maven
Security Advisories in maven
High
3 days ago
OmniFaces: Forged combined-resource IDs and related output/push boundaries
maven
org.omnifaces:omnifaces
High
3 days ago
blaze: Unbounded WebSocket message aggregation in http4s-blaze-server
maven
org.http4s:http4s-blaze-server_3, org.http4s:http4s-blaze-server_2.12, org.http4s:http4s-blaze-server_2.13
High
3 days ago
blaze: Chunked-body trailer fields promoted into Request.headers in blaze-server (front-end header-sanitization bypass)
maven
org.http4s:blaze-http_2.13, org.http4s:blaze-http_3, org.http4s:blaze-http_2.12
High
3 days ago
blaze: Multiple HTTP/1.1 request-smuggling primitives in blaze's Java wire parser
maven
org.http4s:blaze-http_2.13, org.http4s:blaze-http_3, org.http4s:http4s-blaze-server_2.13
Critical
3 days ago
OpenDJ SASL PLAIN authzid bypassing the proxy ACI scope check
maven
org.openidentityplatform.opendj:opendj-server-legacy
Critical
3 days ago
OpenDJ unauthenticated SSRF, local file read and unbounded-read DoS in the DSMLv2 gateway
maven
org.openidentityplatform.opendj:opendj-dsml-servlet
Critical
3 days ago
OpenAM: Unauthenticated Remote Code Execution via Class.forName in AuthXMLUtils.createCustomCallback
maven
org.openidentityplatform.openam:openam-core
Moderate
3 days ago
OpenAM Reflected XSS in the OAuth2/OIDC `wap` consent page
maven
org.openidentityplatform.openam:openam-oauth2
Critical
3 days ago
OpenAM: WebAuthn Java deserialization RCE via ObjectInputFilter depth>1 bypass
maven
org.openidentityplatform.openam:openam-auth-webauthn
High
3 days ago
Netty: Denial of Service in XmlFrameDecoder via CPU Exhaustion
maven
io.netty:netty-codec-xml
Moderate
3 days ago
Netty: Memory Leak in DNS Record Decoder via Malformed Domain Names
maven
io.netty:netty-codec-dns
Low
3 days ago
AWS CDK CodeBuild S3 Log Encryption Boolean Inversion
pypi, go, maven, nuget, npm
aws-cdk.aws-codebuild, aws-cdk-lib, github.com/aws/aws-cdk-go/awscdk, software.amazon.awscdk:codebuild, Amazon.CDK.AWS.CodeBuild, @aws-cdk/aws-codebuild, github.com/aws/aws-cdk-go/awscdk/v2, software.amazon.awscdk:aws-cdk-lib, Amazon.CDK.Lib
Moderate
3 days ago
LZ4 Java: Native XXHash implementations can crash the JVM when passed invalid byte array ranges
maven
org.lz4:lz4-java, at.yawk.lz4:lz4-java
Moderate
4 days ago
c3p0 can, in combination with other libraries, compose to a "sink" for deserialization gadgets
maven
com.mchange:c3p0
High
5 days ago
Eclipse Jetty: DoS attack triggering OutOfMemory with 100-Continue requests
maven
org.eclipse.jetty:jetty-server
Moderate
5 days ago
Eclipse Jetty: HTTP Authority/Host mismatch
maven
org.eclipse.jetty:jetty-server
Moderate
5 days ago
Eclipse Jetty: Cross-Request Leakage for trailers on HTTP/1.1 keep-alive connections
maven
org.eclipse.jetty:jetty-server
High
5 days ago
Eclipse Jetty Digest Authentication: ISO-8859-1 lossy encoding allows authentication bypass via character substitution
maven
org.eclipse.jetty:jetty-security
Moderate
5 days ago
Netty: CRLF Injection via Multipart Filename in Netty HttpPostRequestEncoder
maven
io.netty:netty-codec-http
Moderate
5 days ago
Netty: STOMP CONNECT Frame Header Injection in Netty
maven
io.netty:netty-codec-stomp
Moderate
5 days ago
Netty: HAProxy V1 Protocol CRLF Injection via AF_UNIX Address
maven
io.netty:netty-codec-haproxy
High
5 days ago
Netty: [Bzip2Decoder] Infinite Loop in RLE State Machine Leads to Event-Loop Thread Hang
maven
io.netty:netty-codec, io.netty:netty-codec-compression
Moderate
5 days ago
Netty: [codec-http2] Lack of Host Header Deduplication in HTTP/2→HTTP/1.x Translation Leads to Request Routing Bypass
maven
io.netty:netty-codec-http2
Moderate
5 days ago
Netty: [HttpContentEncoder] Unbounded Per-Connection Queue Growth via HTTP/1.1 Pipelining Leads to Denial of Service
maven
io.netty:netty-codec-http
Moderate
5 days ago
Netty: WebSockets V07/V08 handshaker missing Connection/Upgrade validation
