maven
Security Advisories in maven
High
2 days ago
JavaCV: Integer Overflow in IPCameraFrameGrabber Causes Infinite-Loop DoS
maven
org.bytedeco:javacv
High
3 days ago
Junrar: RarVM VM_JMP maxOpCount bypass causes infinite CPU loop during RAR4 extraction
maven
com.github.junrar:junrar
Critical
10 days ago
Hazelcast allows arbitrary member memory access by low-privileged client
maven
com.hazelcast:hazelcast
High
10 days ago
Hazelcast has an authorization bypass in IMap Predicates API
maven
com.hazelcast:hazelcast
Moderate
10 days ago
AsyncHttpClient CookieStore Silently Overrides Caller's Explicit Cookie Header via setHeader (Bypass of CVE-2024-53990 Fix)
maven
org.asynchttpclient:async-http-client
Moderate
10 days ago
AsyncHttpClient: Cookies received over plaintext HTTP can plant, overwrite or delete Secure cookies set over HTTPS
maven
org.asynchttpclient:async-http-client
High
10 days ago
AsyncHttpClient: Unbounded WebSocket permessage-deflate decompression enables a decompression-bomb denial of service when compression is enabled
maven
org.asynchttpclient:async-http-client
High
10 days ago
AsyncHttpClient: Pooled connections can still be shared across NTLM, Negotiate and proxy logins
maven
org.asynchttpclient:async-http-client
Low
10 days ago
AsyncHttpClient: Digest authentication cnonce generated with a non-cryptographic random source
maven
org.asynchttpclient:async-http-client
Moderate
10 days ago
AsyncHttpClient: WebSocket proxy credentials sent to the origin server over a CONNECT tunnel
maven
org.asynchttpclient:async-http-client
Moderate
10 days ago
AsyncHttpClient: Cookie Domain attribute is not checked against the public suffix list, so a cookie can be set for co.uk
maven
org.asynchttpclient:async-http-client
Critical
10 days ago
AsyncHttpClient: Replay to a different host sends the original host request and credentials to the new host
maven
org.asynchttpclient:async-http-client
High
10 days ago
AsyncHttpClient: Digest challenge without a usable nonce downgrades to Basic and sends the password in cleartext
maven
org.asynchttpclient:async-http-client
Moderate
11 days ago
RabbitMQ: JSONReader in the default JSON-RPC mapper never terminates on truncated input, causing DoS
maven
com.rabbitmq:amqp-client
High
11 days ago
yawkat LZ4 Java: Native library extraction to a shared temporary directory is vulnerable to file replacement by another local user
maven
org.lz4:lz4-java, at.yawk.lz4:lz4-java
Low
11 days ago
yawkat LZ4 Java: LZ4BlockInputStream with stopOnEmptyBlock=false recurses once per empty block, causing StackOverflowError
maven
org.lz4:lz4-java, at.yawk.lz4:lz4-java
Moderate
11 days ago
yawkat LZ4 Java: LZ4FrameInputStream reallocates block buffers for every frame, allowing CPU and GC amplification from small inputs
maven
org.lz4:lz4-java, at.yawk.lz4:lz4-java
Moderate
11 days ago
RabbitMQ: Malformed UTF-8 in shortstr properties permanently disables RPC consumers
maven
com.rabbitmq:amqp-client
Moderate
11 days ago
RabbitMQ Java client: plaintext broker credentials leaked in exception message from ConnectionFactoryConfigurator.load()
maven
com.rabbitmq:amqp-client
Moderate
11 days ago
yawkat LZ4 Java: LZ4BlockInputStream allocates an unvalidated compressed length from the stream header
maven
org.lz4:lz4-java, at.yawk.lz4:lz4-java
Moderate
11 days ago
yawkat LZ4 Java: LZ4DecompressorWithLength allocates the unvalidated size from the 4-byte length header, so a 5-byte input triggers a 1 GiB allocation and OutOfMemoryError
maven
org.lz4:lz4-java, at.yawk.lz4:lz4-java
Moderate
13 days ago
Snowflake drivers writes sensitive information to logs
