Moderate 10,441 High 8,227 Critical 3,379 Low 1,524

maven 2,200 pypi 1,753 npm 1,667 packagist 1,402 go 1,003 nuget 857 cargo 393 rubygems 303 actions 19 swift 18 hex 11 pub 5

org.jenkins-ci.main:jenkins-core 56 com.fasterxml.jackson.core:jackson-databind 43 org.apache.tomcat:tomcat 31 org.apache.struts:struts2-core 24 com.liferay.portal:release.portal.bom 23 com.thoughtworks.xstream:xstream 22 com.jfinal:jfinal 21 org.jenkins-ci.plugins:script-security 19 com.liferay.portal:release.dxp.bom 18 org.apache.tomcat.embed:tomcat-embed-core 18 io.undertow:undertow-core 17 org.xwiki.platform:xwiki-platform-oldcore 15 org.keycloak:keycloak-core 14 net.mingsoft:ms-mcms 14 org.apache.solr:solr-core 13 org.keycloak:keycloak-services 13 org.apache.openmeetings:openmeetings-parent 12 org.keycloak:keycloak-parent 11 org.springframework.security:spring-security-core 11 org.apache.nifi:nifi 9 org.apache.geode:geode-core 9 org.apache.tomcat:tomcat-catalina 9 org.cloudfoundry.identity:cloudfoundry-identity-server 9 org.apache.hadoop:hadoop-main 9 org.eclipse.jetty:jetty-server 8 org.bouncycastle:bcprov-jdk15on 8 org.apache.struts.xwork:xwork-core 8 org.springframework:spring-core 8 org.craftercms:crafter-studio 8 org.elasticsearch:elasticsearch 7 h2o 7 org.jenkins-ci.plugins.workflow:workflow-cps 7 ai.h2o:h2o-core 7 cn.hutool:hutool-core 7 com.xuxueli:xxl-job 7 org.apache.tomcat:tomcat-coyote 7 org.apache.inlong:manager-pojo 7 org.jenkins-ci.plugins.workflow:workflow-cps-global-lib 7 de.tum.in.ase:artemis-java-test-sandbox 6 org.apache.tika:tika-core 6 org.springframework:spring-webmvc 6 org.apache.dolphinscheduler:dolphinscheduler 6 org.apache.camel:camel-core 6 org.apache.mesos:mesos 5 org.postgresql:postgresql 5 com.vaadin:vaadin-bom 5 org.apache.kafka:kafka 5 org.apache.wicket:wicket-core 5 org.apache.hive:hive-exec 5 org.apache.commons:commons-compress 5 org.apache.ranger:ranger 5 org.apache.xmlgraphics:batik 4 org.apache.struts:struts2-rest-plugin 4 org.apache.hive:hive-service 4 org.apache.cxf:cxf 4 commons-fileupload:commons-fileupload 4 org.graylog2:graylog2-server 4 org.apache.cassandra:cassandra-all 4 com.caucho:resin 4 org.apache.tapestry:tapestry-core 4 org.apache.james:james-server 4 ca.uhn.hapi.fhir:org.hl7.fhir.r4b 4 org.dspace:dspace-jspui 4 ca.uhn.hapi.fhir:org.hl7.fhir.utilities 4 org.apache.linkis:linkis 4 com.google.protobuf:protobuf-java 4 org.apache.cxf:cxf-core 4 io.atomix:atomix 4 org.apache.kylin:kylin 4 org.apache.inlong:manager-service 4 ca.uhn.hapi.fhir:org.hl7.fhir.r5 4 io.netty:netty-handler 4 org.xwiki.platform:xwiki-platform-web 4 org.jenkins-ci.plugins:pipeline-maven 4 org.apache.hive:hive 4 org.xwiki.platform:xwiki-platform-web-templates 4 org.apache.hadoop:hadoop-common 4 org.jboss.netty:netty 4 info.magnolia:magnolia-core 4 org.springframework:spring-web 4 org.codehaus.jettison:jettison 4 ca.uhn.hapi.fhir:org.hl7.fhir.dstu3 3 org.apache.storm:storm-core 3 org.jenkins-ci.plugins:junit 3 org.pf4j:pf4j 3 org.jenkins-ci.plugins:sinatra-chef-builder 3 org.apache.tomcat:tomcat-util 3 ca.uhn.hapi.fhir:org.hl7.fhir.r4 3 com.nimbusds:nimbus-jose-jwt 3 ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may 3 com.typesafe.play:play 3 com.typesafe.akka:akka-http-core_2.11 3 org.jenkins-ci.plugins:azure-ad 3 org.infinispan:infinispan-core 3 dnsjava:dnsjava 3 org.open-metadata:openmetadata-service 3 org.xwiki.platform:xwiki-platform-rest-server 3 awsiotsdk 3 org.jenkins-ci.plugins:autocomplete-parameter 3 org.jenkins-ci.plugins:oic-auth 3 org.igniterealtime.openfire:xmppserver 3 org.openrefine:openrefine 3 org.jenkins-ci.plugins:websphere-deployer 3 org.geoserver:gs-main 3 org.apache.archiva:archiva 3 org.apache.struts:struts-core 3 log4j:log4j 3 org.geoserver.web:gs-web-app 3 org.jeecgframework.boot:jeecg-boot-base 3 org.jboss.resteasy:resteasy-bom 3 org.jeecgframework.boot:jeecg-boot-parent 3 com.typesafe.akka:akka-http-core_2.12 3 org.jenkins-ci.plugins:pipeline-input-step 3 com.liferay.portal:com.liferay.portal.impl 3 org.apache.thrift:libthrift 3 org.apache.activemq:activemq-client 3 com.sonyericsson.jenkins.plugins.bfa:build-failure-analyzer 3 net.minidev:json-smart 3 org.yaml:snakeyaml 3 org.apache.shenyu:shenyu-common 3 org.apache.inlong:manager-web 3 org.jenkins-ci.plugins:matlab 3 pyspark 3 org.apache.zookeeper:zookeeper 3 io.netty:netty 3 com.compuware.jenkins:compuware-topaz-for-total-test 3 org.jvnet.hudson.plugins:warnings 3 org.apache.zeppelin:zeppelin 3 org.apache.syncope:syncope-core 3 com.epam.reportportal:service-api 3 software.amazon.awssdk.iotdevicesdk:aws-iot-device-sdk 3 com.upokecenter:cbor 3 org.springframework:spring-webflux 3 org.openrefine:database 3 org.eclipse.jetty.http2:jetty-http2-common 3 org.jenkins-ci.plugins:assembla-auth 3 org.wildfly.security:wildfly-elytron 3 org.jenkins-ci.plugins:gitlab-plugin 3 com.hazelcast:hazelcast 3 com.reposilite:reposilite-backend 3 org.wildfly:wildfly-parent 3 rubygems-update 3 aws-iot-device-sdk-v2 3 org.jruby:jruby-stdlib 3 com.google.protobuf:protobuf-javalite 3 com.graphql-java:graphql-java 3 org.jenkins-ci.plugins:recipe 3 org.restlet.jse:org.restlet 3 org.apache.linkis:linkis-datasource 3 commons-beanutils:commons-beanutils 3 org.geoserver:gs-wfs 3 io.dataease:dataease-plugin-common 3 io.swagger:swagger-codegen 2 org.apache.jena:jena 2 org.jvnet.hudson.plugins:selection-tasks-plugin 2 org.apache.spark:spark-core_2.11 2 org.apache.dolphinscheduler:dolphinscheduler-master 2 org.apache.spark:spark-core 2 io.jenkins.plugins:cavisson-ns-nd-integration 2 org.apache.inlong:manager-common 2 org.keycloak:keycloak-model-infinispan 2 org.jenkins-ci.plugins:covcomplplot 2 org.dspace:dspace-api 2 com.liferay.portal:com.liferay.portal.kernel 2 com.elasticbox.jenkins-ci.plugins:kubernetes-ci 2 org.apache.cxf.fediz:fediz-spring2 2 org.xwiki.commons:xwiki-commons-core 2 org.jvnet.hudson.plugins:storable-configs-plugin 2 org.opensearch.plugin:opensearch-security 2 org.glassfish:mojarra-parent 2 org.apache.activemq:apache-activemq 2 com.typesafe.play:play-java 2 io.ratpack:ratpack-core 2 org.opennms:opennms 2 org.jenkins-ci.plugins:openid 2 org.apache.hadoop:hadoop-client 2 org.silverpeas.core:silverpeas-core-web 2 org.apache.inlong:inlong 2 org.jenkins-ci.plugins:libvirt-slave 