maven
io.netty:netty-codec-http
High
5 days ago
Netty: TOCTOU in OcspServerCertificateValidator
maven
io.netty:netty-handler-ssl-ocsp
High
5 days ago
Netty: Out-of-date OCSP Responses Accepted by OcspServerCertificateValidator
maven
io.netty:netty-handler-ssl-ocsp
High
5 days ago
Netty: Missing CertificateID Validation in OCSP Response Allows Replay Attacks
maven
io.netty:netty-handler-ssl-ocsp
High
5 days ago
Netty XML: Injection / Risky Sink — unconfigured XML factory with active DTD and entity handling
maven
io.netty:netty-codec-xml
High
5 days ago
Netty: Memory Exhaustion via HTTP/3 Reserved Frame Types
maven
io.netty:netty-codec-http3
Moderate
5 days ago
Netty: Security Control Bypass via CORS Short-Circuit Failure
maven
io.netty:netty-codec-http
High
5 days ago
Netty: [SpdyHttpDecoder] ByteBuf Reference Leak on RST_STREAM Leads to Native Memory Exhaustion
maven
io.netty:netty-codec-http
High
5 days ago
Netty: [codec-haproxy] Signed-Byte Sentinel Collision in HAProxyMessageDecoder Leads to Unbounded Memory Exhaustion
maven
io.netty:netty-codec-haproxy
High
5 days ago
Netty SPDY zlib header block continues decoded expansion after maxHeaderSize truncation
maven
io.netty:netty-codec-http
High
5 days ago
Netty SPDY SETTINGS frame count materializes unbounded settings map
maven
io.netty:netty-codec-http
Moderate
6 days ago
jackson-databind: @JsonView ypassed for @JsonUnwrapped container properties on deserialization
maven
tools.jackson.core:jackson-databind, com.fasterxml.jackson.core:jackson-databind
High
6 days ago
jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq)
maven
tools.jackson.core:jackson-core, com.fasterxml.jackson.core:jackson-core
Moderate
6 days ago
jackson-databind: `@JsonView` bypass for creator properties with `@JsonTypeInfo(include=As.EXTERNAL_PROPERTY)`
maven
com.fasterxml.jackson.core:jackson-databind
Moderate
6 days ago
jackson-databind: @JsonIgnore on a Record property is bypassed with a PropertyNamingStrategy
maven
tools.jackson.core:jackson-databind, com.fasterxml.jackson.core:jackson-databind
High
6 days ago
PostgreSQL JDBC Driver: Silent channel-binding authentication downgrade via unsupported certificate algorithms
maven
org.postgresql:postgresql
High
10 days ago
AWS-JDBC Wrapper: Privilege Escalation in Aurora PostgreSQL instance
maven
software.amazon.jdbc:aws-advanced-jdbc-wrapper
High
11 days ago
ArcadeDB has cross-database IDOR: /ts/*, /batch/*, Prometheus and Grafana handlers bypass authorization
maven
com.arcadedb:arcadedb-server
High
11 days ago
ArcadeDB: Scripting authorization gate (GHSA-48qw-824m-86pr) bypassed via SQL DEFINE FUNCTION ... LANGUAGE js
maven
com.arcadedb:arcadedb-engine
High
11 days ago
ArcadeDB: Trigger scripts run with java.lang.* allowed, enabling OS command execution (RCE)
maven
com.arcadedb:arcadedb-engine
High
11 days ago
ArcadeDB: Privilege escalation via reader role in /api/v1/command JS scripting language — arbitrary host file read
maven
com.arcadedb:arcadedb-server
High
11 days ago
ArcadeDB: Read-only users can mutate database schema (incomplete fix of CVE-2026-44221)
maven
com.arcadedb:arcadedb-engine
High
11 days ago
ArcadeDB: IMPORT DATABASE allows SSRF and arbitrary local file read by authenticated users
maven
com.arcadedb:arcadedb-engine
High
12 days ago
dd-trace-java: Improper parsing of W3C baggage headers may lead to DoS
maven
com.datadoghq:dd-java-agent
High
13 days ago
Netty: Denial of Service via Unbounded Headers in StompSubframeDecoder
maven
io.netty:netty-codec-stomp
High
14 days ago
Apollo ConfigService access key authentication bypass via raw config file appId parsing
maven
com.ctrip.framework.apollo:apollo
High
14 days ago
Apollo ConfigService access key authentication bypass via appId parsing and non-canonical matching
maven
com.ctrip.framework.apollo:apollo
Moderate
14 days ago
