Moderate 10,084 High 8,048 Critical 3,306 Low 1,447

pypi 517 maven 353 packagist 313 go 222 npm 211 cargo 103 rubygems 59 nuget 34 hex 6 swift 2 actions 2 pub 2

org.jenkins-ci.main:jenkins-core 19 org.opencms:opencms-core 11 org.apache.tomcat:tomcat 9 org.keycloak:keycloak-services 6 com.vaadin:flow-server 4 org.apache.hive:hive 3 org.graylog2:graylog2-server 3 org.apache.hive:hive-service 3 com.vaadin:vaadin-bom 3 org.apache.hive:hive-exec 3 org.jenkins-ci.plugins:wso2id-oauth 2 com.xuxueli:xxl-job-core 2 org.jenkins-ci.plugins:ec2 2 org.apache.tomcat.embed:tomcat-embed-core 2 org.jenkins-ci.plugins:repository-connector 2 com.inedo.proget:inedo-proget 2 org.keycloak:keycloak-ldap-federation 2 org.jenkins-ci.plugins:azure-ad 2 org.xwiki.platform:xwiki-platform-oldcore 2 org.jenkins-ci.plugins:mercurial 2 org.jenkins-ci.plugins:ghprb 2 com.ruoyi:ruoyi 2 org.jenkins-ci.plugins:artifactory 2 org.apache.activemq:activemq-parent 2 org.eclipse.jetty:jetty-server 2 tools.devnull:build-notifications 2 org.eclipse.jetty:jetty-servlets 2 org.apache.tomcat:tomcat-catalina 2 org.apache.hadoop:hadoop-common 2 org.jenkins-ci.plugins:bigpanda-jenkins 2 org.http4s:http4s-async-http-client_2.12 1 org.opensearch.plugin:opensearch-observability 1 org.jenkins-ci.plugins:assembla 1 org.apache.kafka:kafka_2.12 1 org.bouncycastle:bcprov-jdk14 1 org.jenkins-ci.plugins:repo 1 org.postgresql:postgresql 1 org.verapdf:core-jakarta 1 org.xwiki.platform:xwiki-platform-security-authentication-script 1 dev.personnummer:personnummer 1 org.jenkins-ci.plugins:collabnet 1 org.jvnet.hudson.plugins:ircbot 1 org.jenkins-ci.plugins:ssh-agent 1 org.xwiki.platform:xwiki-platform-lesscss-script 1 com.github.tomakehurst:wiremock-jre8 1 io.ratpack:ratpack-session 1 org.jenkins-ci.plugins:audit2db 1 org.datadog.jenkins.plugins:datadog 1 com.datadoghq:datadog-api-client 1 org.jenkins-ci.plugins:Parameterized-Remote-Trigger 1 org.jenkins-ci.plugins:application-director-plugin 1 mysql:mysql-connector-java 1 org.jenkins-ci.plugins:generic-webhook-trigger 1 org.owasp:dependency-check-ant 1 org.jenkins-ci.plugins:structs 1 com.mtvi.plateng.hudson:ldapemail 1 org.apache.camel:camel-jira 1 org.jenkins-ci.plugins:http_request 1 org.verapdf:verapdf-library 1 org.apache.maven.plugins:maven-archetype-plugin 1 org.apache.cocoon:cocoon-sitemap-impl 1 org.apache.seata:seata-config-core 1 org.jenkins-ci.plugins.m2release:m2release 1 org.jenkins-ci.plugins:synopsys-coverity 1 org.jenkins-ci.plugins:weibo 1 org.apache.activemq:artemis-server 1 org.jvnet.hudson.plugins:ftppublisher 1 ru.yandex.jenkins.plugins.debuilder:debian-package-builder 1 org.apache.kylin:kylin-common-server 1 org.jenkins-ci.plugins:labmanager 1 com.elasticbox.jenkins-ci.plugins:elasticbox 1 org.silverpeas.core:silverpeas-core-war 1 com.powsybl:powsybl-contingency-api 1 org.jenkins-ci.plugins:gitlab-plugin 1 org.mapfish.print:print-standalone 1 org.eclipse.jetty.ee9:jetty-ee9-servlets 1 com.amazonaws:aws-dynamodb-encryption-java 1 io.jenkins.plugins:testsigma 1 org.scala-sbt:io_3 1 org.keycloak:keycloak-oidc-client-adapter-pom 1 