Moderate 10,441 High 8,227 Critical 3,379 Low 1,524

maven 2,195 pypi 1,755 npm 1,667 packagist 1,403 go 1,006 nuget 903 cargo 391 rubygems 303 actions 19 swift 18 hex 11 pub 5

org.jenkins-ci.main:jenkins-core 56 com.fasterxml.jackson.core:jackson-databind 43 org.apache.tomcat:tomcat 31 org.apache.struts:struts2-core 24 com.liferay.portal:release.portal.bom 23 com.thoughtworks.xstream:xstream 22 com.jfinal:jfinal 21 org.jenkins-ci.plugins:script-security 19 com.liferay.portal:release.dxp.bom 18 io.undertow:undertow-core 17 org.apache.tomcat.embed:tomcat-embed-core 17 org.xwiki.platform:xwiki-platform-oldcore 15 net.mingsoft:ms-mcms 14 org.keycloak:keycloak-core 14 org.keycloak:keycloak-services 13 org.apache.solr:solr-core 13 org.apache.openmeetings:openmeetings-parent 12 org.springframework.security:spring-security-core 11 org.keycloak:keycloak-parent 11 org.apache.nifi:nifi 9 org.cloudfoundry.identity:cloudfoundry-identity-server 9 org.apache.geode:geode-core 9 org.apache.tomcat:tomcat-catalina 9 org.apache.hadoop:hadoop-main 9 h2o 8 org.bouncycastle:bcprov-jdk15on 8 org.craftercms:crafter-studio 8 org.apache.struts.xwork:xwork-core 8 ai.h2o:h2o-core 8 org.springframework:spring-core 8 org.eclipse.jetty:jetty-server 8 org.apache.tomcat:tomcat-coyote 7 org.jenkins-ci.plugins.workflow:workflow-cps 7 org.elasticsearch:elasticsearch 7 cn.hutool:hutool-core 7 org.apache.inlong:manager-pojo 7 com.xuxueli:xxl-job 7 org.jenkins-ci.plugins.workflow:workflow-cps-global-lib 7 org.apache.tika:tika-core 6 org.springframework:spring-webmvc 6 org.apache.dolphinscheduler:dolphinscheduler 6 de.tum.in.ase:artemis-java-test-sandbox 6 org.postgresql:postgresql 5 com.vaadin:vaadin-bom 5 org.apache.ranger:ranger 5 org.apache.commons:commons-compress 5 org.apache.camel:camel-core 5 org.xwiki.platform:xwiki-platform-web 5 org.apache.xmlgraphics:batik 5 org.apache.wicket:wicket-core 5 org.apache.mesos:mesos 5 org.apache.hive:hive-exec 5 org.apache.kafka:kafka 5 commons-fileupload:commons-fileupload 4 com.google.protobuf:protobuf-java 4 org.apache.cassandra:cassandra-all 4 ca.uhn.hapi.fhir:org.hl7.fhir.r5 4 org.apache.cxf:cxf-core 4 org.apache.hive:hive 4 org.jenkins-ci.plugins:pipeline-maven 4 org.apache.kylin:kylin 4 org.jboss.netty:netty 4 info.magnolia:magnolia-core 4 org.springframework:spring-web 4 org.apache.struts:struts2-rest-plugin 4 org.apache.inlong:manager-service 4 org.apache.linkis:linkis 4 org.codehaus.jettison:jettison 4 org.apache.hadoop:hadoop-common 4 com.caucho:resin 4 org.dspace:dspace-jspui 4 ca.uhn.hapi.fhir:org.hl7.fhir.r4b 4 io.netty:netty-handler 4 io.atomix:atomix 4 org.apache.cxf:cxf 4 org.apache.tapestry:tapestry-core 4 org.xwiki.platform:xwiki-platform-web-templates 4 ca.uhn.hapi.fhir:org.hl7.fhir.utilities 4 org.apache.hive:hive-service 4 org.apache.james:james-server 4 org.graylog2:graylog2-server 4 org.apache.linkis:linkis-datasource 3 org.apache.zeppelin:zeppelin 3 com.typesafe.play:play 3 io.dataease:dataease-plugin-common 3 net.minidev:json-smart 3 org.jboss.resteasy:resteasy-bom 3 com.upokecenter:cbor 3 org.apache.inlong:manager-web 3 