go, maven, pypi, npm
github.com/snowflakedb/gosnowflake/v2, net.snowflake:snowflake-jdbc-fips, net.snowflake:snowflake-jdbc-thin, net.snowflake:snowflake-jdbc, github.com/snowflakedb/gosnowflake, snowflake-connector-python, snowflake-sdk
Critical
13 days ago
Capacitor Android and iOS: remote content can be loaded at the app origin via the internal HTTP proxy path
npm, maven, swift
@capacitor/ios, @capacitor/android, com.capacitorjs:core, github.com/ionic-team/capacitor-swift-pm
High
16 days ago
Copernik XML Factory (stock JDK provider) has Improper restriction of XInclude resource resolution
maven
eu.copernik:copernik-xml-factory
High
17 days ago
jackson-core: UTF8DataInputJsonParser._reportInvalidToken() missing maxErrorTokenLength limit -> unbounded StringBuilder growth (DoS)
maven
com.fasterxml.jackson.core:jackson-core, tools.jackson.core:jackson-core
High
17 days ago
jackson-core: ReDoS: quadratic backtracking in NumberInput.PATTERN_FLOAT via looksLikeValidNumber()
maven
tools.jackson.core:jackson-core, com.fasterxml.jackson.core:jackson-core
High
18 days ago
jackson-databind quadratic forward-reference completion
maven
com.fasterxml.jackson.core:jackson-databind, tools.jackson.core:jackson-databind
High
18 days ago
jackson-databind retains every unknown raw type ID
maven
tools.jackson.core:jackson-databind, com.fasterxml.jackson.core:jackson-databind
Moderate
20 days ago
jackson-databind: Comparable missing from DefaultBaseTypeLimitingValidator's unsafe base types (incomplete PolymorphicTypeValidator denylist)
maven
com.fasterxml.jackson.core:jackson-databind, tools.jackson.core:jackson-databind
High
20 days ago
jackson-databind: Duration XMLGregorianCalendar Unbounded Number Parse DoS
maven
com.fasterxml.jackson.core:jackson-databind, tools.jackson.core:jackson-databind
Moderate
20 days ago
jackson-databind: Path Deserialization Missing Scheme Allowlist for FileSystemProvider Resolution
maven
com.fasterxml.jackson.core:jackson-databind, tools.jackson.core:jackson-databind
Moderate
20 days ago
jackson-databind: Incomplete fix for CVE-2026-54514: eager DNS resolution (SSRF) still present in InetAddress deserialization
maven
tools.jackson.core:jackson-databind, com.fasterxml.jackson.core:jackson-databind
Critical
24 days ago
http4s-scala-xml has an XML External Entity (XXE) processing issue
maven
org.http4s:http4s-scala-xml_3, org.http4s:http4s-scala-xml_2.13, org.http4s:http4s-scala-xml_2.12
High
25 days ago
Jawn: Quadratic parsing effort in AsyncParser
maven
org.typelevel:jawn-parser_3, org.typelevel:jawn-parser_2.13, org.typelevel:jawn-parser_2.12
High
25 days ago
Jawn: Uncontrolled nesting depth in JSON parser
maven
org.typelevel:jawn-parser_3, org.typelevel:jawn-parser_2.13, org.typelevel:jawn-parser_2.12
High
25 days ago
JLine: ReDoS in Built-in grep Command Amplified by Automatic `.*` Wrapping
maven
org.jline:jline-builtins
Moderate
25 days ago
JLine: ReDoS via `HISTORY_IGNORE` Configuration Variable
maven
org.jline:jline-reader
Critical
25 days ago
Moquette: Pattern-ACL wildcard injection (cross-tenant authorization bypass) plus a remote-unauthenticated DoS cluster, a Will-message authorization bypass, and a cross-session durable-corruption bug
maven
io.moquette:moquette-broker
Moderate
26 days ago
Graylog: Manager-to-Owner privilege escalation on saved searches and dashboards
maven
org.graylog2:graylog2-server
Moderate
26 days ago
MPXJ: Potential Path Traversal Vulnerability in Primavera P3 PRX and SureTrak STX readers
maven, nuget, pypi, rubygems
net.sf.mpxj:mpxj, net.sf.mpxj-for-vb, net.sf.mpxj-for-csharp, net.sf.mpxj, mpxj, MPXJ.Net
