Moderate 10,084 High 8,048 Critical 3,306 Low 1,447

maven 2,222 pypi 1,788 npm 1,623 packagist 1,446 go 989 nuget 938 cargo 388 rubygems 303 swift 18 actions 17 hex 10 pub 5

org.jenkins-ci.main:jenkins-core 56 com.fasterxml.jackson.core:jackson-databind 43 org.apache.tomcat:tomcat 33 org.apache.struts:struts2-core 24 com.thoughtworks.xstream:xstream 22 com.jfinal:jfinal 21 com.liferay.portal:release.portal.bom 21 org.apache.tomcat.embed:tomcat-embed-core 20 org.jenkins-ci.plugins:script-security 20 com.liferay.portal:release.dxp.bom 17 io.undertow:undertow-core 16 org.keycloak:keycloak-core 14 net.mingsoft:ms-mcms 14 org.apache.solr:solr-core 13 org.keycloak:keycloak-services 13 org.xwiki.platform:xwiki-platform-oldcore 13 org.apache.openmeetings:openmeetings-parent 12 org.keycloak:keycloak-parent 11 org.springframework.security:spring-security-core 10 org.apache.geode:geode-core 9 org.bouncycastle:bcprov-jdk14 9 org.apache.nifi:nifi 9 org.apache.hadoop:hadoop-main 9 org.apache.struts.xwork:xwork-core 9 org.cloudfoundry.identity:cloudfoundry-identity-server 9 h2o 8 org.eclipse.jetty:jetty-server 8 org.bouncycastle:bcprov-jdk15 8 ai.h2o:h2o-core 8 org.craftercms:crafter-studio 8 org.jenkins-ci.plugins.workflow:workflow-cps 8 org.apache.tomcat:tomcat-catalina 8 org.springframework:spring-core 7 org.jenkins-ci.plugins.workflow:workflow-cps-global-lib 7 org.apache.inlong:manager-pojo 7 org.elasticsearch:elasticsearch 7 org.apache.tomcat:tomcat-coyote 7 cn.hutool:hutool-core 7 com.xuxueli:xxl-job 7 org.springframework:spring-webmvc 6 org.apache.tika:tika-core 6 org.apache.dolphinscheduler:dolphinscheduler 6 org.apache.camel:camel-core 6 de.tum.in.ase:artemis-java-test-sandbox 6 org.apache.mesos:mesos 5 com.google.protobuf:protobuf-java 5 org.apache.commons:commons-compress 5 org.apache.kafka:kafka 5 org.apache.hive:hive-exec 5 org.xwiki.platform:xwiki-platform-web 5 org.apache.ranger:ranger 5 org.apache.wicket:wicket-core 5 org.apache.xmlgraphics:batik 5 org.postgresql:postgresql 5 com.vaadin:vaadin-bom 5 pyspark 5 org.apache.cxf:cxf 5 commons-fileupload:commons-fileupload 5 org.apache.cxf:cxf-core 4 info.magnolia:magnolia-core 4 org.apache.struts:struts2-rest-plugin 4 ca.uhn.hapi.fhir:org.hl7.fhir.r5 4 org.apache.inlong:manager-service 4 ca.uhn.hapi.fhir:org.hl7.fhir.utilities 4 org.springframework:spring-web 4 com.caucho:resin 4 com.hazelcast:hazelcast 4 org.jenkins-ci.plugins:pipeline-maven 4 ca.uhn.hapi.fhir:org.hl7.fhir.r4b 4 org.apache.hive:hive 4 org.apache.kylin:kylin 4 org.apache.cxf:apache-cxf 4 org.apache.hadoop:hadoop-common 4 io.netty:netty-handler 4 io.atomix:atomix 4 org.graylog2:graylog2-server 4 org.apache.linkis:linkis 4 org.apache.tapestry:tapestry-core 4 org.codehaus.jettison:jettison 4 org.apache.james:james-server 4 org.jboss.netty:netty 4 org.xwiki.platform:xwiki-platform-web-templates 4 org.apache.hive:hive-service 4 org.dspace:dspace-jspui 4 org.apache.inlong:manager-web 3 org.apache.activemq:activemq-client 3 org.apache.syncope:syncope-core 3 dnsjava:dnsjava 3 rubygems-update 3 com.google.protobuf:protobuf-javalite 3 