ca.uhn.hapi.fhir:org.hl7.fhir.r4 3 org.open-metadata:openmetadata-service 3 org.apache.tomcat:tomcat-util 3 org.igniterealtime.openfire:xmppserver 3 org.jenkins-ci.plugins:websphere-deployer 3 com.liferay.portal:com.liferay.portal.impl 3 org.apache.activemq:activemq-client 3 org.apache.shenyu:shenyu-common 3 com.typesafe.akka:akka-http-core_2.12 3 org.jenkins-ci.plugins:matlab 3 org.jenkins-ci.plugins:junit 3 org.eclipse.jetty.http2:jetty-http2-common 3 com.google.protobuf:protobuf-javalite 3 rubygems-update 3 org.geoserver:gs-wfs 3 org.apache.storm:storm-core 3 org.jenkins-ci.plugins:azure-ad 3 com.nimbusds:nimbus-jose-jwt 3 com.typesafe.akka:akka-http-core_2.11 3 org.infinispan:infinispan-core 3 dnsjava:dnsjava 3 com.compuware.jenkins:compuware-topaz-for-total-test 3 awsiotsdk 3 org.apache.archiva:archiva 3 org.apache.struts:struts-core 3 org.jeecgframework.boot:jeecg-boot-base 3 org.jenkins-ci.plugins:pipeline-input-step 3 org.apache.thrift:libthrift 3 pyspark 3 ca.uhn.hapi.fhir:org.hl7.fhir.dstu3 3 io.netty:netty 3 org.apache.zookeeper:zookeeper 3 software.amazon.awssdk.iotdevicesdk:aws-iot-device-sdk 3 org.jenkins-ci.plugins:assembla-auth 3 com.hazelcast:hazelcast 3 org.jruby:jruby-stdlib 3 commons-beanutils:commons-beanutils 3 org.pf4j:pf4j 3 ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may 3 org.jenkins-ci.plugins:autocomplete-parameter 3 org.jenkins-ci.plugins:oic-auth 3 org.xwiki.platform:xwiki-platform-rest-server 3 org.openrefine:openrefine 3 org.geoserver:gs-main 3 org.geoserver.web:gs-web-app 3 org.jeecgframework.boot:jeecg-boot-parent 3 com.sonyericsson.jenkins.plugins.bfa:build-failure-analyzer 3 org.yaml:snakeyaml 3 org.jenkins-ci.plugins:sinatra-chef-builder 3 org.jvnet.hudson.plugins:warnings 3 org.apache.syncope:syncope-core 3 org.jenkins-ci.plugins:gitlab-plugin 3 com.epam.reportportal:service-api 3 org.springframework:spring-webflux 3 org.openrefine:database 3 org.wildfly.security:wildfly-elytron 3 com.reposilite:reposilite-backend 3 org.wildfly:wildfly-parent 3 org.jenkins-ci.plugins:recipe 3 com.graphql-java:graphql-java 3 org.restlet.jse:org.restlet 3 aws-iot-device-sdk-v2 3 org.opendaylight.sfc:odl-sfc-ovs 2 org.jenkins-ci.plugins:pipeline-githubnotify-step 2 org.apache.druid:druid 2 org.apache.jspwiki:jspwiki-main 2 org.apache.pulsar:pulsar-functions-worker 2 org.jenkins-ci.plugins:sounds 2 com.checkmarx.jenkins:checkmarx 2 org.keycloak:keycloak-saml-core 2 org.jenkins-ci.plugins:nested-view 2 io.hawt:project 2 org.jenkins-ci.plugins.plugin:fireline 2 org.keycloak:keycloak-model-jpa 2 org.apache.cxf.fediz:fediz-spring 2 org.xwiki.platform:xwiki-platform-security-requiredrights-default 2 org.apache.qpid:apache-qpid-broker-j 2 org.jenkins-ci.plugins:plot 2 org.apache.kylin:kylin-core-common 2 pl.droidsonroids.gif:android-gif-drawable 2 org.wildfly:wildfly-undertow 2 com.ruoyi:ruoyi 2 org.apache.logging.log4j:log4j-core 2 org.apache.spark:spark-parent_2.12 2 org.jitsi:dnssecjava 2 com.linecorp.armeria:armeria 2 org.opensearch.plugin:opensearch-security 2 org.apache.shardingsphere:shardingsphere 2 org.json:json 2 