High
26 days ago
MPXJ: XXE Vulnerability in MerlinReader
pypi, nuget, rubygems, maven
mpxj, net.sf.mpxj-for-vb, net.sf.mpxj-for-csharp, net.sf.mpxj, MPXJ.Net, net.sf.mpxj:mpxj
High
30 days ago
io.moquette:moquette-broker has a Missing Authorization issue
maven
io.moquette:moquette-broker
Critical
about 1 month ago
org.xwiki.rendering:xwiki-rendering-xml has an Eval Injection issue
maven
org.xwiki.rendering:xwiki-rendering-xml
High
about 1 month ago
Opencast: Stored XSS in Paella player via WebVTT/DFXP caption cue text
npm, maven
paella-core, org.opencastproject:opencast-engage-paella-player-7
High
about 1 month ago
HAPI FHIR: SHCParser DEFLATE infinite loop causes denial of service
maven
ca.uhn.hapi.fhir:org.hl7.fhir.validation.cli, ca.uhn.hapi.fhir:org.hl7.fhir.validation, ca.uhn.hapi.fhir:org.hl7.fhir.r5
High
about 1 month ago
HAPI FHIR: SHCParser unbounded DEFLATE decompression causes denial of service
maven
ca.uhn.hapi.fhir:org.hl7.fhir.validation.cli, ca.uhn.hapi.fhir:org.hl7.fhir.validation, ca.uhn.hapi.fhir:org.hl7.fhir.r5
Moderate
about 1 month ago
AsyncHttpClient re-sends client-wide realm credentials to a cross-origin redirect target
maven
org.asynchttpclient:async-http-client
Moderate
about 1 month ago
AsyncHttpClient sends origin credentials to the proxy on the plaintext CONNECT request
maven
org.asynchttpclient:async-http-client
High
about 1 month ago
AsyncHttpClient's unbounded HTTP/1.1 response decompression enables a decompression-bomb denial of service
maven
org.asynchttpclient:async-http-client
Low
about 1 month ago
AsyncHttpClient doesn't verify SCRAM and Digest mutual-authentication responses
maven
org.asynchttpclient:async-http-client
Moderate
about 1 month ago
Kestra: Unauthenticated management/actuator endpoints exposed on port 8081 (/env, /loggers) bypass API basic-auth
maven
io.kestra:kestra
High
about 1 month ago
Kestra: SSRF via Pebble http() function allows unauthenticated access to internal services & cloud metadata
maven
io.kestra:kestra-core, io.kestra:core
Low
about 1 month ago
Junrar: LocalFolderExtractor mkdir escape allows directory creation outside extraction root
maven
com.github.junrar:junrar
Low
about 1 month ago
MariaDB Connector/J does not enforce allowLocalInfile=false on server-initiated LOCAL INFILE requests
maven
org.mariadb.jdbc:mariadb-java-client
High
about 1 month ago
Wire: Unauthenticated decoder crash via 32-bit length integer overflow in ByteArrayProtoReader32 (incomplete fix of CVE-2026-45799)
maven
com.squareup.wire:wire-runtime
High
about 1 month ago
RabbitMQ Java client has frame-level OOM: Math.min(maxInboundMessageBodySize, 0) defeats frame size enforcement
maven
com.rabbitmq:amqp-client
High
about 1 month ago
Http4s: Ember HTTP/2 buffers a frame's declared payload before checking SETTINGS_MAX_FRAME_SIZE
maven
org.http4s:http4s-ember-core_3, org.http4s:http4s-ember-core_2.13, org.http4s:http4s-ember-core_2.12
Moderate
about 1 month ago
Http4s: ResourceService and Webjar Service path escape via percent-encoded separators
maven
org.http4s:http4s-server_2.13, org.http4s:http4s-server_3, org.http4s:http4s-server_2.12
High
about 1 month ago
Http4s Ember HTTP/2: unbounded continuation frame accumulation
maven
org.http4s:http4s-ember-core_3, org.http4s:http4s-ember-core_2.13, org.http4s:http4s-ember-core_2.12
Moderate
about 1 month ago
Http4s: Ember chunk parser lenience (TE.TE request smuggling)
maven
org.http4s:http4s-ember-core_3, org.http4s:http4s-ember-core_2.13, org.http4s:http4s-ember-core_2.12
Moderate
about 1 month ago
Http4s: CookieJar middleware matches by substring, leaking cookies cross-origin
