Moderate 10,450 High 8,231 Critical 3,380 Low 1,524

maven 6,747 packagist 5,240 pypi 4,830 npm 4,303 go 2,867 nuget 1,541 cargo 1,083 rubygems 904 actions 39 hex 38 swift 33 pub 9

org.jenkins-ci.main:jenkins-core 242 com.liferay.portal:release.portal.bom 146 org.apache.tomcat:tomcat 130 com.liferay.portal:release.dxp.bom 117 com.fasterxml.jackson.core:jackson-databind 69 org.apache.struts:struts2-core 56 org.keycloak:keycloak-core 50 org.xwiki.platform:xwiki-platform-oldcore 43 org.keycloak:keycloak-services 42 org.elasticsearch:elasticsearch 41 org.apache.tomcat.embed:tomcat-embed-core 37 com.thoughtworks.xstream:xstream 37 com.jfinal:jfinal 36 net.mingsoft:ms-mcms 36 io.undertow:undertow-core 35 org.jenkins-ci.plugins:script-security 32 org.apache.solr:solr-core 27 org.opencms:opencms-core 27 org.springframework.security:spring-security-core 26 org.eclipse.jetty:jetty-server 25 org.keycloak:keycloak-parent 24 org.apache.tomcat:tomcat-catalina 23 org.apache.openmeetings:openmeetings-parent 22 org.bouncycastle:bcprov-jdk15on 21 org.apache.nifi:nifi 21 org.xwiki.platform:xwiki-platform-web-templates 20 org.cloudfoundry.identity:cloudfoundry-identity-server 20 org.apache.jspwiki:jspwiki-main 18 org.springframework:spring-core 18 com.vaadin:vaadin-bom 18 org.apache.geode:geode-core 17 org.apache.inlong:manager-pojo 17 org.apache.activemq:activemq-client 16 org.apache.dubbo:dubbo 16 org.apache.ranger:ranger 16 org.apache.tomcat:tomcat-coyote 16 org.springframework:spring-webmvc 14 org.apache.struts.xwork:xwork-core 14 org.xwiki.platform:xwiki-platform-web 14 org.apache.cxf:cxf-core 13 org.jenkins-ci.plugins.workflow:workflow-cps 13 ai.h2o:h2o-core 13 com.liferay.portal:com.liferay.portal.impl 13 org.apache.hadoop:hadoop-main 13 org.jeecgframework.boot:jeecg-boot-parent 12 org.jenkins-ci.plugins:git 12 org.springframework:spring-web 12 org.apache.tika:tika-core 12 org.apache.hadoop:hadoop-common 12 com.vaadin:flow-server 12 org.apache.dolphinscheduler:dolphinscheduler 12 org.graylog2:graylog2-server 12 h2o 12 org.mortbay.jetty:jetty 11 org.apache.camel:camel-core 11 org.apache.archiva:archiva 11 org.apache.jspwiki:jspwiki-war 11 org.apache.james:james-server 11 com.xuxueli:xxl-job 11 org.apache.commons:commons-compress 11 org.jenkins-ci.plugins:email-ext 11 org.xwiki.platform:xwiki-platform-administration-ui 11 org.igniterealtime.openfire:parent 11 org.apache.cxf:cxf 10 org.opensearch.plugin:opensearch-security 10 org.apache.kylin:kylin 10 com.sonyericsson.jenkins.plugins.bfa:build-failure-analyzer 10 org.geoserver.web:gs-web-app 10 org.craftercms:crafter-studio 10 org.jboss.netty:netty 10 io.netty:netty 10 org.apache.inlong:manager-service 10 io.jenkins:configuration-as-code 9 org.apache.tapestry:tapestry-core 9 org.apache.hive:hive 9 org.apache.cassandra:cassandra-all 9 org.postgresql:postgresql 9 org.jenkins-ci.plugins.workflow:workflow-cps-global-lib 9 org.jenkins-ci.plugins:electricflow 9 org.apache.shiro:shiro-core 9 mysql:mysql-connector-java 9 org.jenkins-ci.plugins:active-directory 9 cn.hutool:hutool-core 9 org.opencrx:opencrx-core-models 9 org.apache.linkis:linkis 9 