Moderate 10,066 High 8,037 Critical 3,302 Low 1,442

maven 6,662 packagist 5,355 pypi 4,831 npm 4,188 go 2,795 nuget 1,700 cargo 1,065 rubygems 918 hex 37 swift 35 actions 32 pub 10

org.jenkins-ci.main:jenkins-core 239 org.apache.tomcat:tomcat 138 com.liferay.portal:release.portal.bom 110 com.liferay.portal:release.dxp.bom 105 com.fasterxml.jackson.core:jackson-databind 69 org.apache.struts:struts2-core 57 org.keycloak:keycloak-core 50 org.apache.tomcat.embed:tomcat-embed-core 46 org.keycloak:keycloak-services 41 org.elasticsearch:elasticsearch 41 org.xwiki.platform:xwiki-platform-oldcore 41 com.thoughtworks.xstream:xstream 37 net.mingsoft:ms-mcms 36 com.jfinal:jfinal 36 io.undertow:undertow-core 34 org.jenkins-ci.plugins:script-security 34 org.apache.solr:solr-core 28 org.opencms:opencms-core 27 org.springframework.security:spring-security-core 26 org.eclipse.jetty:jetty-server 25 org.keycloak:keycloak-parent 24 org.apache.openmeetings:openmeetings-parent 22 org.bouncycastle:bcprov-jdk14 22 org.apache.tomcat:tomcat-catalina 21 org.apache.nifi:nifi 21 org.cloudfoundry.identity:cloudfoundry-identity-server 20 org.xwiki.platform:xwiki-platform-web-templates 19 org.apache.tomcat:tomcat-coyote 19 com.vaadin:vaadin-bom 18 org.springframework:spring-core 17 org.apache.inlong:manager-pojo 17 org.apache.geode:geode-core 17 org.apache.dubbo:dubbo 16 org.apache.ranger:ranger 16 org.apache.activemq:activemq-client 16 org.bouncycastle:bcprov-jdk15 16 org.apache.jspwiki:jspwiki-main 16 org.apache.struts.xwork:xwork-core 15 org.xwiki.platform:xwiki-platform-web 14 org.jenkins-ci.plugins.workflow:workflow-cps 13 org.apache.cxf:cxf-core 13 org.apache.hadoop:hadoop-main 13 org.graylog2:graylog2-server 12 org.jenkins-ci.plugins:git 12 org.apache.cxf:cxf 12 org.apache.hadoop:hadoop-common 12 org.springframework:spring-webmvc 12 org.springframework:spring-web 12 org.jeecgframework.boot:jeecg-boot-parent 12 com.vaadin:flow-server 12 org.apache.dolphinscheduler:dolphinscheduler 12 org.mortbay.jetty:jetty 11 org.igniterealtime.openfire:parent 11 org.jenkins-ci.plugins:email-ext 11 org.apache.jspwiki:jspwiki-war 11 org.apache.camel:camel-core 11 com.xuxueli:xxl-job 11 org.apache.commons:commons-compress 11 ai.h2o:h2o-core 11 org.xwiki.platform:xwiki-platform-administration-ui 11 org.apache.tika:tika-core 11 org.geoserver.web:gs-web-app 11 org.apache.james:james-server 11 org.bouncycastle:bcprov-jdk15on 11 org.apache.archiva:archiva 11 org.craftercms:crafter-studio 10 com.sonyericsson.jenkins.plugins.bfa:build-failure-analyzer 10 org.jenkins-ci.plugins.workflow:workflow-cps-global-lib 10 org.apache.inlong:manager-service 10 org.apache.kylin:kylin 10 io.netty:netty 10 h2o 10 org.apache.hive:hive-exec 10 org.jboss.netty:netty 10 twbs/bootstrap 9 org.opennms:opennms 9 org.apache.shiro:shiro-core 9 org.webjars:bootstrap 9 org.apache.linkis:linkis 9 cn.hutool:hutool-core 9 bootstrap 9 bootstrap 9 org.jenkins-ci.plugins:config-file-provider 9 org.apache.hive:hive 9 org.postgresql:postgresql 9 io.jenkins:configuration-as-code 9 pyspark 