Apollo Portal: There is a risk of unauthorized access to the Apollo configuration center
maven
com.ctrip.framework.apollo:apollo
High
18 days ago
org.hl7.fhir.core: ReDoS via FHIRPath matches()/replaceMatches() in FHIR Validator HTTP Endpoint
maven
ca.uhn.hapi.fhir:org.hl7.fhir.validation.cli, ca.uhn.hapi.fhir:org.hl7.fhir.validation, ca.uhn.hapi.fhir:org.hl7.fhir.r5, ca.uhn.hapi.fhir:org.hl7.fhir.r4b, ca.uhn.hapi.fhir:org.hl7.fhir.r4, ca.uhn.hapi.fhir:org.hl7.fhir.dstu3, ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may, ca.uhn.hapi.fhir:org.hl7.fhir.dstu2
Moderate
18 days ago
Micronaut: DefaultHttpClient follows redirects, forwarding Authorization, Cookie, and Proxy-Authorization headers
maven
io.micronaut:micronaut-http-client
High
18 days ago
Micronaut doesn't set a maximum redirect count for its HTTP Client, enabling infinite loop DoS
maven
io.micronaut:micronaut-http-client
High
19 days ago
NL Portal: IDOR allows any authenticated user to complete and tamper with another user's taak
maven
nl.nl-portal:taak
Moderate
19 days ago
NL Portal: Missing per-user authorization on document and decision GraphQL queries in nl-portal-backend-libraries
maven
nl.nl-portal:besluiten, nl.nl-portal:documenten-api
Moderate
19 days ago
DSpace: Path Traversal is possible through LDN message generation
maven
org.dspace:dspace-api
Moderate
19 days ago
DSpace: ORE resource URI does not validate scheme for non-web resources
maven
org.dspace:dspace-api
Moderate
19 days ago
DSpace has a possible Path Traversal Vulnerability in its Curation Task Reporter output path
maven
org.dspace:dspace-api
High
19 days ago
DSpace has possible Remote Code Execution (RCE) through Velocity Templates used by LDN
maven
org.dspace:dspace-api
High
20 days ago
XWiki Platform Old Core: Resource path traversal via /skin/ action endpoint in Jetty 12+
maven
org.xwiki.platform:xwiki-platform-oldcore
High
21 days ago
OpenRemote has Authenticated SQL Injection via Datapoint Crosstab Export
maven
io.openremote:openremote-manager
High
21 days ago
OpenRemote has an incomplete fix for CVE-2026-40882: XXE in KNXProtocol.startAssetImport() allows arbitrary file read via unprotected XMLInputFactory
maven
io.openremote:openremote-agent
High
21 days ago
OpenRemote has Cross-Realm User Information Disclosure in UserResourceImpl
maven
io.openremote:openremote-manager
Moderate
21 days ago
OpenRemote read-only asset users can write predicted datapoints
maven
io.openremote:openremote-manager
Critical
21 days ago
Apache Camel DNS Has Improper Input Validation, Leading to Server-Side Request Forgery (SSRF)
maven
org.apache.camel:camel-dns
Critical
21 days ago
Apache Camel: KeycloakSecurityPolicy has Improper Authentication, Missing Authentication for Critical Function and Failing Open Vulnerabilities
maven
org.apache.camel:camel-keycloak
Critical
21 days ago
Apache Camel: camel-mongodb-gridfs producer allows GridFS operation override and NoSQL operator injection via unfiltered gridfs.* HTTP headers
maven
org.apache.camel:camel-mongodb-gridfs
Critical
25 days ago
LaunchServer FileServerHandler has an unauthenticated path traversal issue
maven
pro.gravit.launcher:launchserver-api
High
25 days ago
Keycloak: Unauthorized access via improper validation of encrypted SAML assertions
maven
org.keycloak:keycloak-services
High
26 days ago
OnGres SCRAM silent channel-binding authentication downgrade via unsupported certificate algorithms
maven
com.ongres.scram:scram-common, com.ongres.scram:scram-client
High
26 days ago
Keycloak has privilege escalation via improper scope mapping enforcement
maven
org.keycloak:keycloak-services
Low
26 days ago
land.oras:oras-java-sdk: Symlink-based path traversal in ArchiveUtils.untar / unzip allows arbitrary file write outside extraction directory
maven
land.oras:oras-java-sdk
High
26 days ago