org.jenkins-ci.plugins:build-publisher 2 org.apache.nifi:nifi-hikari-dbcp-service 2 org.opencastproject:opencast-common 2 org.owasp.esapi:esapi 2 io.antmedia:ant-media-server 2 org.apache.activemq:apache-activemq 2 org.directwebremoting:dwr 2 org.jboss.resteasy:resteasy-jaxrs 2 org.jenkins-ci.plugins:dbCharts 2 io.netty:netty-codec 2 org.xwiki.platform:xwiki-platform-livedata-macro 2 org.apache.karaf:apache-karaf 2 com.coravy.hudson.plugins.github:github 2 org.xwiki.platform:xwiki-platform-distribution-war 2 google-protobuf 2 com.alibaba.nacos:nacos-common 2 org.jenkins-ci.plugins:matrix-project 2 grpcio 2 org.apache.atlas:atlas-common 2 org.glassfish:mojarra-parent 2 org.jenkins-ci.plugins:kubernetes-cd 2 org.jboss.resteasy:resteasy-client 2

https://github.com/xwiki/xwiki-platform 64 https://github.com/FasterXML/jackson-databind 44 https://github.com/jenkinsci/jenkins 43 https://github.com/apache/tomcat 39 https://github.com/keycloak/keycloak 30 https://github.com/x-stream/xstream 22 https://github.com/apache/struts 22 https://github.com/spring-projects/spring-framework 19 https://github.com/apache/inlong 15 https://github.com/jenkinsci/script-security-plugin 14 https://github.com/undertow-io/undertow 13 https://github.com/liferay/liferay-portal 12 https://github.com/apache/nifi 11 https://github.com/netty/netty 9 https://github.com/apache/cxf 9 https://github.com/cui2shark/cms 9 https://github.com/spring-projects/spring-security 9 https://github.com/cloudfoundry/uaa 9 https://github.com/geoserver/geoserver 9 https://github.com/apache/camel 9 https://github.com/bcgit/bc-java 8 https://github.com/h2oai/h2o-3 8 https://github.com/OpenRefine/OpenRefine 8 https://github.com/eclipse/jetty.project 7 https://github.com/DSpace/DSpace 7 https://github.com/apache/activemq 7 https://github.com/xuxueli/xxl-job 7 https://github.com/opencast/opencast 6 https://github.com/CVEProject/cvelist 6 https://github.com/ls1intum/Ares 6 https://github.com/dromara/hutool 6 https://github.com/OpenNMS/opennms 6 https://github.com/quarkusio/quarkus 6 https://github.com/Graylog2/graylog2-server 6 https://github.com/apache/xmlgraphics-batik 5 https://github.com/apache/hadoop 5 https://github.com/apache/dolphinscheduler 5 https://github.com/apache/kylin 5 https://github.com/DrunkenShells/Disclosures 5 https://github.com/nightcloudos/new_cms 4 https://github.com/infinispan/infinispan 4 https://github.com/hazelcast/hazelcast 4 https://github.com/jeecgboot/jeecg-boot 4 https://github.com/pgjdbc/pgjdbc 4 https://github.com/restlet/restlet-framework-java 4 https://github.com/dataease/dataease 4 https://github.com/apache/geode 4 https://github.com/playframework/playframework 4 https://github.com/jettison-json/jettison 4 https://github.com/jenkinsci/workflow-cps-global-lib-plugin 4 https://github.com/apache/lucene-solr 4 https://github.com/igniterealtime/Openfire 4 https://github.com/jetty/jetty.project 4 https://github.com/JLLeitschuh/security-research 4 https://github.com/protocolbuffers/protobuf 4 https://github.com/ysuzhangbin/cms 3 https://github.com/alibaba/nacos 3 https://github.com/pf4j/pf4j 