org.jenkins-ci.plugins:hpe-network-virtualization 1 org.jenkins-ci.plugins:skype-notifier 1 org.jenkins-ci.plugins:zanata 1 org.jenkins-ci.plugins:resource-disposer 1 org.jenkins-ci.plugins:s3 1 net.sf.mpxj:mpxj 1 org.eclipse.jetty.ee10:jetty-ee10-servlets 1 io.jenkins.plugins:zoom 1 org.jenkins-ci.plugins:gitlab-oauth 1 org.jenkins-ci.plugins:netsparker-cloud-scan 1 org.bouncycastle:bcprov-jdk15 1 org.jenkins-ci.plugins:coverity 1 org.jenkins-ci.plugins:aqua-serverless 1 org.jenkins-ci.plugins:beaker-builder 1 commons-fileupload:commons-fileupload 1 org.jenkins-ci.plugins:aqua-security-scanner 1 org.opencastproject:opencast-common-jpa-impl 1 io.ratpack:ratpack-java 1 org.apache.logging.log4j:log4j 1 io.ktor:ktor-server-cio 1 org.jenkins-ci.plugins:tfs 1 mpxj 1 org.verapdf:core 1 org.keycloak:keycloak-parent 1 org.jenkins-ci.plugins:publish-over-ssh 1 com.coravy.hudson.plugins.github:github 1 commons-configuration:commons-configuration 1 ch.qos.logback:logback-core 1 org.apache.logging.log4j:log4j-core 1 org.apache.activemq:activemq-openwire-generator 1 org.jenkins-ci.plugins:zephyr-for-jira-test-management 1 com.typesafe.play:play 1 com.vaadin:vaadin 1 org.apache.syncope.client:syncope-client-enduser 1 org.jenkins-ci.plugins:youtrack-plugin 1 org.apache.kafka:kafka_2.13 1 org.springframework.graphql:spring-graphql 1 org.eclipse.jetty:jetty-xml 1 org.apache.kafka:kafka_2.11 1 de.e-nexus:jabber-server-plugin 1 org.jenkins-ci.plugins:bitbucket-approve 1 org.jenkins-ci.plugins:snsnotify 1 org.apache.ranger:security-admin-web 1 net.mingsoft:ms-mcms 1 io.antmedia:ant-media-server 1 org.springframework.integration:spring-integration-ws 1 org.wiremock:wiremock 1 org.xwiki.platform:xwiki-platform-web-templates 1 org.jenkins-ci.plugins:cloudshare-docker 1 org.apache.cocoon:cocoon-forms-impl 1 org.jenkins-ci.plugins:aws-cloudwatch-logs-publisher 1 cn.hutool:hutool-json 1 org.xwiki.platform:xwiki-platform-rendering-wikimacro-store 1 org.owasp:dependency-check-cli 1 org.jenkins-ci.plugins:qmetry-for-jira-test-management 1 wiremock 1 io.jenkins.plugins:tuleap-oauth 1 com.powsybl:powsybl-iidm-criteria 1 org.keycloak:keycloak-core 1 io.jenkins.plugins:teams-webhook-trigger 1 org.springframework.data:spring-data-rest-core 1 org.jenkins-ci.plugins:git-client 1 io.jenkins.plugins:s3explorer 1 org.jenkins-ci.plugins:couchdb-statistics 1 org.springframework.batch:spring-batch-core 1 org.cloudfoundry.identity:cloudfoundry-identity-server 1 org.verapdf:verapdf-library-arlington 1 tech.pegasys.discovery:discovery 1 org.mapfish.print:print-lib 1 org.jenkins-ci.plugins:elasticsearch-query 1 org.apache.druid.extensions:druid-pac4j 1 org.xwiki.platform:xwiki-platform-search-solr-api 1 org.jenkins-ci.plugins:twitter 1 org.apache.kylin:kylin 1 org.jenkins-ci.plugins:zos-connector 1 org.apache.seata:seata-parent 1 org.jenkins-ci.plugins:aws-device-farm 1 org.jenkins-ci.plugins:hp-quality-center 1 com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer 1 net.praqma:rqm-plugin 1 org.jenkins-ci.plugins:sametime 1 org.springframework.cloud:spring-cloud-contract-shade 1 org.jenkins-ci.plugins:skytap 1 