org.jenkins-ci.plugins:config-file-provider 9 org.opennms:opennms 9 org.jeecgframework.boot:jeecg-boot-common 8 org.jenkins-ci.plugins:subversion 8 org.apache.streampark:streampark 8 org.apache.zeppelin:zeppelin 8 org.apache.ambari:ambari 8 org.apache.xmlgraphics:batik 8 org.jenkins-ci.plugins:ec2 8 org.xwiki.platform:xwiki-platform-rest-server 8 org.apache.hive:hive-exec 8 org.apache.ozone:ozone-main 8 org.apache.pdfbox:pdfbox 8 org.jenkins-ci.plugins:oic-auth 8 org.apache.santuario:xmlsec 8 org.silverpeas.core:silverpeas-core-web 8 io.jenkins.blueocean:blueocean 8 org.bouncycastle:bcprov-jdk14 8 com.ruoyi:ruoyi 8 org.owasp.antisamy:antisamy 7 org.apache.poi:poi 7 io.jenkins.plugins:warnings-ng 7 org.jruby:jruby-stdlib 7 org.apache.druid:druid 7 io.atomix:atomix 7 org.apache.atlas:atlas-common 7 org.jenkins-ci.plugins:jobConfigHistory 7 org.jenkins-ci.plugins:artifactory 7 io.netty:netty-handler 7 org.owasp.esapi:esapi 7 net.opentsdb:opentsdb 7 com.hazelcast:hazelcast 7 org.jenkins-ci.plugins:rundeck 7 org.yaml:snakeyaml 7 org.jboss.resteasy:resteasy-client 7 org.bouncycastle:bcprov-jdk15to18 7 org.jeecgframework.boot:jeecg-boot-base 7 org.apache.karaf:apache-karaf 7 io.jenkins.plugins:cavisson-ns-nd-integration 7 org.opencastproject:opencast-kernel 7 rubygems-update 7 org.apache.hive:hive-service 7 org.apache.activemq:activemq-parent 7 io.dataease:dataease-plugin-common 7 org.apache.wicket:wicket-core 7 org.apache.zookeeper:zookeeper 7 org.apache.derby:derby 7 io.jenkins.plugins:miniorange-saml-sp 7 org.jenkins-ci.plugins:openshift-deployer 7 org.apache.ignite:ignite-core 6 org.apache.solr:solr-parent 6 org.infinispan:infinispan-core 6 ch.qos.logback:logback-core 6 org.apache.syncope:syncope-core 6 org.bouncycastle:bc-fips 6 org.apache.zeppelin:zeppelin-server 6 org.jenkins-ci.plugins:repository-connector 6 com.xebialabs.deployit.ci:deployit-plugin 6 org.csanchez.jenkins.plugins:kubernetes 6 org.jenkins-ci.plugins:fortify-on-demand-uploader 6 com.sonyericsson.hudson.plugins.gerrit:gerrit-trigger 6 org.webjars.npm:jquery-ui 6 org.jeecgframework.boot:jeecg-boot-base-core 6 com.xuxueli:xxl-job-core 6 org.apache.httpcomponents:httpclient 6 commons-fileupload:commons-fileupload 6 org.jenkins-ci.plugins:ghprb 6 de.tum.in.ase:artemis-java-test-sandbox 6 jquery-ui 6 io.netty:netty-codec-http 6 org.apache.shenyu:shenyu-common 6 cn.hutool:hutool-json 6 org.apache.storm:storm-core 6 tech.powerjob:powerjob 6 hudson.plugins:project-inheritance 6 org.jenkins-ci.plugins:gitlab-oauth 6 org.jenkins-ci.plugins:gitlab-plugin 6 org.apache.kafka:kafka 6 org.jenkins-ci.plugins:azure-vm-agents 6 org.silverpeas.core:silverpeas-core 6 com.vaadin:vaadin-server 6 jQuery.UI.Combined 6 org.jenkins-ci.plugins:htmlpublisher 6 log4j:log4j 6 org.igniterealtime.openfire:xmppserver 6 org.apache.tika:tika 6 org.wildfly:wildfly-parent 6 com.nimbusds:nimbus-jose-jwt 6 org.apache.struts:struts2-rest-plugin 6 org.jenkins-ci.plugins:pipeline-maven 6 org.apache.axis:axis 6 org.jenkins-ci.plugins:mercurial 6 org.bouncycastle:bcprov-jdk18on 6 org.apache.pulsar:pulsar-broker 6 org.jenkins-ci.plugins:ec2-deployment-dashboard 