9 org.apache.tapestry:tapestry-core 9 mysql:mysql-connector-java 9 org.bouncycastle:bcprov-jdk15to18 9 bootstrap 9 org.apache.xmlgraphics:batik 9 org.jenkins-ci.plugins:active-directory 9 org.opencrx:opencrx-core-models 9 org.jenkins-ci.plugins:electricflow 9 org.apache.santuario:xmlsec 8 org.silverpeas.core:silverpeas-core-web 8 org.apache.streampark:streampark 8 jquery 8 org.apache.ozone:ozone-main 8 org.jenkins-ci.plugins:subversion 8 org.jenkins-ci.plugins:oic-auth 8 org.xwiki.platform:xwiki-platform-rest-server 8 org.jeecgframework.boot:jeecg-boot-common 8 org.apache.zeppelin:zeppelin 8 org.apache.ambari:ambari 8 org.webjars.npm:jquery 8 org.opensearch.plugin:opensearch-security 8 com.ruoyi:ruoyi 8 org.apache.cassandra:cassandra-all 8 com.hazelcast:hazelcast 8 org.yaml:snakeyaml 8 org.jenkins-ci.plugins:ec2 8 org.apache.hive:hive-service 8 org.apache.pdfbox:pdfbox 8 jquery-rails 8 io.jenkins.blueocean:blueocean 8 io.jenkins.plugins:warnings-ng 7 commons-fileupload:commons-fileupload 7 org.jeecgframework.boot:jeecg-boot-base 7 org.apache.inlong:manager-web 7 org.apache.tika:tika 7 jquery-ui-rails 7 org.jenkins-ci.plugins:artifactory 7 org.owasp.esapi:esapi 7 rubygems-update 7 org.apache.spark:spark-core_2.11 7 org.apache.poi:poi 7 org.jruby:jruby-stdlib 7 io.jenkins.plugins:miniorange-saml-sp 7 io.dataease:dataease-plugin-common 7 org.apache.atlas:atlas-common 7 org.apache.karaf:apache-karaf 7 org.owasp.antisamy:antisamy 7 bootstrap.sass 7 org.apache.activemq:activemq-parent 7 org.opencastproject:opencast-kernel 7 org.jenkins-ci.plugins:rundeck 7 jQuery 7 jquery-ui 7 io.jenkins.plugins:cavisson-ns-nd-integration 7 jQuery.UI.Combined 7 org.webjars.npm:jquery-ui 7 io.netty:netty-handler 7 org.jenkins-ci.plugins:jobConfigHistory 7 org.jenkins-ci.plugins:mercurial 7 io.atomix:atomix 7 org.jenkins-ci.plugins:openshift-deployer 7 org.jboss.resteasy:resteasy-client 7 bootstrap-sass 7 net.opentsdb:opentsdb 7 org.apache.logging.log4j:log4j-core 7 org.apache.wicket:wicket-core 7 org.apache.derby:derby 7 org.apache.druid:druid 7 org.apache.cxf:apache-cxf 7 tech.powerjob:powerjob 6 org.apache.syncope:syncope-core 6 org.apache.spark:spark-core_2.10 6 com.jflyfox:jflyfox_jfinal 6 org.jenkins-ci.plugins:gitlab-plugin 6 org.jenkins-ci.plugins:azure-vm-agents 6 com.xuxueli:xxl-job-core 6 axis:axis 6 apache-iotdb 6 org.apache.pulsar:pulsar-broker 6 ch.qos.logback:logback-core 6 org.jenkins-ci.plugins:pipeline-maven 6 bootstrap-sass 6 org.apache.shenyu:shenyu-common 6 com.sonyericsson.hudson.plugins.gerrit:gerrit-trigger 6 org.jenkins-ci.plugins:fortify-on-demand-uploader 6 de.tum.in.ase:artemis-java-test-sandbox 6 org.infinispan:infinispan-core 6 org.apache.zeppelin:zeppelin-server 6 cn.hutool:hutool-json 6 org.jenkins-ci.plugins:gitlab-oauth 6 org.csanchez.jenkins.plugins:kubernetes 6 com.liferay.portal:com.liferay.portal.impl 6 org.apache.axis:axis 6 org.jenkins-ci.plugins:credentials-binding 6 org.jenkins-ci.plugins:htmlpublisher 6 org.jenkins-ci.plugins:repository-connector 6 org.apache.zookeeper:zookeeper 6 