org.apache.solr:solr-core 1 io.ktor:ktor-client-cio 1 org.jenkins-ci.plugins:lambdatest-automation 1 org.jenkins-ci.plugins:parameterized-trigger 1 net.sf.mpxj-for-vb 1 org.jenkins-ci.plugins:cons3rt 1 io.jenkins.plugins:gitlab-branch-source 1 org.jenkins-ci.plugins:ec2-deployment-dashboard 1 org.jenkins-ci.plugins:jigomerge 1 org.jenkins-ci.plugins:backlog 1 org.apache.struts:struts2-core 1 io.jenkins:configuration-as-code 1 org.jenkins-ci.plugins:squashtm-publisher 1 org.wildfly.core:wildfly-server 1 com.rapid7:jenkinsci-appspider-plugin 1 dev.sigstore:sigstore-java 1 org.jenkins-ci.plugins:sonar-quality-gates 1 com.nimbusds:nimbus-jose-jwt 1 org.gradle:gradle-core 1 com.cloudcoreo.plugins:cloudcoreo-deploytime 1 io.quarkus.resteasy.reactive:resteasy-reactive-common 1 org.owasp:dependency-check-maven 1 com.sonyericsson.jenkins.plugins.bfa:build-failure-analyzer 1 io.jenkins.plugins:user1st-utester 1 org.jenkins-ci.plugins:veracode-scanner 1 org.jenkins-ci.plugins:rocketchatnotifier 1 com.google.guava:guava 1 net.sf.mpxj 1 org.jenkins-ci.plugins:aws-beanstalk-publisher-plugin 1 org.jenkins-ci.plugins:azure-publishersettings-credentials 1 io.swagger:swagger-codegen 1 org.eclipse.jetty:jetty-deploy 1 org.jenkins-ci.plugins:minio-storage 1 org.verapdf:core-arlington 1 org.jboss.fuse:jboss-fuse 1 org.jenkins-ci.plugins:mailer 1 org.jenkins-ci.plugins:gogs-webhook 1

https://github.com/alkacon/opencms-core 9 https://github.com/keycloak/keycloak 8 https://github.com/jenkinsci/jenkins 8 https://github.com/xwiki/xwiki-platform 7 https://github.com/eclipse/jetty.project 7 https://github.com/apache/tomcat 6 https://github.com/vaadin/platform 4 https://github.com/vaadin/flow 3 https://github.com/CVEProject/cvelist 3 https://github.com/Graylog2/graylog2-server 3 https://github.com/powsybl/powsybl-core 2 https://github.com/quarkusio/quarkus 2 https://github.com/jenkinsci/ec2-plugin 2 https://github.com/apache/kylin 2 https://github.com/apache/druid 2 https://github.com/apache/activemq 2 https://github.com/xuxueli/xxl-job 2 https://github.com/gradle/gradle 1 https://github.com/google/guava 1 https://github.com/http4s/http4s 1 https://github.com/jenkinsci/aws-device-farm-plugin 1 https://github.com/jenkinsci/azure-ad-plugin 1 https://github.com/jenkinsci/backlog-plugin 1 https://github.com/jenkinsci/beaker-builder-plugin 1 https://github.com/ESAPI/esapi-java-legacy 1 https://github.com/jenkinsci/build-failure-analyzer-plugin 1 https://github.com/jenkinsci/coverity-plugin 1 https://github.com/jenkinsci/credentials-binding-plugin 1 https://github.com/jenkinsci/digitalocean-plugin 1 https://github.com/jenkinsci/dingtalk-plugin 1 https://github.com/jenkinsci/email-ext-plugin 1 https://github.com/jenkinsci/ghprb-plugin 1 https://github.com/jenkinsci/git-client-plugin 1 https://github.com/jenkinsci/github-plugin 1 https://github.com/jenkinsci/gitlab-branch-source-plugin 1 https://github.com/jenkinsci/gitlab-oauth-plugin 1 https://bitbucket.org/connect2id/nimbus-jose-jwt 1 https://github.com/apache/activemq-artemis 1 https://github.com/apache/camel 1 https://github.com/apache/cocoon 