6 org.jenkins-ci.plugins:credentials-binding 6 org.keycloak:keycloak-quarkus-server 6 org.geoserver:gs-wms 6 org.apache.inlong:manager-web 6 org.xwiki.commons:xwiki-commons-xml 6 org.apache.mesos:mesos 6 com.liferay.portal:com.liferay.portal.kernel 6 org.apache.spark:spark-core_2.11 6 com.jflyfox:jflyfox_jfinal 6 org.jenkins-ci.plugins:scriptler 5 org.jenkins-ci.plugins:delphix 5 org.jenkins-ci.plugins:azure-ad 5 io.projectreactor.netty:reactor-netty-http 5 org.apache.tomcat:tomcat-util 5 org.jeecgframework.boot:jeecg-module-system 5 org.jenkins-ci.tools:git-parameter 5 info.magnolia:magnolia-core 5 org.zenframework.z8.dependencies.commons:log4j-1.2.17 5 org.apache.inlong:manager-dao 5 org.jenkins-ci.plugins:extended-choice-parameter 5

https://github.com/xwiki/xwiki-platform 221 https://github.com/jenkinsci/jenkins 178 https://github.com/liferay/liferay-portal 138 https://github.com/apache/tomcat 114 https://github.com/keycloak/keycloak 85 https://github.com/FasterXML/jackson-databind 70 https://github.com/spring-projects/spring-framework 51 https://github.com/apache/struts 47 https://github.com/x-stream/xstream 37 https://github.com/apache/activemq 34 https://github.com/apache/inlong 31 https://github.com/CVEProject/cvelist 28 https://github.com/geoserver/geoserver 26 https://github.com/netty/netty 26 https://github.com/apache/nifi 26 https://github.com/bcgit/bc-java 24 https://github.com/apache/cxf 24 https://github.com/eclipse/jetty.project 23 https://github.com/jenkinsci/script-security-plugin 22 https://github.com/undertow-io/undertow 21 https://github.com/OpenNMS/opennms 20 https://github.com/jeecgboot/jeecg-boot 20 https://github.com/opencast/opencast 19 https://github.com/alkacon/opencms-core 19 https://github.com/cloudfoundry/uaa 19 https://github.com/apache/camel 18 https://github.com/vaadin/platform 18 https://github.com/quarkusio/quarkus 16 https://github.com/xuxueli/xxl-job 15 https://github.com/spring-projects/spring-security 14 https://github.com/Graylog2/graylog2-server 14 https://github.com/apache/zeppelin 14 https://github.com/apache/kylin 14 https://github.com/dromara/hutool 13 https://github.com/ming-soft/MCMS 13 https://github.com/apache/dolphinscheduler 13 https://github.com/OpenRefine/OpenRefine 13 https://github.com/DSpace/DSpace 12 https://github.com/igniterealtime/Openfire 12 https://github.com/h2oai/h2o-3 12 https://github.com/vaadin/flow 11 https://github.com/opensearch-project/security 10 https://github.com/jenkinsci/git-plugin 10 https://github.com/apache/lucene-solr 9 https://github.com/dataease/dataease 9 https://github.com/cui2shark/cms 9 https://github.com/apache/xmlgraphics-batik 8 https://github.com/jenkinsci/config-file-provider-plugin 8 https://github.com/jetty/jetty.project 8 https://github.com/pgjdbc/pgjdbc 8 https://github.com/xwiki/xwiki-commons 8 https://github.com/nahsra/antisamy 8 https://github.com/vaadin/framework 8 https://github.com/hazelcast/hazelcast 8 https://github.com/infinispan/infinispan 7 https://github.com/jflyfox/jfinal_cms 7 https://github.com/apache/hadoop 7 https://github.com/jenkinsci/build-failure-analyzer-plugin 