GeoNetwork has ACL bypass on Elasticsearch search when request body omits query field
maven
org.geonetwork-opensource:geonetwork
High
26 days ago
GeoNetwork has reflected XSS through client-side template injection
maven
org.geonetwork-opensource:geonetwork
Low
27 days ago
Sigstore Java has a vulnerability with bundle verification of integratedTime
maven
dev.sigstore:sigstore-java
Moderate
28 days ago
OpenAM OAuth Authorization Bypass via PKCE Challenge
maven
org.openidentityplatform.openam:openam-oauth2
High
28 days ago
OpenAM OAuth Client Impersonation via JWKS Resolver Cache
maven
org.openidentityplatform.openam:openam-oauth2
High
28 days ago
OpenAM Authenticated RCE via Groovy Sandbox Escape
maven
org.openidentityplatform.openam:openam-scripting
High
about 1 month ago
OpenAM Account Takeover via Unverified Password Change in OAuth2 Module
maven
org.openidentityplatform.openam:openam-auth-oauth2
High
about 1 month ago
OpenAM Authentication Bypass via MSISDN LDAP Injection
maven
org.openidentityplatform.openam:openam-auth-msisdn
Moderate
about 1 month ago
nextflow auth login command has incorrect default permissions
maven
io.nextflow:nextflow
High
about 1 month ago
OpenAM: Unauthenticated Authentication Bypass via RADIUS Spoofing
maven
org.openidentityplatform.openam:openam-radius
High
about 1 month ago
OpenAM Arbitrary OAuth Token Minting via Push Registration
maven
org.openidentityplatform.openam:openam-oauth2
High
about 1 month ago
OpenAM has Unsafe Java Deserialization via SNS
maven
org.openidentityplatform.openam:openam-push-notification
Critical
about 1 month ago
OpenAM Pre-auth User Profile Tampering via Anonymous SOAP Authn in Liberty IDPP/Discovery Endpoints
maven
org.openidentityplatform.openam:openam-federation-library
Critical
about 1 month ago
OpenAM: Pre-auth RCE via Java Deserialization in WebAuthn Authenticator Storage
maven
org.openidentityplatform.openam:openam-auth-webauthn
Moderate
about 1 month ago
OHttpVersionChunkDraft: Missing Final-Chunk Enforcement Leads to Undetected Stream Truncation
maven
io.netty.incubator:netty-incubator-codec-ohttp
Moderate
about 1 month ago
jackson-databind has @JsonView bypass for setterless creator properties
maven
tools.jackson.core:jackson-databind, com.fasterxml.jackson.core:jackson-databind
Moderate
about 1 month ago
jackson-databind's renamed @JsonIgnore'd setters can deserialize via private fields
maven
tools.jackson.core:jackson-databind, com.fasterxml.jackson.core:jackson-databind
Moderate
about 1 month ago
jackson-databind has case-insensitive deserialization bypasses per-property @JsonIgnoreProperties
maven
tools.jackson.core:jackson-databind
Moderate
about 1 month ago
jackson-databind: InetSocketAddress deserialization triggers eager DNS resolution (SSRF)
maven
tools.jackson.core:jackson-databind, com.fasterxml.jackson.core:jackson-databind
High
about 1 month ago
jackson-databind has an array subtype allowlist bypass in BasicPolymorphicTypeValidator (allowIfSubTypeIsArray)
maven
tools.jackson.core:jackson-databind, com.fasterxml.jackson.core:jackson-databind
High
about 1 month ago
jackson-databind has a PolymorphicTypeValidator bypass via generic type parameters that allows arbitrary class instantiation
maven
tools.jackson.core:jackson-databind, com.fasterxml.jackson.core:jackson-databind
Moderate
about 1 month ago
jackson-databind: Deeply nested JsonNode throws StackOverflowError for toString()
maven
com.fasterxml.jackson.core:jackson-databind
Moderate
about 1 month ago
jackson-databind has a @JsonView bypass for unwrapped creator parameters
maven
tools.jackson.core:jackson-databind, com.fasterxml.jackson.core:jackson-databind
High
about 1 month ago
OpenAM Unauthenticated Session Hijacking via Information Exposure in CDCServlet
maven
org.openidentityplatform.openam:openam-federation
Filter by Severity
Filter by Package
org.jenkins-ci.main:jenkins-core
252
org.apache.tomcat:tomcat