3 https://github.com/open-metadata/OpenMetadata 3 https://github.com/dnsjava/dnsjava 3 https://github.com/aws/aws-iot-device-sdk-java-v2 3 https://github.com/rundeck/rundeck 3 https://github.com/vaadin/framework 3 https://bitbucket.org/connect2id/nimbus-jose-jwt 3 https://github.com/h2database/h2database 3 https://github.com/reportportal/reportportal 3 https://github.com/RhinoSecurityLabs/CVEs 3 https://github.com/apache/shenyu 3 https://github.com/apache/commons-fileupload 3 https://github.com/apache/syncope 3 https://github.com/jenkinsci/junit-plugin 3 https://github.com/peteroupc/CBOR-Java 3 https://github.com/li-yu320/cms 3 https://github.com/vaadin/platform 3 https://github.com/grails/grails-core 3 https://github.com/apache/activemq-artemis 3 https://github.com/apache/openmeetings 3 https://github.com/apache/james-project 3 https://github.com/resteasy/Resteasy 3 https://github.com/dzikoysk/reposilite 3 https://github.com/jenkinsci/gitlab-plugin 3 https://github.com/ming-soft/MCMS 3 https://github.com/graphql-java/graphql-java 3 https://github.com/rubygems/rubygems 3 https://github.com/apache/wicket 2 https://github.com/ESAPI/esapi-java-legacy 2 https://github.com/jenkinsci/compuware-topaz-for-total-test-plugin 2 https://github.com/apache/ozone 2 https://github.com/apache/commons-beanutils 2 https://github.com/aws/amazon-redshift-jdbc-driver 2 https://github.com/xerial/snappy-java 2 https://github.com/jenkinsci/nexus-platform-plugin 2 https://github.com/apache/pulsar 2 https://github.com/apache/cxf-fediz 2 https://github.com/apache/jackrabbit 2 https://github.com/jenkinsci/plot-plugin 2 https://github.com/line/armeria 2 https://github.com/resteasy/resteasy 2 https://github.com/hjson/hjson-java 2 https://github.com/HtmlUnit/htmlunit 2 https://github.com/jenkinsci/m2release-plugin 2 https://github.com/apache/cassandra 2 https://github.com/apache/hive 2 https://github.com/kawasima/struts1-forever 2 https://github.com/jenkinsci/groovy-plugin 2 https://github.com/http4s/http4s 2 https://github.com/koral--/android-gif-drawable 2 https://github.com/jenkinsci/nested-view-plugin 2 https://github.com/jenkinsci/workflow-cps-plugin 2 https://github.com/apache/httpcomponents-client 2 https://github.com/jenkinsci/cavisson-ns-nd-integration-plugin 2 https://github.com/googleapis/google-oauth-java-client 2 https://github.com/jenkinsci/gerrit-trigger-plugin 2 https://github.com/geonetwork/core-geonetwork 2 https://github.com/snowflakedb/snowflake-jdbc 2 https://github.com/jenkinsci/libvirt-slave-plugin 2 https://git-wip-us.apache.org/repos/asf/cxf-fediz 2 https://github.com/apache/kafka 2 https://github.com/jenkinsci/matrix-project-plugin 2 https://github.com/prestodb/presto 2 https://github.com/jenkinsci/htmlpublisher-plugin 2 https://github.com/jenkinsci/templating-engine-plugin 2 https://github.com/jenkinsci/github-plugin 2 https://github.com/matrix-org/matrix-android-sdk2 2 https://github.com/xnio/xnio 2 https://github.com/OpenAPITools/openapi-generator 2 https://github.com/reactor/reactor-netty 2 https://github.com/apiman/apiman 2 https://github.com/dropwizard/dropwizard 