7 https://github.com/http4s/http4s 7 https://github.com/OpenTSDB/opentsdb 7 https://github.com/ratpack/ratpack 7 https://github.com/apache/pulsar 7 https://github.com/rundeck/rundeck 7 https://github.com/jenkinsci/blueocean-plugin 7 https://github.com/rubygems/rubygems 7 https://github.com/RhinoSecurityLabs/CVEs 7 https://github.com/apache/openmeetings 7 https://bitbucket.org/snakeyaml/snakeyaml 6 https://github.com/line/armeria 6 https://github.com/JLLeitschuh/security-research 6 https://github.com/ls1intum/Ares 6 https://github.com/apache/solr 6 https://github.com/playframework/playframework 6 https://github.com/jenkinsci/gerrit-trigger-plugin 6 https://github.com/cui2shark/security 6 https://github.com/jenkinsci/ec2-plugin 6 https://github.com/jenkinsci/fortify-on-demand-uploader-plugin 6 https://github.com/jenkinsci/configuration-as-code-plugin 6 https://github.com/jenkinsci/electricflow-plugin 6 https://github.com/vert-x3/vertx-web 6 https://github.com/jenkinsci/subversion-plugin 6 https://github.com/apache/syncope 6 https://github.com/apache/hive 6 https://github.com/apache/tika 6 https://github.com/DrunkenShells/Disclosures 6 https://github.com/ESAPI/esapi-java-legacy 6 https://github.com/OpenAPITools/openapi-generator 6 https://github.com/resteasy/resteasy 6 https://github.com/jensdietrich/xshady-release 5 https://github.com/jenkinsci/publish-over-ssh-plugin 5 https://github.com/PowerJob/PowerJob 5 https://github.com/apache/activemq-artemis 5 https://github.com/h2database/h2database 5 https://github.com/jenkinsci/junit-plugin 5 https://github.com/qos-ch/logback 5 https://github.com/neo4j-contrib/neo4j-apoc-procedures 5 https://github.com/jenkinsci/github-plugin 5 https://github.com/apache/shiro 5 https://github.com/apache/jackrabbit 5 https://github.com/jenkinsci/codedx-plugin 5 https://github.com/apache/httpcomponents-client 5 https://github.com/apache/karaf 5 https://github.com/protocolbuffers/protobuf 5 https://github.com/jquery/jquery-ui 5 https://github.com/xwiki/xwiki-rendering 5 https://github.com/jenkinsci/gitlab-plugin 5 https://bitbucket.org/connect2id/nimbus-jose-jwt 5 https://github.com/grails/grails-core 5 https://github.com/jenkinsci/active-directory-plugin 5 https://github.com/apache/geode 5 https://github.com/apache/shenyu 5 https://github.com/ktorio/ktor 5 https://github.com/jettison-json/jettison 5 https://github.com/alibaba/nacos 5 https://github.com/jenkinsci/support-core-plugin 5 https://github.com/apache/james-project 5 https://github.com/jenkinsci/workflow-cps-global-lib-plugin 5 https://github.com/jenkinsci/email-ext-plugin 5 https://github.com/apache/druid 5 https://github.com/restlet/restlet-framework-java 5 https://github.com/elastic/elasticsearch 5 https://github.com/snowflakedb/snowflake-jdbc 5 https://github.com/jenkinsci/m2release-plugin 5 https://github.com/jenkinsci/p4-plugin 4 https://github.com/jenkinsci/htmlpublisher-plugin 4 https://github.com/jenkinsci/libvirt-slave-plugin 4 https://github.com/jenkinsci/hpe-application-automation-tools-plugin 4 https://github.com/jenkinsci/job-config-history-plugin 4 https://github.com/jenkinsci/ansible-plugin 