157
com.liferay.portal:release.portal.bom
151
com.liferay.portal:release.dxp.bom
124
org.keycloak:keycloak-services
97
com.fasterxml.jackson.core:jackson-databind
79
org.apache.struts:struts2-core
59
org.apache.tomcat.embed:tomcat-embed-core
55
org.keycloak:keycloak-core
50
org.xwiki.platform:xwiki-platform-oldcore
46
org.elasticsearch:elasticsearch
44
io.undertow:undertow-core
39
net.mingsoft:ms-mcms
39
com.thoughtworks.xstream:xstream
37
com.jfinal:jfinal
36
org.jenkins-ci.plugins:script-security
34
org.apache.tomcat:tomcat-catalina
33
org.opencms:opencms-core
31
org.apache.solr:solr-core
30
org.springframework.security:spring-security-core
30
org.eclipse.jetty:jetty-server
29
org.keycloak:keycloak-parent
26
org.apache.openmeetings:openmeetings-parent
25
org.bouncycastle:bcprov-jdk14
24
org.xwiki.platform:xwiki-platform-web-templates
22
io.netty:netty-codec-http
22
org.cloudfoundry.identity:cloudfoundry-identity-server
21
org.apache.nifi:nifi
21
org.apache.tomcat:tomcat-coyote
20
com.vaadin:vaadin-bom
18
org.apache.activemq:activemq-client
18
com.liferay.portal:com.liferay.portal.impl
18
org.springframework:spring-core
18
org.apache.jspwiki:jspwiki-main
18
org.apache.inlong:manager-pojo
17
org.apache.geode:geode-core
17
org.apache.dolphinscheduler:dolphinscheduler
17
org.springframework:spring-webmvc
16
org.apache.ranger:ranger
16
org.apache.dubbo:dubbo
16
org.apache.struts.xwork:xwork-core
15
org.bouncycastle:bcprov-jdk15
15
org.xwiki.platform:xwiki-platform-web
15
ai.h2o:h2o-core
15
org.apache.activemq:apache-activemq
15
org.opensearch.plugin:opensearch-security
14
org.geoserver.web:gs-web-app
14
org.apache.tika:tika-core
13
h2o
13
org.apache.kylin:kylin
13
com.vaadin:flow-server
13
org.apache.hadoop:hadoop-main
13
org.jenkins-ci.plugins:git
13
org.jenkins-ci.plugins:email-ext
12
org.springframework:spring-web
12
org.apache.cassandra:cassandra-all
12
org.apache.activemq:activemq-broker
12
org.jeecgframework.boot:jeecg-boot-parent
12
org.apache.hadoop:hadoop-common
12
org.graylog2:graylog2-server
12
org.apache.cxf:cxf-core
12
org.jenkins-ci.plugins.workflow:workflow-cps
12
org.apache.streampark:streampark
12
org.apache.shiro:shiro-core
12
org.apache.jspwiki:jspwiki-war
11
org.postgresql:postgresql
11
org.igniterealtime.openfire:parent
11
org.apache.activemq:activemq-all
11
org.xwiki.platform:xwiki-platform-administration-ui
11
org.apache.camel:camel-core
11
org.apache.james:james-server
11
io.netty:netty
11
org.apache.commons:commons-compress
11
org.apache.archiva:archiva
11
org.mortbay.jetty:jetty
11
com.xuxueli:xxl-job
11
org.xwiki.platform:xwiki-platform-rest-server
11
org.jenkins-ci.plugins:active-directory
11
org.jboss.netty:netty
10
org.apache.inlong:manager-service
10
io.netty:netty-handler
10
org.bouncycastle:bcprov-jdk15to18
10
ch.qos.logback:logback-core
10
org.springframework:spring-webflux
10
org.apache.linkis:linkis
10
org.bouncycastle:bcprov-jdk15on
10
org.craftercms:crafter-studio
10
com.sonyericsson.jenkins.plugins.bfa:build-failure-analyzer
10
org.apache.logging.log4j:log4j-core
10
org.jenkins-ci.plugins.workflow:workflow-cps-global-lib
10
io.netty:netty-codec-http2
10
tools.jackson.core:jackson-databind
9
cn.hutool:hutool-core
9
org.opennms:opennms
9
org.jenkins-ci.plugins:electricflow
9
org.apache.xmlgraphics:batik
9
org.apache.spark:spark-core_2.11
9
org.opencrx:opencrx-core-models
9
org.apache.dolphinscheduler:dolphinscheduler-api
9
io.jenkins:configuration-as-code
9
org.keycloak:keycloak-quarkus-server
9
org.jenkins-ci.plugins:config-file-provider
9
org.apache.zookeeper:zookeeper
9
org.apache.hive:hive
9
org.apache.cxf:cxf
9
org.apache.hive:hive-exec
9
org.apache.tapestry:tapestry-core
9
mysql:mysql-connector-java
8
org.apache.pdfbox:pdfbox
8
org.apache.druid:druid
8
org.jenkins-ci.plugins:credentials-binding
8
org.apache.mina:mina-core
8
org.yaml:snakeyaml
8
com.ruoyi:ruoyi