2 org.jitsi:dnssecjava 2 org.jenkins-ci.plugins:dynatrace-dashboard 2 org.jenkins-ci.plugins.workflow:workflow-support 2 org.jenkins-ci.plugins:pipeline-githubnotify-step 2 xerces:xercesImpl 2 org.jenkins-ci.plugins:config-file-provider 2 ca.uhn.hapi.fhir:org.hl7.fhir.convertors 2 io.quarkus:quarkus-vertx-http 2 org.jenkins-ci.plugins:rundeck 2 com.linecorp.armeria:armeria 2 net.sourceforge.htmlunit:neko-htmlunit 2 org.apache.kylin:kylin-core-common 2 org.graylog:graylog-parent 2 org.apache.druid:druid 2 grpc 2 org.jenkins-ci.plugins:git 2 org.apache.xmlgraphics:batik-bridge 2 com.bstek.ureport:ureport2-core 2 org.bouncycastle:bcprov-jdk14 2 com.hazelcast:hazelcast-enterprise 2 org.apache.inlong:manager-test 2

https://github.com/xwiki/xwiki-platform 64 https://github.com/FasterXML/jackson-databind 44 https://github.com/jenkinsci/jenkins 43 https://github.com/apache/tomcat 39 https://github.com/keycloak/keycloak 30 https://github.com/x-stream/xstream 22 https://github.com/apache/struts 22 https://github.com/spring-projects/spring-framework 19 https://github.com/apache/inlong 15 https://github.com/jenkinsci/script-security-plugin 14 https://github.com/undertow-io/undertow 13 https://github.com/liferay/liferay-portal 12 https://github.com/apache/nifi 11 https://github.com/spring-projects/spring-security 9 https://github.com/apache/camel 9 https://github.com/cloudfoundry/uaa 9 https://github.com/cui2shark/cms 9 https://github.com/geoserver/geoserver 9 https://github.com/netty/netty 9 https://github.com/apache/cxf 9 https://github.com/bcgit/bc-java 8 https://github.com/OpenRefine/OpenRefine 8 https://github.com/eclipse/jetty.project 7 https://github.com/h2oai/h2o-3 7 https://github.com/xuxueli/xxl-job 7 https://github.com/apache/activemq 7 https://github.com/DSpace/DSpace 7 https://github.com/dromara/hutool 6 https://github.com/opencast/opencast 6 https://github.com/quarkusio/quarkus 6 https://github.com/Graylog2/graylog2-server 6 https://github.com/CVEProject/cvelist 6 https://github.com/ls1intum/Ares 6 https://github.com/OpenNMS/opennms 6 https://github.com/DrunkenShells/Disclosures 5 https://github.com/apache/hadoop 5 https://github.com/apache/xmlgraphics-batik 5 https://github.com/apache/dolphinscheduler 5 https://github.com/apache/kylin 5 https://github.com/jetty/jetty.project 4 https://github.com/pgjdbc/pgjdbc 4 https://github.com/apache/geode 4 https://github.com/protocolbuffers/protobuf 4 https://github.com/JLLeitschuh/security-research 4 https://github.com/dataease/dataease 4 https://github.com/jeecgboot/jeecg-boot 4 https://github.com/infinispan/infinispan 4 https://github.com/jenkinsci/workflow-cps-global-lib-plugin 4 https://github.com/hazelcast/hazelcast 4 https://github.com/restlet/restlet-framework-java 4 https://github.com/apache/lucene-solr 4 https://github.com/jettison-json/jettison 4 https://github.com/playframework/playframework 4 https://github.com/igniterealtime/Openfire 4 https://github.com/nightcloudos/new_cms 4 https://github.com/apache/commons-fileupload 3 https://github.com/grails/grails-core 3 https://github.com/apache/james-project 