Moderate 10,392 High 8,203 Critical 3,366 Low 1,511

maven 6,680 packagist 5,251 pypi 4,826 npm 4,269 go 2,850 nuget 1,603 cargo 1,062 rubygems 893 hex 38 actions 37 swift 33 pub 9

org.jenkins-ci.main:jenkins-core 241 com.liferay.portal:release.portal.bom 142 org.apache.tomcat:tomcat 135 com.liferay.portal:release.dxp.bom 115 com.fasterxml.jackson.core:jackson-databind 69 org.apache.struts:struts2-core 56 org.keycloak:keycloak-core 50 org.xwiki.platform:xwiki-platform-oldcore 43 org.keycloak:keycloak-services 42 org.elasticsearch:elasticsearch 41 org.apache.tomcat.embed:tomcat-embed-core 40 com.thoughtworks.xstream:xstream 37 com.jfinal:jfinal 36 net.mingsoft:ms-mcms 36 io.undertow:undertow-core 35 org.jenkins-ci.plugins:script-security 32 org.apache.solr:solr-core 27 org.opencms:opencms-core 27 org.springframework.security:spring-security-core 25 org.eclipse.jetty:jetty-server 25 org.keycloak:keycloak-parent 24 org.apache.openmeetings:openmeetings-parent 22 org.bouncycastle:bcprov-jdk15on 21 org.apache.nifi:nifi 21 org.cloudfoundry.identity:cloudfoundry-identity-server 20 org.xwiki.platform:xwiki-platform-web-templates 20 org.apache.tomcat:tomcat-catalina 19 org.apache.jspwiki:jspwiki-main 18 org.springframework:spring-core 18 com.vaadin:vaadin-bom 18 org.apache.geode:geode-core 17 org.apache.inlong:manager-pojo 17 org.apache.dubbo:dubbo 16 org.apache.ranger:ranger 16 org.apache.activemq:activemq-client 16 org.apache.tomcat:tomcat-coyote 16 org.xwiki.platform:xwiki-platform-web 14 org.apache.struts.xwork:xwork-core 14 org.apache.dolphinscheduler:dolphinscheduler 14 org.apache.cxf:cxf-core 13 org.jenkins-ci.plugins.workflow:workflow-cps 13 org.apache.hadoop:hadoop-main 13 org.springframework:spring-webmvc 13 org.springframework:spring-web 12 org.jeecgframework.boot:jeecg-boot-parent 12 org.apache.tika:tika-core 12 org.jenkins-ci.plugins:git 12 org.apache.cxf:cxf 12 org.graylog2:graylog2-server 12 org.apache.hadoop:hadoop-common 12 com.vaadin:flow-server 12 org.igniterealtime.openfire:parent 11 org.xwiki.platform:xwiki-platform-administration-ui 11 ai.h2o:h2o-core 11 org.apache.jspwiki:jspwiki-war 11 org.jenkins-ci.plugins:email-ext 11 org.mortbay.jetty:jetty 11 com.liferay.portal:com.liferay.portal.impl 11 org.apache.archiva:archiva 11 org.apache.james:james-server 11 org.apache.commons:commons-compress 11 com.xuxueli:xxl-job 11 org.apache.camel:camel-core 10 com.sonyericsson.jenkins.plugins.bfa:build-failure-analyzer 10 org.apache.inlong:manager-service 10 org.opensearch.plugin:opensearch-security 10 org.jboss.netty:netty 10 io.netty:netty 10 org.craftercms:crafter-studio 10 org.geoserver.web:gs-web-app 10 h2o 10 org.apache.kylin:kylin 10 org.apache.hive:hive-exec 10 mysql:mysql-connector-java 9 org.apache.xmlgraphics:batik 9 org.apache.hive:hive 9 org.opennms:opennms 9 cn.hutool:hutool-core 9 org.apache.shiro:shiro-core 9 io.jenkins:configuration-as-code 9 org.jenkins-ci.plugins:electricflow 9 org.postgresql:postgresql 9 org.opencrx:opencrx-core-models 9 org.jenkins-ci.plugins:active-directory 9 org.jenkins-ci.plugins.workflow:workflow-cps-global-lib 9 org.jenkins-ci.plugins:config-file-provider 9 org.apache.tapestry:tapestry-core 9 org.apache.linkis:linkis 9 org.apache.cassandra:cassandra-all 9 org.apache.santuario:xmlsec 8 org.apache.streampark:streampark 8 org.apache.pdfbox:pdfbox 8 org.jenkins-ci.plugins:ec2 8 org.silverpeas.core:silverpeas-core-web 8 org.apache.ambari:ambari 8 org.apache.zeppelin:zeppelin 8 org.apache.ozone:ozone-main 8 org.jenkins-ci.plugins:oic-auth 