8
org.apache.zeppelin:zeppelin
8
org.apache.ambari:ambari
8
org.jenkins-ci.plugins:ec2
8
org.apache.hive:hive-service
8
org.apache.wicket:wicket-core
8
org.silverpeas.core:silverpeas-core-web
8
io.jenkins.blueocean:blueocean
8
org.jenkins-ci.plugins:oic-auth
8
org.bouncycastle:bcprov-jdk18on
8
com.hazelcast:hazelcast
8
org.apache.santuario:xmlsec
8
org.springframework.cloud:spring-cloud-config-server
8
org.bouncycastle:bc-fips
8
org.jeecgframework.boot:jeecg-boot-common
8
org.apache.ozone:ozone-main
8
org.apache.spark:spark-core_2.10
8
org.jenkins-ci.plugins:subversion
8
org.dspace:dspace-api
8
org.jenkins-ci.plugins:rundeck
7
io.jenkins.plugins:warnings-ng
7
ca.uhn.hapi.fhir:org.hl7.fhir.validation
7
io.atomix:atomix
7
org.webjars.npm:jquery-ui
7
ca.uhn.hapi.fhir:org.hl7.fhir.utilities
7
io.dataease:dataease-plugin-common
7
io.vertx:vertx-core
7
org.jeecgframework.boot:jeecg-boot-base
7
org.apache.activemq:activemq-parent
7
org.geoserver:gs-wms
7
org.apache.derby:derby
7
org.apache.karaf:apache-karaf
7
org.apache.kafka:kafka-clients
7
io.openremote:openremote-manager
7
net.gleske:jervis
7
ca.uhn.hapi.fhir:org.hl7.fhir.r5
7
org.apache.syncope:syncope-core
7
com.ctrip.framework.apollo:apollo
7
ca.uhn.hapi.fhir:org.hl7.fhir.r4b
7
net.opentsdb:opentsdb
7
com.vaadin:vaadin-server
7
org.jboss.resteasy:resteasy-client
7
io.jenkins.plugins:miniorange-saml-sp
7
org.jenkins-ci.plugins:htmlpublisher
7
org.owasp.antisamy:antisamy
7
org.openidentityplatform.openam:openam-oauth2
7
org.apache.atlas:atlas-common
7
org.owasp.esapi:esapi
7
io.vertx:vertx-web
7
org.jruby:jruby-stdlib
7
org.apache.ignite:ignite-core
7
org.infinispan:infinispan-core
7
org.jenkins-ci.plugins:openshift-deployer
7
org.keycloak:keycloak-server-spi-private
7
org.opencastproject:opencast-kernel
7
tech.powerjob:powerjob
7
org.apache.inlong:manager-web
7
jQuery.UI.Combined
7
org.apache.axis:axis
7
io.jenkins.plugins:cavisson-ns-nd-integration
7
rubygems-update
7
org.apache.poi:poi
7
jquery-ui
7
org.jenkins-ci.plugins:jobConfigHistory
7
com.xuxueli:xxl-job-admin
7
org.jenkins-ci.plugins:artifactory
7
org.jenkins-ci.plugins:azure-vm-agents
6
org.csanchez.jenkins.plugins:kubernetes
6
ca.uhn.hapi.fhir:org.hl7.fhir.r4
6
com.datapipe.jenkins.plugins:hashicorp-vault-plugin
6
org.xwiki.platform:xwiki-platform-flamingo-skin-resources
6
gov.nsa.emissary:emissary
6
org.apache.zeppelin:zeppelin-server
6
cn.hutool:hutool-json
6
org.jenkins-ci.plugins:ghprb
6
org.apache.streampipes:streampipes-parent
6
org.xwiki.commons:xwiki-commons-xml
6
org.apache.httpcomponents:httpclient
6
org.apache.struts:struts2-rest-plugin
6
commons-fileupload:commons-fileupload
6
com.liferay.portal:com.liferay.portal.kernel
6
com.sonyericsson.hudson.plugins.gerrit:gerrit-trigger
6
org.igniterealtime.openfire:xmppserver
6
org.jenkins-ci.plugins:mercurial
6
org.silverpeas.core:silverpeas-core
6
com.xuxueli:xxl-job-core
6
org.apache.mesos:mesos
6
Filter by Repository
https://github.com/xwiki/xwiki-platform
222
https://github.com/jenkinsci/jenkins
178
https://github.com/liferay/liferay-portal
170
https://github.com/apache/tomcat
118
https://github.com/keycloak/keycloak
89
https://github.com/FasterXML/jackson-databind
70
https://github.com/spring-projects/spring-framework
51
https://github.com/apache/struts
47
https://github.com/x-stream/xstream
37
https://github.com/apache/activemq
34
https://github.com/apache/inlong
31
https://github.com/CVEProject/cvelist
28
https://github.com/netty/netty
27
https://github.com/apache/nifi
26
https://github.com/geoserver/geoserver
26
https://github.com/bcgit/bc-java
25
https://github.com/apache/cxf
24
https://github.com/eclipse/jetty.project
23
https://github.com/jenkinsci/script-security-plugin
22
https://github.com/undertow-io/undertow
21
https://github.com/jeecgboot/jeecg-boot
20
https://github.com/OpenNMS/opennms
20
https://github.com/opencast/opencast