org.wildfly:wildfly-parent 6 org.apache.solr:solr-parent 6 hudson.plugins:project-inheritance 6 org.jenkins-ci.plugins:ghprb 6 org.apache.mesos:mesos 6 org.apache.kafka:kafka 6 io.netty:netty-codec-http 6 org.keycloak:keycloak-quarkus-server 6 org.apache.storm:storm-core 6 org.xwiki.commons:xwiki-commons-xml 6 org.bouncycastle:bcprov-jdk18on 6 com.xebialabs.deployit.ci:deployit-plugin 6 org.apache.httpcomponents:httpclient 6 org.geoserver:gs-wms 6 org.apache.struts:struts2-rest-plugin 6 com.google.protobuf:protobuf-java 6

https://github.com/xwiki/xwiki-platform 215 https://github.com/jenkinsci/jenkins 178 https://github.com/apache/tomcat 112 https://github.com/keycloak/keycloak 83 https://github.com/FasterXML/jackson-databind 70 https://github.com/liferay/liferay-portal 58 https://github.com/spring-projects/spring-framework 50 https://github.com/apache/struts 47 https://github.com/x-stream/xstream 37 https://github.com/apache/activemq 34 https://github.com/apache/inlong 31 https://github.com/CVEProject/cvelist 28 https://github.com/apache/nifi 26 https://github.com/geoserver/geoserver 26 https://github.com/apache/cxf 23 https://github.com/netty/netty 23 https://github.com/eclipse/jetty.project 23 https://github.com/jenkinsci/script-security-plugin 22 https://github.com/jeecgboot/jeecg-boot 20 https://github.com/undertow-io/undertow 20 https://github.com/OpenNMS/opennms 20 https://github.com/bcgit/bc-java 19 https://github.com/alkacon/opencms-core 19 https://github.com/cloudfoundry/uaa 19 https://github.com/opencast/opencast 18 https://github.com/apache/camel 18 https://github.com/vaadin/platform 17 https://github.com/quarkusio/quarkus 16 https://github.com/xuxueli/xxl-job 15 https://github.com/apache/kylin 14 https://github.com/Graylog2/graylog2-server 14 https://github.com/dromara/hutool 13 https://github.com/spring-projects/spring-security 13 https://github.com/ming-soft/MCMS 13 https://github.com/OpenRefine/OpenRefine 13 https://github.com/apache/dolphinscheduler 13 https://github.com/DSpace/DSpace 12 https://github.com/vaadin/flow 11 https://github.com/igniterealtime/Openfire 11 https://github.com/apache/zeppelin 11 https://github.com/h2oai/h2o-3 10 https://github.com/jenkinsci/git-plugin 10 https://github.com/apache/lucene-solr 9 https://github.com/cui2shark/cms 9 https://github.com/jquery/jquery 9 https://github.com/dataease/dataease 9 https://github.com/nahsra/antisamy 8 https://github.com/pgjdbc/pgjdbc 8 https://github.com/opensearch-project/security 8 https://github.com/jenkinsci/config-file-provider-plugin 8 https://github.com/hazelcast/hazelcast 8 https://github.com/xwiki/xwiki-commons 8 https://github.com/apache/hadoop 7 https://github.com/jenkinsci/build-failure-analyzer-plugin 7 https://github.com/RhinoSecurityLabs/CVEs 7 https://github.com/jenkinsci/blueocean-plugin 7 https://github.com/apache/openmeetings 7 https://github.com/jetty/jetty.project 7 https://github.com/vaadin/framework 7 https://github.com/infinispan/infinispan 7 https://github.com/twbs/bootstrap 7 https://github.com/rubygems/rubygems 