2 https://github.com/eclipse-ee4j/mojarra 2 https://github.com/swagger-api/swagger-parser 2 https://github.com/apache/tapestry-5 2 https://github.com/jeecgboot/JeecgBoot 2 https://github.com/HL7/fhir-ig-publisher 2 https://github.com/eclipse-californium/californium 2 https://github.com/apache/solr 2 https://github.com/apache/myfaces 2 https://github.com/yahoo/elide 2 https://github.com/apache/ranger 2 https://github.com/akka/akka-http 2 https://github.com/qos-ch/logback 2 https://github.com/spray/spray-json 2 https://github.com/jenkinsci/pipeline-model-definition-plugin 2 https://github.com/http4s/blaze 2 https://github.com/jenkinsci/pipeline-maven-plugin 2 https://github.com/jenkinsci/build-failure-analyzer-plugin 2 https://github.com/jenkinsci/code-coverage-api-plugin 2 https://github.com/ratpack/ratpack 2 https://github.com/opensearch-project/security 2 https://github.com/jenkinsci/config-file-provider-plugin 2 https://github.com/eclipse/milo 2 https://github.com/vert-x3/vertx-web 2 https://github.com/grpc/grpc 2 https://github.com/jenkinsci/pipeline-input-step-plugin 2 https://github.com/apache/hbase 2 https://github.com/spring-projects/spring-security-samples 2 https://github.com/hapifhir/org.hl7.fhir.core 2 https://github.com/jenkinsci/jacoco-plugin 1 https://github.com/Adobe-Consulting-Services/acs-aem-commons 1 https://github.com/jhy/jsoup 1 https://github.com/spring-projects/spring-ldap 1 https://github.com/neo4j-contrib/neo4j-apoc-procedures 1 https://github.com/blackears/svgSalamander 1 https://github.com/opengoofy/hippo4j 1 https://github.com/xwiki-contrib/jira 1 https://github.com/javaee/jersey-1.x 1 https://github.com/jenkinsci/aws-codebuild-plugin 1 https://github.com/TaleLin/lin-cms-spring-boot 1 https://github.com/vaadin/flow 1 https://github.com/prestosql/presto 1 https://github.com/RIPE-NCC/rpki-validator-3 1 https://github.com/GeyserMC/Geyser 1 https://github.com/walmartlabs/concord 1 https://github.com/fracpete/vfsjfilechooser2 1 https://github.com/apache/ant 1 https://github.com/airlift/aircompressor 1 https://github.com/JAckLosingHeart/CWE-378 1 https://github.com/jenkinsci/cas-plugin 1 https://github.com/apache/sling-org-apache-sling-servlets-resolver 1 https://github.com/h00klod0er/ureport2-vuln 1 https://github.com/xwiki/xwiki-commons 1 https://github.com/eclipse/birt 1 https://github.com/samtools/htsjdk 1 https://github.com/jenkinsci/electricflow-plugin 1 https://github.com/wildfly/wildfly 1 https://github.com/jenkinsci/clif-performance-testing-plugin 1 https://github.com/apache/ws-wss4j 1 https://github.com/netty/netty-incubator-codec-ohttp 1 https://github.com/jenkinsci/warnings-ng-plugin 1 https://github.com/apache/avro 1 https://github.com/codehaus-plexus/plexus-archiver 1 https://github.com/jenkinsci/fitnesse-plugin 1 https://github.com/picketlink/picketlink 1 https://github.com/apache/xerces2-j 1 https://github.com/apache/zeppelin 1 https://github.com/OpenTSDB/opentsdb 1 https://github.com/jenkinsci/spring-config-plugin 1 https://github.com/InductiveComputerScience/pbJson 1 https://github.com/apache/thrift 1