4 https://github.com/apache/iotdb 4 https://github.com/joniles/mpxj 4 https://github.com/jquery/jquery 4 https://github.com/reportportal/reportportal 4 https://github.com/pippo-java/pippo 4 https://github.com/Robothy/local-s3 4 https://github.com/jenkinsci/vmanager-plugin 4 https://github.com/jenkinsci/rundeck-plugin 4 https://github.com/jenkinsci/fortify-plugin 4 https://github.com/apache/ranger 4 https://github.com/itext/itext7 4 https://github.com/jenkinsci/warnings-ng-plugin 4 https://github.com/apiman/apiman 4 https://github.com/nightcloudos/new_cms 4 https://github.com/unclebob/fitnesse 4 https://github.com/jenkinsci/matrix-project-plugin 4 https://github.com/yamcs/yamcs 4 https://github.com/geonetwork/core-geonetwork 4 https://github.com/shopizer-ecommerce/shopizer 4 https://github.com/HL7/fhir-ig-publisher 4 https://github.com/jenkinsci/active-choices-plugin 4 https://github.com/jenkinsci/workflow-cps-plugin 4 https://github.com/jenkinsci/gitlab-oauth-plugin 4 https://github.com/openhab/openhab-webui 4 https://github.com/resteasy/Resteasy 4 https://github.com/jfinal/jfinal 4 https://github.com/aws/aws-iot-device-sdk-java-v2 4 https://github.com/micronaut-projects/micronaut-core 4 https://github.com/open-metadata/OpenMetadata 4 https://github.com/jenkinsci/cloudbees-jenkins-advisor-plugin 4 https://github.com/skylot/jadx 4 https://github.com/jenkinsci/nexus-platform-plugin 4 https://github.com/AsyncHttpClient/async-http-client 4 https://github.com/wildfly/wildfly-core 4 https://github.com/jenkinsci/credentials-binding-plugin 4 https://github.com/HtmlUnit/htmlunit 4 https://github.com/jenkinsci/git-client-plugin 4 https://github.com/powsybl/powsybl-core 4 https://github.com/jenkinsci/xldeploy-plugin 4 https://github.com/stanfordnlp/corenlp 4 https://github.com/xerial/snappy-java 4 https://github.com/jooby-project/jooby 4 https://github.com/javamelody/javamelody 3 https://github.com/spring-projects/spring-boot 3 https://github.com/spray/spray-json 3 https://github.com/jenkinsci/gitlab-branch-source-plugin 3 https://github.com/reactor/reactor-netty 3 https://github.com/jenkinsci/ci-with-toad-edge-plugin 3 https://github.com/pf4j/pf4j 3 https://github.com/frohoff/ysoserial 3 https://github.com/li-yu320/cms 3 https://github.com/apache/santuario-java 3 https://github.com/apache/flume 3 https://github.com/jenkinsci/cas-plugin 3 https://github.com/jenkinsci/code-coverage-api-plugin 3 https://github.com/apache/commons-configuration 3 https://bitbucket.org/b_c/jose4j 3 https://github.com/apache/dubbo 3 https://github.com/hibernate/hibernate-validator 3 https://github.com/jenkinsci/embeddable-build-status-plugin 3 https://github.com/wildfly/wildfly 3 https://github.com/jenkinsci/mercurial-plugin 3 https://github.com/apache/rocketmq 3 https://github.com/jenkinsci/azure-credentials-plugin 3 https://github.com/Sidd545-cr/CVE 3 https://github.com/jenkinsci/crx-content-package-deployer-plugin 3 https://github.com/Adobe-Consulting-Services/acs-aem-commons 3 https://github.com/bcgit/bc-csharp 3 https://github.com/mbechler/marshalsec 3 https://github.com/Rabb1ter/cms 3