7 https://github.com/jflyfox/jfinal_cms 7 https://github.com/ratpack/ratpack 7 https://github.com/rundeck/rundeck 7 https://github.com/apache/xmlgraphics-batik 7 https://github.com/OpenTSDB/opentsdb 7 https://github.com/apache/pulsar 7 https://github.com/jquery/jquery-ui 6 https://github.com/line/armeria 6 https://github.com/OpenAPITools/openapi-generator 6 https://bitbucket.org/snakeyaml/snakeyaml 6 https://github.com/ls1intum/Ares 6 https://github.com/cui2shark/security 6 https://github.com/protocolbuffers/protobuf 6 https://github.com/jenkinsci/ec2-plugin 6 https://github.com/JLLeitschuh/security-research 6 https://github.com/DrunkenShells/Disclosures 6 https://github.com/http4s/http4s 6 https://github.com/apache/syncope 6 https://github.com/apache/tika 6 https://github.com/jenkinsci/gerrit-trigger-plugin 6 https://github.com/jenkinsci/fortify-on-demand-uploader-plugin 6 https://github.com/apache/solr 6 https://github.com/jenkinsci/electricflow-plugin 6 https://github.com/jenkinsci/configuration-as-code-plugin 6 https://github.com/playframework/playframework 6 https://github.com/resteasy/resteasy 6 https://github.com/vert-x3/vertx-web 6 https://github.com/jenkinsci/subversion-plugin 6 https://github.com/ESAPI/esapi-java-legacy 6 https://github.com/apache/hive 6 https://github.com/PowerJob/PowerJob 5 https://github.com/qos-ch/logback 5 https://bitbucket.org/connect2id/nimbus-jose-jwt 5 https://github.com/apache/geode 5 https://github.com/neo4j-contrib/neo4j-apoc-procedures 5 https://github.com/jenkinsci/publish-over-ssh-plugin 5 https://github.com/ktorio/ktor 5 https://github.com/snowflakedb/snowflake-jdbc 5 https://github.com/jensdietrich/xshady-release 5 https://github.com/jenkinsci/junit-plugin 5 https://github.com/jenkinsci/support-core-plugin 5 https://github.com/apache/shenyu 5 https://github.com/jenkinsci/active-directory-plugin 5 https://github.com/jenkinsci/codedx-plugin 5 https://github.com/h2database/h2database 5 https://github.com/jenkinsci/github-plugin 5 https://github.com/apache/shiro 5 https://github.com/jenkinsci/m2release-plugin 5 https://github.com/jenkinsci/gitlab-plugin 5 https://github.com/elastic/elasticsearch 5 https://github.com/restlet/restlet-framework-java 5 https://github.com/apache/druid 5 https://github.com/jenkinsci/workflow-cps-global-lib-plugin 5 https://github.com/apache/james-project 5 https://github.com/apache/httpcomponents-client 5 https://github.com/alibaba/nacos 5 https://github.com/jettison-json/jettison 5 https://github.com/apache/karaf 5 https://github.com/grails/grails-core 5 https://github.com/apache/activemq-artemis 5 https://github.com/xwiki/xwiki-rendering 5 https://github.com/jenkinsci/email-ext-plugin 5 https://github.com/shopizer-ecommerce/shopizer 4 https://github.com/apiman/apiman 4 https://github.com/skylot/jadx 4 https://github.com/jenkinsci/matrix-project-plugin 4 https://github.com/jenkinsci/libvirt-slave-plugin 4 https://github.com/wildfly/wildfly-core 4 https://github.com/Robothy/local-s3 4 https://github.com/jenkinsci/ansible-plugin 