maven
org.http4s:http4s-client_3, org.http4s:http4s-client_2.13, org.http4s:http4s-client_2.12
Moderate
about 1 month ago
Http4s: CookieJar middleware accepts arbitrary Set-Cookie domain
maven
org.http4s:http4s-client_3, org.http4s:http4s-client_2.13, org.http4s:http4s-client_2.12
High
about 1 month ago
Http4s Ember HTTP/2 has an unbounded outbound frame queue
maven
org.http4s:http4s-ember-core_2.13, org.http4s:http4s-ember-core_3, org.http4s:http4s-ember-core_2.12
High
about 1 month ago
Http4s: DigestAuth nonce map grows unbounded
maven
org.http4s:http4s-ember-server_3, org.http4s:http4s-ember-server_2.13, org.http4s:http4s-ember-server_2.12
Moderate
about 1 month ago
Http4s: DigestAuth allows replay of captured requests
maven
org.http4s:http4s-ember-core_3, org.http4s:http4s-ember-core_2.13, org.http4s:http4s-ember-core_2.12
High
about 1 month ago
Http4s Ember Transfer-Encoding value parsing (TE.CL / TE.0 request smuggling)
maven
org.http4s:http4s-ember-core_3, org.http4s:http4s-ember-core_2.13, org.http4s:http4s-ember-core_2.12
Critical
about 1 month ago
Http4s Ember accepts Transfer-Encoding combined with Content-Length (CL.TE request smuggling)
maven
org.http4s:http4s-ember-core_3, org.http4s:http4s-ember-core_2.13, org.http4s:http4s-ember-core_2.12
High
about 1 month ago
Http4s Ember HTTP/2 does not enforce SETTINGS_MAX_CONCURRENT_STREAMS
maven
org.http4s:http4s-ember-core_3, org.http4s:http4s-ember-core_2.13, org.http4s:http4s-ember-core_2.12
High
about 1 month ago
Http4s Ember HTTP/2: unbounded inbound body buffering
maven
org.http4s:http4s-ember-core_3, org.http4s:http4s-ember-core_2.13, org.http4s:http4s-ember-core_2.12
High
about 1 month ago
Central Dogma: SSH host-key verification permanently disabled in Git mirror (SshGitMirror)
maven
com.linecorp.centraldogma:centraldogma-server-mirror-git
Critical
about 1 month ago
Central Dogma: Hard-coded ZooKeeper replication secret 'ch4n63m3' with silent fallback enables cluster takeover
maven
com.linecorp.centraldogma:centraldogma-server
Moderate
about 1 month ago
Central Dogma: LDAP injection in SearchFirstActiveDirectoryRealm enables authentication confusion and audit log evasion
maven
com.linecorp.centraldogma:centraldogma-server-auth-shiro
Critical
about 1 month ago
Apache FreeMarker template loading mechanism vulnerable to path traversal
maven
org.freemarker:freemarker
High
about 1 month ago
GeoNetwork Web Module: Unauthenticaded Server-Side Request Forgery in SLD Tool
maven
org.geonetwork-opensource:gn-web-app
Critical
about 1 month ago
Netty: SNI Routing Bypass via Fragmented TLS ClientHello Causing Fallback to Default SslContext
maven
io.netty:netty-handler
Moderate
about 1 month ago
Netty: Fragmented ClientHello records trigger quadratic pre-handshake reassembly in default SNI parsing
maven
io.netty:netty-handler
High
about 2 months ago
Handlebars.java: Arbitrary file read in `SpringTemplateLoader` via URL-fragment suffix bypass
maven
com.github.jknack:handlebars-springmvc
Moderate
about 2 months ago
Apache Spark History Server allows stored cross-site scripting through unescaped application names
maven, pypi
org.apache.spark:spark-core_2.13, org.apache.spark:spark-core_2.12, pyspark
High
about 2 months ago
jolokia-service-jsr160 Incomplete target JMX Service URL deny list handling for user-controlled input
maven
org.jolokia:jolokia-service-jsr160
Moderate
about 2 months ago
org.mariadb:r2dbc-mariadb vulnerable to cleartext password disclosure to a man-in-the-middle server (clear-text auth plugins not gated on a secure transport)
maven
org.mariadb:r2dbc-mariadb
