmvc 13 org.apache.cxf:cxf-core 13 org.apache.hadoop:hadoop-main 13 org.jenkins-ci.plugins.workflow:workflow-cps 12 org.apache.tika:tika-core 12 org.apache.hadoop:hadoop-common 12 ai.h2o:h2o-core 12 org.jeecgframework.boot:jeecg-boot-parent 12 com.vaadin:flow-server 12 com.liferay.portal:com.liferay.portal.impl 12 org.springframework:spring-web 12 org.graylog2:graylog2-server 12 org.igniterealtime.openfire:parent 11 h2o 11 org.apache.camel:camel-core 11 org.apache.jspwiki:jspwiki-war 11 org.jenkins-ci.plugins:email-ext 11 org.apache.commons:commons-compress 11 org.geoserver.web:gs-web-app 11 org.xwiki.platform:xwiki-platform-administration-ui 11 com.xuxueli:xxl-job 11 org.apache.james:james-server 11 org.jenkins-ci.plugins:git 11 org.apache.archiva:archiva 11 org.mortbay.jetty:jetty 11 org.craftercms:crafter-studio 10 org.apache.cxf:cxf 10 org.opensearch.plugin:opensearch-security 10 org.bouncycastle:bcprov-jdk15on 10 org.apache.kylin:kylin 10 com.sonyericsson.jenkins.plugins.bfa:build-failure-analyzer 10 org.jenkins-ci.plugins.workflow:workflow-cps-global-lib 10 org.opennms:opennms 9 io.jenkins:configuration-as-code 9 org.apache.linkis:linkis 9 org.apache.hive:hive 9 org.apache.tapestry:tapestry-core 9 cn.hutool:hutool-core 9 org.apache.xmlgraphics:batik 9 org.jenkins-ci.plugins:config-file-provider 9 org.jenkins-ci.plugins:active-directory 9 org.apache.hive:hive-exec 9 org.apache.cassandra:cassandra-all 9 org.jenkins-ci.plugins:electricflow 9 org.postgresql:postgresql 9 org.opencrx:opencrx-core-models 9 org.apache.inlong:manager-service 9 org.apache.shiro:shiro-core 9 mysql:mysql-connector-java 8 org.apache.streampark:streampark 8 org.jenkins-ci.plugins:subversion 8 org.yaml:snakeyaml 8 org.xwiki.platform:xwiki-platform-rest-server 8 org.apache.hive:hive-service 8 org.jenkins-ci.plugins:ec2 8 com.ruoyi:ruoyi 8 org.apache.ozone:ozone-main 8 io.jenkins.blueocean:blueocean 8 org.apache.pdfbox:pdfbox 8 org.bouncycastle:bcprov-jdk15to18 8 org.jeecgframework.boot:jeecg-boot-common 8 io.netty:netty 8 com.hazelcast:hazelcast 8 org.apache.zeppelin:zeppelin 8 org.apache.ambari:ambari 8 org.jenkins-ci.plugins:oic-auth 8 org.apache.santuario:xmlsec 8 org.apache.karaf:apache-karaf 7 org.opencastproject:opencast-kernel 7 io.jenkins.plugins:miniorange-saml-sp 7 org.jeecgframework.boot:jeecg-boot-base 7 io.jenkins.plugins:warnings-ng 7 io.netty:netty-codec-http 7 net.opentsdb:opentsdb 7 org.apache.activemq:activemq-parent 7 org.bouncycastle:bc-fips 7 org.jboss.resteasy:resteasy-client 7 org.jruby:jruby-stdlib 7 org.jenkins-ci.plugins:artifactory 7 io.netty:netty-handler 7 org.apache.atlas:atlas-common 7 org.apache.poi:poi 7 io.jenkins.plugins:cavisson-ns-nd-integration 7 org.silverpeas.core:silverpeas-core-web 7 org.apache.spark:spark-core_2.11 7 org.owasp.esapi:esapi 7 org.owasp.antisamy:antisamy 7 org.jenkins-ci.plugins:rundeck 7 io.dataease:dataease-plugin-common 7 org.apache.derby:derby 7 org.jboss.netty:netty 7 org.apache.wicket:wicket-core 7 org.jenkins-ci.plugins:mercurial 7 org.apache.druid:druid 7 rubygems-update 7 io.atomix:atomix 7 org.jenkins-ci.plugins:openshift-deployer 7 org.jenkins-ci.plugins:jobConfigHistory 7 org.apache.inlong:manager-web 7 org.jenkins-ci.plugins:azure-vm-agents 6 hudson.plugins:project-inheritance 6 org.jenkins-ci.plugins:ghprb 6 com.jflyfox:jflyfox_jfinal 6 org.jenkins-ci.plugins:credentials-binding 6 org.jenkins-ci.plugins:repository-connector 6 org.xwiki.commons:xwiki-commons-xml 6 org.bouncycastle:bcprov-jdk18on 6 org.apache.httpcomponents:httpclient 6 com.sonyericsson.hudson.plugins.gerrit:gerrit-trigger 6 org.apache.struts:struts2-rest-plugin 6 commons-fileupload:commons-fileupload 6 de.tum.in.ase:artemis-java-test-sandbox 6 com.liferay.portal:com.liferay.portal.kernel 6 org.apache.logging.log4j:log4j-core 6 tech.powerjob:powerjob 6 org.apache.pulsar:pulsar-broker 6 jQuery.UI.Combined 6 org.webjars.npm:jquery-ui 6 org.apache.kafka:kafka 6 org.jenkins-ci.plugins:gitlab-oauth 6 org.jenkins-ci.plugins:gitlab-plugin 6 com.xuxueli:xxl-job-core 6 org.infinispan:infinispan-core 6 jquery-ui 6 org.jenkins-ci.plugins:ec2-deployment-dashboard 6 org.apache.spark:spark-core_2.10 6 org.apache.syncope:syncope-core 6 org.apache.zookeeper:zookeeper 6 org.jenkins-ci.plugins:fortify-on-demand-uploader 6 org.apache.zeppelin:zeppelin-server 6 org.apache.mesos:mesos 6 org.apache.ignite:ignite-core 6 org.apache.tika:tika 6 org.csanchez.jenkins.plugins:kubernetes 6 org.apache.shenyu:shenyu-common 6 org.wildfly:wildfly-parent 6 org.apache.storm:storm-core 6 org.silverpeas.core:silverpeas-core 6 org.keycloak:keycloak-quarkus-server 6 ch.qos.logback:logback-core 6 cn.hutool:hutool-json 6 com.xebialabs.deployit.ci:deployit-plugin 6 org.jenkins-ci.plugins:htmlpublisher 6 com.nimbusds:nimbus-jose-jwt 6 org.igniterealtime.openfire:xmppserver 6 org.jenkins-ci.plugins:pipeline-maven 6 org.xwiki.platform:xwiki-platform-distribution-war 5 com.coravy.hudson.plugins.github:github 5 org.fitnesse:fitnesse 5 org.xwiki.platform:xwiki-platform-flamingo-skin-resources 5 org.wildfly.security:wildfly-elytron 5 io.jenkins.plugins:neuvector-vulnerability-scanner 5 org.jenkins-ci.plugins:extended-choice-parameter 5 org.jenkins-ci.plugins:credentials 5 org.jenkins-ci.plugins:openid 5 org.jenkins-ci.plugins:fortify 5 org.apache.inlong:manager-dao 5 org.springframework:spring-webflux 5 com.vaadin:vaadin-server 5 org.jenkins-ci.plugins:azure-ad 5