software.amazon.awssdk.iotdevicesdk:aws-iot-device-sdk 3 org.infinispan:infinispan-core 3 awsiotsdk 3 org.apache.linkis:linkis-datasource 3 org.jenkins-ci.plugins:gitlab-plugin 3 ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may 3 org.openrefine:database 3 ca.uhn.hapi.fhir:org.hl7.fhir.r4 3 org.apache.zeppelin:zeppelin 3 org.geoserver:gs-wfs 3 org.igniterealtime.openfire:xmppserver 3 org.springframework:spring-webflux 3 org.wildfly.security:wildfly-elytron 3 commons-beanutils:commons-beanutils 3 org.jenkins-ci.plugins:sinatra-chef-builder 3 com.epam.reportportal:service-api 3 org.jenkins-ci.plugins:assembla-auth 3 org.jenkins-ci.plugins:websphere-deployer 3 mysql:mysql-connector-java 3 org.wildfly:wildfly-parent 3 org.pf4j:pf4j 3 com.compuware.jenkins:compuware-topaz-for-total-test 3 org.apache.cassandra:cassandra-all 3 org.jruby:jruby-stdlib 3 org.jenkins-ci.plugins:recipe 3 org.open-metadata:openmetadata-service 3 com.graphql-java:graphql-java 3 com.reposilite:reposilite-backend 3 org.restlet.jse:org.restlet 3 org.jboss.resteasy:resteasy-bom 3 org.jeecgframework.boot:jeecg-boot-base 3 org.geoserver:gs-main 3 org.jenkins-ci.plugins:junit 3 org.geoserver.web:gs-web-app 3 org.apache.struts:struts-core 3 org.jeecgframework.boot:jeecg-boot-parent 3 org.jenkins-ci.plugins:azure-ad 3 org.jenkins-ci.plugins:pipeline-input-step 3 org.apache.archiva:archiva 3 org.apache.thrift:libthrift 3 org.jenkins-ci.plugins:matlab 3 io.dataease:dataease-plugin-common 3 org.apache.storm:storm-core 3 net.minidev:json-smart 3 ca.uhn.hapi.fhir:org.hl7.fhir.dstu3 3 aws-iot-device-sdk-v2 3 com.liferay.portal:com.liferay.portal.impl 3 com.typesafe.play:play 3 com.sonyericsson.jenkins.plugins.bfa:build-failure-analyzer 3 org.yaml:snakeyaml 3 org.apache.zookeeper:zookeeper 3 org.xwiki.platform:xwiki-platform-rest-server 3 org.openrefine:openrefine 3 org.apache.shenyu:shenyu-common 3 org.jenkins-ci.plugins:oic-auth 3 io.netty:netty 3 com.nimbusds:nimbus-jose-jwt 3 org.jenkins-ci.plugins:autocomplete-parameter 3 com.upokecenter:cbor 3 org.jvnet.hudson.plugins:warnings 3 io.grpc:grpc-protobuf 2 org.apache.portals.jetspeed-2:jetspeed 2 org.jenkins-ci.plugins:liquibase-runner 2 org.jvnet.hudson.plugins:android-lint 2 com.xuxueli:xxl-job-core 2 org.apache.commons:commons-email 2 org.xerial.snappy:snappy-java 2 io.swagger:swagger-codegen 2 net.snowflake:snowflake-jdbc 2 org.apache.jena:jena 2 org.jvnet.hudson.plugins:selection-tasks-plugin 2 org.apache.sanselan:sanselan 2 io.jenkins.plugins:miniorange-saml-sp 2 org.hjson:hjson 2 org.apache.inlong:manager-common 2 io.jenkins.plugins:cavisson-ns-nd-integration 2 com.synopsys.jenkinsci:ownership 2 com.liferay.portal:com.liferay.portal.kernel 2 org.apache.dolphinscheduler:dolphinscheduler-master 2 org.jenkins-ci.plugins:covcomplplot 2 org.xwiki.commons:xwiki-commons-core 2 xerces:xercesImpl 2 org.springframework.data:spring-data-commons 2 org.jvnet.hudson.plugins:storable-configs-plugin 2 org.keycloak:keycloak-model-infinispan 2 axis:axis 2 org.apache.cxf.fediz:fediz-spring2 2 org.glassfish:mojarra-parent 2 org.opensearch.plugin:opensearch-security 