Moderate
about 2 months ago
org.mariadb:r2dbc-mariadb has Inappropriate Encoding for Output Context and Improper Encoding or Escaping of Output
maven
org.mariadb:r2dbc-mariadb
Moderate
about 2 months ago
org.mariadb.jdbc:mariadb-java-client has Inappropriate Encoding for Output Context
maven
org.mariadb.jdbc:mariadb-java-client
Moderate
about 2 months ago
org.mariadb.jdbc:mariadb-java-client has Cleartext Transmission of Sensitive Information and Insufficiently Protected Credentials
maven
org.mariadb.jdbc:mariadb-java-client
Moderate
about 2 months ago
MariaDB has cleartext password disclosure to a MITM on the initial-handshake
maven
org.mariadb.jdbc:mariadb-java-client
High
about 2 months ago
MapFish Print has XXE that allows reading arbitrary files of certain types
maven
org.mapfish.print:print-servlet, org.mapfish.print:print-lib, org.mapfish:print.print-servlet
Moderate
about 2 months ago
Graylog token revocation endpoint allows authenticated users to delete other users’ access tokens
maven
org.graylog2:graylog2-server
High
about 2 months ago
Fortigate syslog message parser can be exploited to modify or delete fields from the original message
maven
org.graylog2:graylog2-server
High
about 2 months ago
PowSyBl Core has Command Injection in LocalCommandExecutor-s
maven
com.powsybl:powsybl-computation-local
High
about 2 months ago
Spinnaker: Improper yaml processing on kustomize bake operations
maven
io.spinnaker.rosco:rosco-manifests
Moderate
about 2 months ago
Graylog Server: System Catalog titles endpoint can be used to retrieve values of protected database fields
maven
org.graylog2:graylog2-server
Critical
about 2 months ago
Yamcs vulnerable to authenticated remote code execution via unescaped StreamSQL `LIKE` pattern compiled by Janino (`LikeExpression`)
maven
org.yamcs:yamcs-core
Critical
about 2 months ago
Yamcs vulnerable to Remote Code Execution via instance-template argument YAML injection (createInstance)
maven
org.yamcs:yamcs-core
Moderate
about 2 months ago
Yamcs has Reflected XSS in the URL of the Authorize Endpoint
maven
org.yamcs:yamcs-core
Moderate
about 2 months ago
Yamcs: Insecure Direct Object Reference (IDOR) in PacketsApi allows unprivileged users to dump all telemetry packets
maven
org.yamcs:yamcs-core
Moderate
about 2 months ago
Yamcs's Missing Authorization on Role and Privilege Enumeration Endpoints Allows Any Authenticated User to Disclose Full Security Configuration
maven
org.yamcs:yamcs-core
Moderate
about 2 months ago
Yamcs's WebSocket subscription handlers omit the privilege checks their REST siblings enforce
maven
org.yamcs:yamcs-core
High
about 2 months ago
Yamcs Core API has Multiple Missing Function Level Access Control vulnerabilities
maven
org.yamcs:yamcs-core
Filter by Severity
Filter by Package
org.jenkins-ci.main:jenkins-core
259
com.liferay.portal:release.portal.bom
159
org.apache.tomcat:tomcat
156
com.liferay.portal:release.dxp.bom
125
org.keycloak:keycloak-services
98
com.fasterxml.jackson.core:jackson-databind
86
org.apache.tomcat.embed:tomcat-embed-core
73
org.apache.struts:struts2-core
60
org.keycloak:keycloak-core
50
org.xwiki.platform:xwiki-platform-oldcore
46
org.elasticsearch:elasticsearch
41
io.undertow:undertow-core
39
net.mingsoft:ms-mcms
39
org.apache.tomcat:tomcat-catalina
38
org.jenkins-ci.plugins:script-security
37
com.thoughtworks.xstream:xstream
37
com.jfinal:jfinal
36
org.apache.tomcat:tomcat-coyote
32
org.opencms:opencms-core
31
org.springframework.security:spring-security-core
31
org.apache.solr:solr-core
31
org.eclipse.jetty:jetty-server
29
org.springframework:spring-webmvc
27