1 https://github.com/apache/hadoop 1 https://github.com/apache/hive 1 https://github.com/apache/incubator-seata 1 https://github.com/apache/kafka 1 https://github.com/apache/lucene-solr 1 https://github.com/apache/maven-archetype 1 https://github.com/apache/nifi 1 https://github.com/apache/ranger 1 https://github.com/apache/seatunnel 1 https://github.com/aws/aws-database-encryption-sdk-dynamodb-java 1 https://github.com/aws/aws-dynamodb-encryption-java 1 https://github.com/bcgit/bc-java 1 https://github.com/cloudfoundry/uaa 1 https://github.com/codelibs/fess 1 https://github.com/ConsenSys/discovery 1 https://github.com/DataDog/datadog-api-client-java 1 https://github.com/dromara/hutool 1 https://github.com/DSpace/DSpace 1 https://github.com/jenkinsci/gitlab-plugin 1 https://github.com/njmbb8/CVE-2024-42850 1 https://github.com/opencast/opencast 1 https://github.com/openjdk/jfx 1 https://github.com/opensearch-project/observability 1 https://github.com/OWASP/java-html-sanitizer 1 https://github.com/personnummer/java 1 https://github.com/pgjdbc/pgjdbc 1 https://github.com/qos-ch/logback 1 https://github.com/ratpack/ratpack 1 https://github.com/RhinoSecurityLabs/CVEs 1 https://github.com/sbt/sbt 1 https://github.com/ShenxiuSec/cve-proofs 1 https://github.com/Sidd545-cr/CVE 1 https://github.com/sigstore/sigstore-java 1 https://github.com/skylot/jadx 1 https://github.com/snowflakedb/snowflake-jdbc 1 https://github.com/spring-projects/spring-data-rest 1 https://github.com/spring-projects/spring-framework 1 https://github.com/spring-projects/spring-integration 1 https://github.com/square/connect-java-sdk 1 https://github.com/swagger-api/swagger-codegen 1 https://github.com/veraPDF/veraPDF-library 1 https://github.com/wildfly/wildfly-core 1 https://github.com/wiremock/wiremock 1 https://github.com/xmlunit/xmlunit 1 https://github.com/jenkinsci/http-request-plugin 1 https://github.com/jenkinsci/inedo-buildmaster-plugin 1 https://github.com/jenkinsci/inedo-proget-plugin 1 https://github.com/jenkinsci/logstash-plugin 1 https://github.com/jenkinsci/m2release-plugin 1 https://github.com/jenkinsci/meliora-testlab-plugin 1 https://github.com/jenkinsci/mercurial-plugin 1 https://github.com/jenkinsci/parameterized-remote-trigger-plugin 1 https://github.com/jenkinsci/parameterized-trigger-plugin 1 https://github.com/jenkinsci/publish-over-ssh-plugin 1 https://github.com/jenkinsci/qmetry-for-jira-test-management-plugin 1 https://github.com/jenkinsci/repo-plugin 1 https://github.com/jenkinsci/resource-disposer-plugin 1 https://github.com/jenkinsci/s3-plugin 1 https://github.com/jenkinsci/snsnotify-plugin 1 https://github.com/jenkinsci/ssh-agent-plugin 1 https://github.com/jenkinsci/structs-plugin 1 https://github.com/jenkinsci/support-core-plugin 1 https://github.com/jenkinsci/winstone 1 https://github.com/jenkinsci/zohoqengine-plugin 1 https://github.com/jeremylong/DependencyCheck 1 https://github.com/jetty/jetty.project 1 https://github.com/joniles/mpxj 1 https://github.com/ktorio/ktor 1 https://github.com/mapfish/mapfish-print 1 https://svn.apache.org/viewvc/tomcat/tc7.0.x 1