2 org.apache.activemq:apache-activemq 2 com.typesafe.play:play-java 2 io.ratpack:ratpack-core 2 org.apache.spark:spark-core 2 org.opennms:opennms 2 org.apache.inlong:inlong 2 org.jenkins-ci.plugins:openid 2 org.jitsi:dnssecjava 2 org.jenkins-ci.plugins.workflow:workflow-support 2 org.jenkins-ci.plugins:libvirt-slave 2 com.elasticbox.jenkins-ci.plugins:kubernetes-ci 2 org.jenkins-ci.plugins:pipeline-githubnotify-step 2 org.apache.nifi:nifi-hikari-dbcp-service 2 io.jenkins.plugins:agent-server-parameter 2 org.dspace:dspace-api 2 ca.uhn.hapi.fhir:org.hl7.fhir.convertors 2 org.jenkins-ci.plugins:rundeck 2 com.linecorp.armeria:armeria 2 com.bstek.ureport:ureport2-core 2 org.apache.kylin:kylin-core-common 2 org.graylog:graylog-parent 2

https://github.com/xwiki/xwiki-platform 62 https://github.com/FasterXML/jackson-databind 44 https://github.com/jenkinsci/jenkins 43 https://github.com/apache/tomcat 38 https://github.com/keycloak/keycloak 30 https://github.com/x-stream/xstream 22 https://github.com/apache/struts 22 https://github.com/spring-projects/spring-framework 18 https://github.com/apache/inlong 15 https://github.com/jenkinsci/script-security-plugin 14 https://github.com/undertow-io/undertow 12 https://github.com/apache/nifi 11 https://github.com/geoserver/geoserver 9 https://github.com/cloudfoundry/uaa 9 https://github.com/apache/camel 9 https://github.com/cui2shark/cms 9 https://github.com/apache/cxf 9 https://github.com/bcgit/bc-java 8 https://github.com/netty/netty 8 https://github.com/liferay/liferay-portal 8 https://github.com/OpenRefine/OpenRefine 8 https://github.com/spring-projects/spring-security 8 https://github.com/h2oai/h2o-3 8 https://github.com/xuxueli/xxl-job 7 https://github.com/apache/activemq 7 https://github.com/DSpace/DSpace 7 https://github.com/eclipse/jetty.project 7 https://github.com/ls1intum/Ares 6 https://github.com/opencast/opencast 6 https://github.com/Graylog2/graylog2-server 6 https://github.com/quarkusio/quarkus 6 https://github.com/CVEProject/cvelist 6 https://github.com/OpenNMS/opennms 6 https://github.com/dromara/hutool 6 https://github.com/apache/xmlgraphics-batik 5 https://github.com/apache/kylin 5 https://github.com/protocolbuffers/protobuf 5 https://github.com/apache/hadoop 5 https://github.com/apache/dolphinscheduler 5 https://github.com/DrunkenShells/Disclosures 5 https://github.com/apache/geode 4 https://github.com/playframework/playframework 4 https://github.com/hazelcast/hazelcast 4 https://github.com/pgjdbc/pgjdbc 4 https://github.com/restlet/restlet-framework-java 4 https://github.com/jenkinsci/workflow-cps-global-lib-plugin 4 https://github.com/dataease/dataease 4 https://github.com/jettison-json/jettison 4 https://github.com/igniterealtime/Openfire 4 https://github.com/JLLeitschuh/security-research 4 https://github.com/infinispan/infinispan 4 https://github.com/nightcloudos/new_cms 4 https://github.com/apache/lucene-solr 4 https://github.com/jeecgboot/jeecg-boot 4 https://github.com/rundeck/rundeck 3 https://github.com/rubygems/rubygems 3 https://github.com/apache/openmeetings 3 