3 https://github.com/resteasy/Resteasy 3 https://github.com/apache/activemq-artemis 3 https://github.com/apache/shenyu 3 https://github.com/rubygems/rubygems 3 https://github.com/apache/syncope 3 https://github.com/aws/aws-iot-device-sdk-java-v2 3 https://github.com/jenkinsci/junit-plugin 3 https://github.com/apache/openmeetings 3 https://github.com/dzikoysk/reposilite 3 https://github.com/vaadin/platform 3 https://github.com/vaadin/framework 3 https://bitbucket.org/connect2id/nimbus-jose-jwt 3 https://github.com/h2database/h2database 3 https://github.com/reportportal/reportportal 3 https://github.com/open-metadata/OpenMetadata 3 https://github.com/ysuzhangbin/cms 3 https://github.com/rundeck/rundeck 3 https://github.com/li-yu320/cms 3 https://github.com/RhinoSecurityLabs/CVEs 3 https://github.com/graphql-java/graphql-java 3 https://github.com/pf4j/pf4j 3 https://github.com/dnsjava/dnsjava 3 https://github.com/jenkinsci/gitlab-plugin 3 https://github.com/peteroupc/CBOR-Java 3 https://github.com/alibaba/nacos 3 https://github.com/ming-soft/MCMS 3 https://github.com/apache/ranger 2 https://github.com/eclipse/milo 2 https://github.com/jenkinsci/htmlpublisher-plugin 2 https://github.com/xnio/xnio 2 https://github.com/jenkinsci/matrix-project-plugin 2 https://github.com/hjson/hjson-java 2 https://github.com/prestodb/presto 2 https://github.com/geonetwork/core-geonetwork 2 https://github.com/jenkinsci/pipeline-input-step-plugin 2 https://github.com/HtmlUnit/htmlunit 2 https://github.com/jenkinsci/config-file-provider-plugin 2 https://github.com/jenkinsci/nexus-platform-plugin 2 https://github.com/xerial/snappy-java 2 https://github.com/googleapis/google-oauth-java-client 2 https://github.com/snowflakedb/snowflake-jdbc 2 https://github.com/jenkinsci/cavisson-ns-nd-integration-plugin 2 https://github.com/akka/akka-http 2 https://github.com/apache/httpcomponents-client 2 https://github.com/jenkinsci/code-coverage-api-plugin 2 https://github.com/apache/commons-beanutils 2 https://github.com/apache/wicket 2 https://github.com/apache/pulsar 2 https://github.com/jenkinsci/libvirt-slave-plugin 2 https://git-wip-us.apache.org/repos/asf/cxf-fediz 2 https://github.com/jenkinsci/compuware-topaz-for-total-test-plugin 2 https://github.com/ESAPI/esapi-java-legacy 2 https://github.com/apache/ozone 2 https://github.com/spray/spray-json 2 https://github.com/aws/amazon-redshift-jdbc-driver 2 https://github.com/opensearch-project/security 2 https://github.com/matrix-org/matrix-android-sdk2 2 https://github.com/jenkinsci/workflow-cps-plugin 2 https://github.com/spring-projects/spring-security-samples 2 https://github.com/jenkinsci/build-failure-analyzer-plugin 2 https://github.com/line/armeria 2 https://github.com/jenkinsci/github-plugin 2 https://github.com/kawasima/struts1-forever 2 https://github.com/apache/myfaces 2 https://github.com/apiman/apiman 2 https://github.com/apache/solr 2 https://github.com/dropwizard/dropwizard 2 https://github.com/eclipse-californium/californium 2 https://github.com/eclipse-ee4j/mojarra 2 https://github.com/swagger-api/swagger-parser 2 