4 https://github.com/jenkinsci/fortify-plugin 4 https://github.com/jenkinsci/cloudbees-jenkins-advisor-plugin 4 https://github.com/jenkinsci/job-config-history-plugin 4 https://github.com/apache/jackrabbit 4 https://github.com/jenkinsci/active-choices-plugin 4 https://github.com/jenkinsci/rundeck-plugin 4 https://github.com/joniles/mpxj 4 https://github.com/aws/aws-iot-device-sdk-java-v2 4 https://github.com/powsybl/powsybl-core 4 https://github.com/resteasy/Resteasy 4 https://github.com/jenkinsci/workflow-cps-plugin 4 https://github.com/reportportal/reportportal 4 https://github.com/jfinal/jfinal 4 https://github.com/jenkinsci/vmanager-plugin 4 https://github.com/xerial/snappy-java 4 https://github.com/itext/itext7 4 https://github.com/bcgit/bc-csharp 4 https://github.com/apache/ranger 4 https://github.com/stanfordnlp/corenlp 4 https://github.com/jenkinsci/hpe-application-automation-tools-plugin 4 https://github.com/pippo-java/pippo 4 https://github.com/open-metadata/OpenMetadata 4 https://github.com/unclebob/fitnesse 4 https://github.com/yamcs/yamcs 4 https://github.com/nightcloudos/new_cms 4 https://github.com/micronaut-projects/micronaut-core 4 https://github.com/jooby-project/jooby 4 https://github.com/openhab/openhab-webui 4 https://github.com/jenkinsci/gitlab-oauth-plugin 4 https://github.com/jenkinsci/p4-plugin 4 https://github.com/apache/streampipes 4 https://github.com/geonetwork/core-geonetwork 4 https://github.com/jenkinsci/warnings-ng-plugin 4 https://github.com/AsyncHttpClient/async-http-client 4 https://github.com/jenkinsci/credentials-binding-plugin 4 https://github.com/jenkinsci/htmlpublisher-plugin 4 https://github.com/HL7/fhir-ig-publisher 4 https://github.com/jenkinsci/xldeploy-plugin 4 https://github.com/jenkinsci/nexus-platform-plugin 4 https://github.com/HtmlUnit/htmlunit 4 https://github.com/Sidd545-cr/CVE 3 https://github.com/pf4j/pf4j 3 https://github.com/eclipse-vertx/vert.x 3 https://github.com/jenkinsci/cas-plugin 3 https://github.com/jenkinsci/code-coverage-api-plugin 3 https://github.com/wso2/carbon-registry 3 https://github.com/intranda/goobi-viewer-core 3 https://github.com/google/guava 3 https://github.com/LetianYuan/My-CVE-Public-References 3 https://github.com/jenkinsci/embeddable-build-status-plugin 3 https://github.com/codehaus-plexus/plexus-utils 3 https://github.com/spring-projects/spring-boot 3 https://github.com/jenkinsci/git-parameter-plugin 3 https://github.com/jenkinsci/audit-trail-plugin 3 https://github.com/apolloconfig/apollo 3 https://github.com/eclipse-ee4j/mojarra 3 https://github.com/apache/flume 3 https://github.com/jenkinsci/git-client-plugin 3 https://github.com/apache/pinot 3 https://github.com/jenkinsci/crx-content-package-deployer-plugin 3 https://github.com/apache/rocketmq 3 https://github.com/apache/dubbo 3 https://github.com/jeremylong/DependencyCheck 3 https://github.com/jenkinsci/database-plugin 3 https://github.com/apache/commons-configuration 3 https://github.com/jenkinsci/ci-with-toad-edge-plugin 3 https://github.com/frohoff/ysoserial 3