https://github.com/RhinoSecurityLabs/CVEs 3 https://github.com/resteasy/Resteasy 3 https://github.com/reportportal/reportportal 3 https://github.com/jenkinsci/gitlab-plugin 3 https://github.com/h2database/h2database 3 https://github.com/graphql-java/graphql-java 3 https://github.com/grails/grails-core 3 https://github.com/apache/shenyu 3 https://github.com/pf4j/pf4j 3 https://github.com/jenkinsci/junit-plugin 3 https://github.com/peteroupc/CBOR-Java 3 https://github.com/dzikoysk/reposilite 3 https://github.com/apache/syncope 3 https://github.com/dnsjava/dnsjava 3 https://github.com/open-metadata/OpenMetadata 3 https://github.com/jetty/jetty.project 3 https://github.com/li-yu320/cms 3 https://github.com/ming-soft/MCMS 3 https://github.com/aws/aws-iot-device-sdk-java-v2 3 https://github.com/apache/james-project 3 https://github.com/alibaba/nacos 3 https://github.com/ysuzhangbin/cms 3 https://github.com/vaadin/framework 3 https://github.com/vaadin/platform 3 https://bitbucket.org/connect2id/nimbus-jose-jwt 3 https://github.com/apache/commons-fileupload 3 https://github.com/apache/activemq-artemis 3 https://github.com/jenkinsci/templating-engine-plugin 2 https://github.com/dropwizard/dropwizard 2 https://github.com/eclipse-californium/californium 2 https://github.com/eclipse-ee4j/mojarra 2 https://github.com/eclipse/milo 2 https://github.com/jenkinsci/plot-plugin 2 https://github.com/ESAPI/esapi-java-legacy 2 https://github.com/jenkinsci/pipeline-model-definition-plugin 2 https://github.com/jenkinsci/pipeline-maven-plugin 2 https://github.com/jenkinsci/pipeline-input-step-plugin 2 https://github.com/xnio/xnio 2 https://github.com/jenkinsci/workflow-cps-plugin 2 https://github.com/xerial/snappy-java 2 https://github.com/kawasima/struts1-forever 2 https://github.com/koral--/android-gif-drawable 2 https://github.com/line/armeria 2 https://github.com/vert-x3/vertx-web 2 https://github.com/matrix-org/matrix-android-sdk2 2 https://github.com/aws/amazon-redshift-jdbc-driver 2 https://github.com/apiman/apiman 2 https://github.com/OpenAPITools/openapi-generator 2 https://github.com/jenkinsci/build-failure-analyzer-plugin 2 https://github.com/jeecgboot/JeecgBoot 2 https://github.com/jenkinsci/cavisson-ns-nd-integration-plugin 2 https://github.com/jenkinsci/code-coverage-api-plugin 2 https://github.com/jenkinsci/compuware-topaz-for-total-test-plugin 2 https://github.com/jenkinsci/config-file-provider-plugin 2 https://github.com/http4s/http4s 2 https://github.com/http4s/blaze 2 https://github.com/HtmlUnit/htmlunit 2 https://github.com/HL7/fhir-ig-publisher 2 https://github.com/hjson/hjson-java 2 https://github.com/jenkinsci/gerrit-trigger-plugin 2 https://github.com/hapifhir/org.hl7.fhir.core 2 https://github.com/jenkinsci/github-plugin 2 https://github.com/grpc/grpc 2 https://github.com/jenkinsci/groovy-plugin 2 https://git-wip-us.apache.org/repos/asf/cxf-fediz 2 https://github.com/jenkinsci/htmlpublisher-plugin 2 https://github.com/googleapis/google-oauth-java-client 2 https://github.com/yahoo/elide 2 https://github.com/geonetwork/core-geonetwork 2 