https://github.com/ratpack/ratpack 2 https://github.com/jenkinsci/gerrit-trigger-plugin 2 https://github.com/jenkinsci/groovy-plugin 2 https://github.com/apache/tapestry-5 2 https://github.com/resteasy/resteasy 2 https://github.com/jeecgboot/JeecgBoot 2 https://github.com/apache/jackrabbit 2 https://github.com/HL7/fhir-ig-publisher 2 https://github.com/hapifhir/org.hl7.fhir.core 2 https://github.com/apache/cassandra 2 https://github.com/apache/kafka 2 https://github.com/apache/hbase 2 https://github.com/jenkinsci/nested-view-plugin 2 https://github.com/jenkinsci/pipeline-model-definition-plugin 2 https://github.com/koral--/android-gif-drawable 2 https://github.com/apache/cxf-fediz 2 https://github.com/OpenAPITools/openapi-generator 2 https://github.com/http4s/blaze 2 https://github.com/qos-ch/logback 2 https://github.com/yahoo/elide 2 https://github.com/http4s/http4s 2 https://github.com/jenkinsci/plot-plugin 2 https://github.com/reactor/reactor-netty 2 https://github.com/vert-x3/vertx-web 2 https://github.com/grpc/grpc 2 https://github.com/jenkinsci/m2release-plugin 2 https://github.com/jenkinsci/templating-engine-plugin 2 https://github.com/apache/hive 2 https://github.com/jenkinsci/pipeline-maven-plugin 2 https://github.com/Richard-Muzi/vulnerability 1 https://github.com/jenkinsci/p4-plugin 1 https://github.com/jenkinsci/validating-string-parameter-plugin 1 https://github.com/diffplug/spotless 1 https://github.com/Snakinya/Bugs 1 https://github.com/UDKI11/vul 1 https://github.com/vt-middleware/cryptacular 1 https://github.com/jenkinsci/vmanager-plugin 1 https://github.com/spring-projects/spring-data-commons 1 https://github.com/akka/akka 1 https://github.com/Contrast-Security-OSS/yamlbeans 1 https://github.com/craftercms/craftercms 1 https://github.com/jdereg/json-io 1 https://github.com/apache/seatunnel-web 1 https://github.com/jenkinsci/promoted-builds-plugin 1 https://github.com/walmartlabs/concord 1 https://github.com/wso2/carbon-identity-framework 1 https://github.com/jenkinsci/git-parameter-plugin 1 https://github.com/jenkinsci/pipeline-stage-view-plugin 1 https://github.com/jenkinsci/aws-credentials-plugin 1 https://github.com/spring-attic/spring-security-oauth 1 https://github.com/veraPDF/veraPDF-library 1 https://github.com/instaclustr/cassandra-lucene-index 1 https://github.com/square/retrofit 1 https://github.com/getsentry/sentry-java 1 https://github.com/o2platform/DefCon_RESTing 1 https://github.com/apache/incubator-seata 1 https://github.com/jenkinsci/ecutest-plugin 1 https://github.com/apache/olingo-odata4 1 https://github.com/apache/atlas 1 https://github.com/yamcs/yamcs 1 https://github.com/dom4j/dom4j 1 https://github.com/apache/netbeans-html4j 1 https://github.com/socketio/socket.io-client-java 1 https://github.com/xwiki-contrib/application-changerequest 1 https://github.com/allure-framework/allure2 1 https://github.com/apache/calcite-avatica 1 https://github.com/j-easy/easy-rules 1 https://github.com/TooTallNate/Java-WebSocket 1 https://github.com/jenkinsci/xcode-plugin 1 https://github.com/TaleLin/lin-cms-spring-boot 1 https://github.com/apache/zookeeper 1