20
https://github.com/alkacon/opencms-core
19
https://github.com/cloudfoundry/uaa
19
https://github.com/apache/camel
18
https://github.com/vaadin/platform
18
https://github.com/apache/kylin
17
https://github.com/quarkusio/quarkus
16
https://github.com/xuxueli/xxl-job
15
https://github.com/spring-projects/spring-security
15
https://github.com/Graylog2/graylog2-server
14
https://github.com/apache/zeppelin
14
https://github.com/ming-soft/MCMS
14
https://github.com/OpenRefine/OpenRefine
13
https://github.com/apache/dolphinscheduler
13
https://github.com/dromara/hutool
13
https://github.com/igniterealtime/Openfire
12
https://github.com/DSpace/DSpace
12
https://github.com/h2oai/h2o-3
12
https://github.com/vaadin/flow
11
https://github.com/jenkinsci/git-plugin
10
https://github.com/opensearch-project/security
10
https://github.com/apache/lucene-solr
10
https://github.com/dataease/dataease
9
https://github.com/cui2shark/cms
9
https://github.com/pgjdbc/pgjdbc
8
https://github.com/vaadin/framework
8
https://github.com/jetty/jetty.project
8
https://github.com/apache/xmlgraphics-batik
8
https://github.com/apache/hadoop
8
https://github.com/vert-x3/vertx-web
8
https://github.com/jenkinsci/config-file-provider-plugin
8
https://github.com/xwiki/xwiki-commons
8
https://github.com/hazelcast/hazelcast
8
https://github.com/nahsra/antisamy
8
https://github.com/RhinoSecurityLabs/CVEs
7
https://github.com/apache/pulsar
7
https://github.com/jenkinsci/blueocean-plugin
7
https://github.com/apache/openmeetings
7
https://github.com/OpenTSDB/opentsdb
7
https://github.com/infinispan/infinispan
7
https://github.com/elastic/elasticsearch
7
https://github.com/ratpack/ratpack
7
https://github.com/apache/syncope
7
https://github.com/apache/tika
7
https://github.com/jenkinsci/build-failure-analyzer-plugin
7
https://github.com/rubygems/rubygems
7
https://github.com/jflyfox/jfinal_cms
7
https://github.com/rundeck/rundeck
7
https://github.com/http4s/http4s
7
https://github.com/ESAPI/esapi-java-legacy
6
https://github.com/JLLeitschuh/security-research
6
https://github.com/apache/hive
6
https://bitbucket.org/snakeyaml/snakeyaml
6
https://github.com/jquery/jquery-ui
6
https://github.com/apache/geode
6
https://github.com/playframework/playframework
6
https://github.com/OpenAPITools/openapi-generator
6
https://github.com/jenkinsci/electricflow-plugin
6
https://github.com/apache/solr
6
https://github.com/jenkinsci/gerrit-trigger-plugin
6
https://github.com/line/armeria
6
https://github.com/jenkinsci/fortify-on-demand-uploader-plugin
6
https://github.com/jenkinsci/ec2-plugin
6
https://github.com/jenkinsci/subversion-plugin
6
https://github.com/cui2shark/security
6
https://github.com/PowerJob/PowerJob
6
https://github.com/jenkinsci/configuration-as-code-plugin
6
https://github.com/resteasy/resteasy
6
https://github.com/qos-ch/logback
6
https://github.com/DrunkenShells/Disclosures
6
https://github.com/neo4j-contrib/neo4j-apoc-procedures
5
https://github.com/jenkinsci/gitlab-plugin
5
https://github.com/jenkinsci/m2release-plugin
5
https://github.com/jensdietrich/xshady-release
5
https://github.com/apache/karaf
5
https://github.com/apache/activemq-artemis
5
https://github.com/apache/james-project
5
https://github.com/h2database/h2database
5
https://github.com/apache/druid
5
https://github.com/jenkinsci/codedx-plugin
5
https://github.com/apache/jackrabbit
5
https://github.com/apache/shiro
5
https://github.com/jenkinsci/github-plugin
5
https://github.com/protocolbuffers/protobuf
5
https://github.com/grails/grails-core
5
https://github.com/apache/shenyu
5
https://bitbucket.org/connect2id/nimbus-jose-jwt
5
https://github.com/alibaba/nacos
5
https://github.com/jenkinsci/junit-plugin
5
https://github.com/jenkinsci/email-ext-plugin
5
https://github.com/restlet/restlet-framework-java
5
https://github.com/jenkinsci/active-directory-plugin
5