org.bouncycastle:bcprov-jdk14
26
org.keycloak:keycloak-parent
26
org.apache.openmeetings:openmeetings-parent
25
org.bouncycastle:bcprov-jdk15on
25
io.netty:netty-codec-http
24
org.xwiki.platform:xwiki-platform-web-templates
23
org.cloudfoundry.identity:cloudfoundry-identity-server
21
org.apache.nifi:nifi
21
org.springframework:spring-webflux
20
org.springframework:spring-core
19
com.liferay.portal:com.liferay.portal.impl
18
org.apache.activemq:activemq-client
18
org.apache.jspwiki:jspwiki-main
18
org.asynchttpclient:async-http-client
18
com.vaadin:vaadin-bom
18
org.apache.ranger:ranger
17
org.apache.dolphinscheduler:dolphinscheduler
17
org.apache.inlong:manager-pojo
17
org.apache.geode:geode-core
17
org.yamcs:yamcs-core
16
org.graylog2:graylog2-server
16
org.bouncycastle:bcprov-jdk15
16
org.apache.struts.xwork:xwork-core
16
org.geoserver.web:gs-web-app
16
org.apache.dubbo:dubbo
16
org.bouncycastle:bcprov-jdk15to18
15
org.apache.activemq:apache-activemq
15
org.xwiki.platform:xwiki-platform-web
15
tools.jackson.core:jackson-databind
15
ai.h2o:h2o-core
15
org.apache.cxf:cxf-core
14
org.opensearch.plugin:opensearch-security
14
h2o
13
org.apache.hadoop:hadoop-main
13
org.apache.kylin:kylin
13
org.jenkins-ci.plugins.workflow:workflow-cps
13
com.vaadin:flow-server
13
org.bouncycastle:bc-fips
13
org.springframework:spring-web
13
org.apache.tika:tika-core
13
org.apache.streampark:streampark
12
org.apache.hadoop:hadoop-common
12
org.jenkins-ci.plugins:git
12
org.bouncycastle:bcprov-jdk18on
12
org.jeecgframework.boot:jeecg-boot-parent
12
com.rabbitmq:amqp-client
12
org.apache.cassandra:cassandra-all
12
org.apache.shiro:shiro-core
12
org.jenkins-ci.plugins:email-ext
12
org.apache.cxf:cxf
12
org.jenkins-ci.plugins:active-directory
12
io.netty:netty-handler
12
org.apache.activemq:activemq-broker
12
org.xwiki.platform:xwiki-platform-administration-ui
11
org.mortbay.jetty:jetty
11
io.netty:netty-codec-http2
11
io.netty:netty
11
org.apache.camel:camel-core
11
org.http4s:http4s-ember-core_2.13
11
org.postgresql:postgresql
11
org.igniterealtime.openfire:parent
11
org.http4s:http4s-ember-core_3
11
org.apache.logging.log4j:log4j-core
11
com.xuxueli:xxl-job
11
org.apache.jspwiki:jspwiki-war
11
org.apache.archiva:archiva
11
org.xwiki.platform:xwiki-platform-rest-server
11
org.apache.james:james-server
11
org.apache.activemq:activemq-all
11
org.apache.commons:commons-compress
11
org.http4s:http4s-ember-core_2.12
11
com.hazelcast:hazelcast
10
org.apache.linkis:linkis
10
struts:struts
10
org.apache.hive:hive-exec
10
org.craftercms:crafter-studio
10
ch.qos.logback:logback-core
10
com.sonyericsson.jenkins.plugins.bfa:build-failure-analyzer
10
org.apache.spark:spark-core_2.11
10
org.jenkins-ci.plugins.workflow:workflow-cps-global-lib
10
org.apache.inlong:manager-service
10
ca.uhn.hapi.fhir:org.hl7.fhir.r5
10
org.jboss.netty:netty
10
ca.uhn.hapi.fhir:org.hl7.fhir.validation
10
org.apache.spark:spark-core_2.10
9
org.geoserver:gs-wms
9
org.apache.zookeeper:zookeeper
9
io.jenkins:configuration-as-code
9
org.keycloak:keycloak-quarkus-server
9
org.apache.tapestry:tapestry-core
9
org.apache.dolphinscheduler:dolphinscheduler-api
9
mysql:mysql-connector-java
9
org.apache.hive:hive
9
org.jenkins-ci.plugins:electricflow
9
cn.hutool:hutool-core
9
org.jenkins-ci.plugins:config-file-provider
9
org.apache.xmlgraphics:batik
9
org.opencrx:opencrx-core-models
9
org.silverpeas.core:silverpeas-core-web
9
pyspark
9
org.opennms:opennms
9
org.apache.ozone:ozone-main
8
org.apache.mina:mina-core
8
org.jenkins-ci.plugins:subversion
8
org.apache.zeppelin:zeppelin
8
org.jeecgframework.boot:jeecg-boot-common