8 io.jenkins.blueocean:blueocean 8 com.hazelcast:hazelcast 8 org.jeecgframework.boot:jeecg-boot-common 8 org.jenkins-ci.plugins:subversion 8 org.apache.hive:hive-service 8 org.yaml:snakeyaml 8 com.ruoyi:ruoyi 8 org.xwiki.platform:xwiki-platform-rest-server 8 org.apache.druid:druid 7 org.apache.logging.log4j:log4j-core 7 io.atomix:atomix 7 io.jenkins.plugins:warnings-ng 7 org.apache.atlas:atlas-common 7 org.jenkins-ci.plugins:artifactory 7 org.apache.inlong:manager-web 7 org.apache.poi:poi 7 org.jenkins-ci.plugins:openshift-deployer 7 org.apache.wicket:wicket-core 7 io.netty:netty-handler 7 org.opencastproject:opencast-kernel 7 io.dataease:dataease-plugin-common 7 org.apache.cxf:apache-cxf 7 org.apache.activemq:activemq-parent 7 org.bouncycastle:bcprov-jdk14 7 org.jruby:jruby-stdlib 7 rubygems-update 7 org.jenkins-ci.plugins:rundeck 7 org.owasp.antisamy:antisamy 7 org.apache.karaf:apache-karaf 7 net.opentsdb:opentsdb 7 org.jenkins-ci.plugins:jobConfigHistory 7 org.apache.derby:derby 7 org.owasp.esapi:esapi 7 io.jenkins.plugins:cavisson-ns-nd-integration 7 org.jeecgframework.boot:jeecg-boot-base 7 io.jenkins.plugins:miniorange-saml-sp 7 org.jboss.resteasy:resteasy-client 7 org.jenkins-ci.plugins:mercurial 6 org.apache.axis:axis 6 de.tum.in.ase:artemis-java-test-sandbox 6 org.jenkins-ci.plugins:ghprb 6 org.keycloak:keycloak-quarkus-server 6 org.apache.storm:storm-core 6 org.apache.syncope:syncope-core 6 jQuery.UI.Combined 6 org.apache.zookeeper:zookeeper 6 org.apache.kafka:kafka 6 org.wildfly:wildfly-parent 6 com.liferay.portal:com.liferay.portal.kernel 6 org.infinispan:infinispan-core 6 org.jenkins-ci.plugins:gitlab-oauth 6 org.apache.zeppelin:zeppelin-server 6 com.nimbusds:nimbus-jose-jwt 6 tech.powerjob:powerjob 6 org.jenkins-ci.plugins:gitlab-plugin 6 org.jenkins-ci.plugins:credentials-binding 6 org.apache.solr:solr-parent 6 org.bouncycastle:bcprov-jdk15to18 6 com.sonyericsson.hudson.plugins.gerrit:gerrit-trigger 6 io.netty:netty-codec-http 6 org.silverpeas.core:silverpeas-core 6 org.xwiki.commons:xwiki-commons-xml 6 org.apache.httpcomponents:httpclient 6 org.igniterealtime.openfire:xmppserver 6 org.jenkins-ci.plugins:htmlpublisher 6 commons-fileupload:commons-fileupload 6 org.apache.pulsar:pulsar-broker 6 org.webjars.npm:jquery-ui 6 org.apache.struts:struts2-rest-plugin 6 org.jenkins-ci.plugins:pipeline-maven 6 org.geoserver:gs-wms 6 org.csanchez.jenkins.plugins:kubernetes 6 org.jenkins-ci.plugins:ec2-deployment-dashboard 6 org.apache.tika:tika 6 hudson.plugins:project-inheritance 6 org.jeecgframework.boot:jeecg-boot-base-core 6 org.bouncycastle:bc-fips 6 org.jenkins-ci.plugins:azure-vm-agents 6 ch.qos.logback:logback-core 6 org.apache.mesos:mesos 6 com.xuxueli:xxl-job-core 6 com.xebialabs.deployit.ci:deployit-plugin 6 org.jenkins-ci.plugins:repository-connector 6 org.apache.ignite:ignite-core 6 com.jflyfox:jflyfox_jfinal 6 cn.hutool:hutool-json 6 org.apache.shenyu:shenyu-common 6 org.jenkins-ci.plugins:fortify-on-demand-uploader 6 jquery-ui 6 com.vaadin:vaadin-server 6 org.jenkins-ci.plugins:wso2id-oauth 5 com.coravy.hudson.plugins.github:github 5 org.geoserver:gs-wfs 5 org.xwiki.platform:xwiki-platform-flamingo-skin-resources 5 org.jenkins-ci.plugins:google-login 5 net.snowflake:snowflake-jdbc 5 org.xwiki.platform:xwiki-platform-distribution-war 5 org.jenkins-ci.plugins:google-compute-engine 5 com.liferay:com.liferay.frontend.taglib.clay 5 org.opencastproject:opencast-common 5 org.springframework.security.oauth:spring-security-oauth2 5 io.vertx:vertx-core 5