https://github.com/jenkinsci/support-core-plugin
5
https://github.com/jettison-json/jettison
5
https://github.com/snowflakedb/snowflake-jdbc
5
https://github.com/apache/httpcomponents-client
5
https://github.com/xwiki/xwiki-rendering
5
https://github.com/jenkinsci/workflow-cps-global-lib-plugin
5
https://github.com/jenkinsci/publish-over-ssh-plugin
5
https://github.com/ktorio/ktor
5
https://github.com/wso2/carbon-identity-framework
4
https://github.com/joniles/mpxj
4
https://github.com/pippo-java/pippo
4
https://github.com/powsybl/powsybl-core
4
https://github.com/nightcloudos/new_cms
4
https://github.com/stanfordnlp/corenlp
4
https://github.com/jenkinsci/xldeploy-plugin
4
https://github.com/jenkinsci/vmanager-plugin
4
https://github.com/jenkinsci/warnings-ng-plugin
4
https://github.com/apache/ranger
4
https://github.com/jenkinsci/libvirt-slave-plugin
4
https://github.com/jenkinsci/htmlpublisher-plugin
4
https://github.com/skylot/jadx
4
https://github.com/open-metadata/OpenMetadata
4
https://github.com/apache/streampipes
4
https://github.com/apache/iotdb
4
https://github.com/shopizer-ecommerce/shopizer
4
https://github.com/jenkinsci/cloudbees-jenkins-advisor-plugin
4
https://github.com/jenkinsci/fortify-plugin
4
https://github.com/HL7/fhir-ig-publisher
4
https://github.com/apiman/apiman
4
https://github.com/geonetwork/core-geonetwork
4
https://github.com/xerial/snappy-java
4
https://github.com/jenkinsci/matrix-project-plugin
4
https://github.com/jenkinsci/nexus-platform-plugin
4
https://github.com/AsyncHttpClient/async-http-client
4
https://github.com/unclebob/fitnesse
4
https://github.com/jenkinsci/hpe-application-automation-tools-plugin
4
https://github.com/jfinal/jfinal
4
https://github.com/wildfly/wildfly-core
4
https://github.com/micronaut-projects/micronaut-core
4
https://github.com/jenkinsci/credentials-binding-plugin
4
https://github.com/aws/aws-iot-device-sdk-java-v2
4
https://github.com/resteasy/Resteasy
4
https://github.com/jenkinsci/workflow-cps-plugin
4
https://github.com/jenkinsci/gitlab-oauth-plugin
4
https://github.com/reportportal/reportportal
4
https://github.com/openhab/openhab-webui
4
https://github.com/jenkinsci/git-client-plugin
4
https://github.com/jooby-project/jooby
4
https://github.com/jquery/jquery
4
https://github.com/HtmlUnit/htmlunit
4
https://github.com/itext/itext7
4
https://github.com/yamcs/yamcs
4
https://github.com/jenkinsci/job-config-history-plugin
4
https://github.com/jenkinsci/ansible-plugin
4
https://github.com/jenkinsci/active-choices-plugin
4
https://github.com/Robothy/local-s3
4
https://github.com/jenkinsci/p4-plugin
4
https://github.com/jenkinsci/rundeck-plugin
4
https://github.com/graphql-java/graphql-java
3
https://github.com/bcgit/bc-csharp
3
https://bitbucket.org/b_c/jose4j
3
https://github.com/jenkinsci/embeddable-build-status-plugin
3
https://github.com/hibernate/hibernate-validator
3
https://github.com/jenkinsci/cas-plugin
3
https://github.com/ls1intum/Ares
3
https://github.com/jenkinsci/gitlab-branch-source-plugin
3
https://github.com/reactor/reactor-netty
3
https://github.com/spring-projects/spring-boot
3
https://github.com/mbechler/marshalsec
3
https://github.com/jenkinsci/azure-credentials-plugin
3
https://github.com/aws/amazon-redshift-jdbc-driver
3
https://github.com/apache/santuario-java
3
https://github.com/jenkinsci/mercurial-plugin
3
https://github.com/li-yu320/cms
3
https://github.com/wildfly/wildfly
3
https://github.com/Adobe-Consulting-Services/acs-aem-commons
3
https://github.com/matrix-org/matrix-android-sdk2
3
https://github.com/apache/cxf-fediz
3
https://github.com/HubSpot/jinjava
3
https://github.com/apache/zookeeper
3
https://github.com/jenkinsci/kubernetes-plugin
3
https://svn.apache.org/viewvc/tomcat/tc7.0.x
3
https://github.com/akka/akka-http
3
https://github.com/vaadin/flow-components
3
https://github.com/javamelody/javamelody
3