https://github.com/jenkinsci/libvirt-slave-plugin 2 https://github.com/jenkinsci/m2release-plugin 2 https://github.com/jenkinsci/matrix-project-plugin 2 https://github.com/jenkinsci/nested-view-plugin 2 https://github.com/jenkinsci/nexus-platform-plugin 2 https://github.com/ratpack/ratpack 2 https://github.com/apache/tapestry-5 2 https://github.com/snowflakedb/snowflake-jdbc 2 https://github.com/apache/ozone 2 https://github.com/apache/cxf-fediz 2 https://github.com/reactor/reactor-netty 2 https://github.com/qos-ch/logback 2 https://github.com/apache/myfaces 2 https://github.com/swagger-api/swagger-parser 2 https://github.com/apache/pulsar 2 https://github.com/apache/jackrabbit 2 https://github.com/apache/solr 2 https://github.com/opensearch-project/security 2 https://github.com/apache/commons-beanutils 2 https://github.com/apache/wicket 2 https://github.com/spring-projects/spring-security-samples 2 https://github.com/apache/ranger 2 https://github.com/spray/spray-json 2 https://github.com/prestodb/presto 2 https://github.com/apache/kafka 2 https://github.com/apache/httpcomponents-client 2 https://github.com/apache/hive 2 https://github.com/apache/cassandra 2 https://github.com/resteasy/resteasy 2 https://github.com/apache/hbase 2 https://gitbox.apache.org/repos/asf/xalan-java 1 https://github.com/h00klod0er/ureport2-vuln 1 https://github.com/apache/orc 1 https://gitbox.apache.org/repos/asf/karaf 1 https://github.com/google/gson 1 https://github.com/grobmeier/jjson 1 https://git.eclipse.org/c/jgit/jgit 1 https://gitbox.apache.org/repos/asf/ant-ivy 1 https://github.com/fabric8io/kubernetes-client 1 https://github.com/apache/qpid-proton-j 1 https://github.com/FasterXML/jackson-core 1 https://github.com/4thline/cling 1 https://github.com/FasterXML/jackson-dataformats-binary 1 https://github.com/FasterXML/jackson-dataformats-text 1 https://github.com/apache/qpid-broker-j 1 https://github.com/FasterXML/jackson-dataformat-xml 1 https://github.com/apache/flume 1 https://github.com/FHIR/Ucum-java 1 https://github.com/FireFart/HashCollision-DOS-POC 1 https://github.com/fracpete/vfsjfilechooser2 1 https://github.com/frohoff/ysoserial 1 https://github.com/FusionAuth/fusionauth-issues 1 https://github.com/gematik/app-referencevalidator 1 https://github.com/apache/geronimo 1 https://github.com/apache/pinot 1 https://github.com/3breadt/dd-plist 1 https://github.com/getsentry/sentry-java 1 https://github.com/GeyserMC/Geyser 1 https://github.com/JAckLosingHeart/CVE-2024-51132-POC 1 https://github.com/JAckLosingHeart/CWE-378 1 https://github.com/JanssenProject/jans 1 https://github.com/javadelight/delight-nashorn-sandbox 1 https://github.com/apache/mina-sshd 1 https://github.com/javaee/jersey-1.x 1 https://github.com/JavaEZLib/JavaEZ 1 https://github.com/jdereg/json-io 1 https://github.com/jdordonezn/CVE-2020-72381 1 https://github.com/j-easy/easy-rules 1 https://bitbucket.org/asomov/snakeyaml 1 https://github.com/apache/logging-log4j2 1 https://github.com/apache/linkis 1 https://github.com/jenkinsci/accurev-plugin 1 https://github.com/jenkinsci/active-directory-plugin 1