8
org.apache.pdfbox:pdfbox
8
ca.uhn.hapi.fhir:org.hl7.fhir.r4b
8
org.jenkins-ci.plugins:ec2
8
org.springframework.cloud:spring-cloud-config-server
8
org.jenkins-ci.plugins:jobConfigHistory
8
org.springframework:spring-expression
8
org.apache.hive:hive-service
8
org.apache.santuario:xmlsec
8
org.apache.druid:druid
8
io.jenkins.blueocean:blueocean
8
org.dspace:dspace-api
8
org.jenkins-ci.plugins:credentials-binding
8
org.jenkins-ci.plugins:oic-auth
8
org.apache.wicket:wicket-core
8
at.yawk.lz4:lz4-java
8
org.apache.ambari:ambari
8
ca.uhn.hapi.fhir:org.hl7.fhir.utilities
8
org.lz4:lz4-java
8
com.ruoyi:ruoyi
8
org.yaml:snakeyaml
8
io.openremote:openremote-manager
7
io.vertx:vertx-web
7
org.apache.syncope:syncope-core
7
io.jenkins.plugins:cavisson-ns-nd-integration
7
org.jenkins-ci.plugins:rundeck
7
org.apache.activemq:activemq-parent
7
org.geoserver:gs-main
7
net.opentsdb:opentsdb
7
jQuery
7
org.apache.inlong:manager-web
7
org.apache.karaf:apache-karaf
7
jquery
7
org.silverpeas.core:silverpeas-core
7
org.apache.cxf:apache-cxf
7
net.gleske:jervis
7
io.dataease:dataease-plugin-common
7
org.apache.atlas:atlas-common
7
org.jeecgframework.boot:jeecg-boot-base
7
org.springframework.amqp:spring-amqp
7
rubygems-update
7
org.springframework.security:spring-security-web
7
org.apache.kafka:kafka-clients
7
net.snowflake:snowflake-jdbc
7
org.springframework.data:spring-data-commons
7
com.xuxueli:xxl-job-admin
7
org.jenkins-ci.plugins:openshift-deployer
7
org.apache.derby:derby
7
org.jboss.resteasy:resteasy-client
7
com.ctrip.framework.apollo:apollo
7
org.keycloak:keycloak-server-spi-private
7
org.owasp.antisamy:antisamy
7
org.opencastproject:opencast-kernel
7
org.webjars.npm:jquery
7
org.jenkins-ci.plugins:htmlpublisher
7
org.jruby:jruby-stdlib
7
io.atomix:atomix
7
jquery-rails
7
org.springframework.data:spring-data-rest-core
7
org.apache.axis:axis
7
org.jenkins-ci.plugins:artifactory
7
com.vaadin:vaadin-server
7
org.apache.ignite:ignite-core
7
org.infinispan:infinispan-core
7
io.jenkins.plugins:warnings-ng
7
org.openidentityplatform.openam:openam-oauth2
7
jquery-ui
7
io.jenkins.plugins:miniorange-saml-sp
7
org.jenkins-ci.plugins:mercurial
7
tech.powerjob:powerjob
7
org.owasp.esapi:esapi
7
org.apache.poi:poi
7
Filter by Repository
https://github.com/xwiki/xwiki-platform
222
https://github.com/jenkinsci/jenkins
178
https://github.com/liferay/liferay-portal
170
https://github.com/apache/tomcat
118
https://github.com/keycloak/keycloak
89
https://github.com/FasterXML/jackson-databind
70
https://github.com/spring-projects/spring-framework
51
https://github.com/apache/struts
47
https://github.com/x-stream/xstream
37
https://github.com/apache/activemq
34
https://github.com/apache/inlong
31
https://github.com/CVEProject/cvelist
28
https://github.com/netty/netty
27
https://github.com/apache/nifi
26
https://github.com/geoserver/geoserver
26
https://github.com/bcgit/bc-java
25
https://github.com/apache/cxf
24
https://github.com/eclipse/jetty.project
23
https://github.com/jenkinsci/script-security-plugin
22
https://github.com/undertow-io/undertow
21
https://github.com/jeecgboot/jeecg-boot
20
https://github.com/opencast/opencast
20
https://github.com/OpenNMS/opennms
20
https://github.com/alkacon/opencms-core
19
https://github.com/cloudfoundry/uaa
19
https://github.com/apache/camel
18
https://github.com/vaadin/platform
18
https://github.com/apache/kylin
17
https://github.com/quarkusio/quarkus
16
https://github.com/xuxueli/xxl-job
15
https://github.com/spring-projects/spring-security
15
https://github.com/ming-soft/MCMS
14
https://github.com/Graylog2/graylog2-server
14
https://github.com/apache/zeppelin
14
https://github.com/OpenRefine/OpenRefine
13
https://github.com/dromara/hutool
13
https://github.com/apache/dolphinscheduler
13
https://github.com/DSpace/DSpace
12
https://github.com/h2oai/h2o-3
12
https://github.com/igniterealtime/Openfire
12
https://github.com/vaadin/flow
11
https://github.com/opensearch-project/security
10
https://github.com/jenkinsci/git-plugin
10
https://github.com/apache/lucene-solr
10
https://github.com/dataease/dataease
9
https://github.com/cui2shark/cms
9
https://github.com/apache/hadoop
8
https://github.com/vert-x3/vertx-web
8
https://github.com/nahsra/antisamy
8
https://github.com/pgjdbc/pgjdbc
8
https://github.com/apache/xmlgraphics-batik
8
https://github.com/xwiki/xwiki-commons
8
https://github.com/hazelcast/hazelcast
8
https://github.com/jenkinsci/config-file-provider-plugin
8
https://github.com/jquery/jquery
8
https://github.com/jetty/jetty.project
8
https://github.com/vaadin/framework
8
https://github.com/jenkinsci/build-failure-analyzer-plugin
7
https://github.com/apache/tika
7
https://github.com/rundeck/rundeck
7
https://github.com/elastic/elasticsearch
7
https://github.com/jflyfox/jfinal_cms
7
https://github.com/infinispan/infinispan
7
https://github.com/OpenTSDB/opentsdb
7
https://github.com/rubygems/rubygems
7
https://github.com/http4s/http4s
7
https://github.com/ratpack/ratpack
7
https://github.com/jenkinsci/blueocean-plugin
7
https://github.com/apache/openmeetings
7
https://github.com/RhinoSecurityLabs/CVEs
7
https://github.com/apache/syncope
7
https://github.com/apache/pulsar
7
https://github.com/jenkinsci/subversion-plugin
6
https://github.com/jenkinsci/gerrit-trigger-plugin
6
https://github.com/cui2shark/security
6
https://github.com/jenkinsci/fortify-on-demand-uploader-plugin
6
https://github.com/playframework/playframework
6
https://github.com/apache/geode
6
https://bitbucket.org/snakeyaml/snakeyaml
6
https://github.com/JLLeitschuh/security-research
6
https://github.com/qos-ch/logback
6
https://github.com/line/armeria
6
https://github.com/twbs/bootstrap
6
https://github.com/apache/solr
6
https://github.com/ESAPI/esapi-java-legacy
6
https://github.com/apache/hive
6
https://github.com/jenkinsci/electricflow-plugin
6
https://github.com/PowerJob/PowerJob
6
https://github.com/jenkinsci/ec2-plugin
6
https://github.com/DrunkenShells/Disclosures
6
https://github.com/jenkinsci/configuration-as-code-plugin
6
https://github.com/jquery/jquery-ui
6
https://github.com/resteasy/resteasy
6
https://github.com/OpenAPITools/openapi-generator
6
https://github.com/grails/grails-core
5
https://github.com/jenkinsci/workflow-cps-global-lib-plugin
5
https://github.com/xwiki/xwiki-rendering
5
https://github.com/neo4j-contrib/neo4j-apoc-procedures
5
https://github.com/apache/james-project
5
https://github.com/restlet/restlet-framework-java
5
https://github.com/jenkinsci/support-core-plugin
5
https://github.com/apache/shenyu
5
https://github.com/jenkinsci/active-directory-plugin
5
https://github.com/jettison-json/jettison
5
https://github.com/jensdietrich/xshady-release
5
https://github.com/jenkinsci/m2release-plugin
5
https://github.com/jenkinsci/publish-over-ssh-plugin
5
https://github.com/ktorio/ktor
5
https://github.com/snowflakedb/snowflake-jdbc
5
https://github.com/apache/jackrabbit
5
https://github.com/jenkinsci/gitlab-plugin
5
https://github.com/apache/activemq-artemis
5
https://github.com/jenkinsci/github-plugin
5
https://github.com/apache/karaf
5
https://github.com/apache/shiro
5
https://github.com/apache/druid
5
https://github.com/h2database/h2database
5
https://github.com/apache/httpcomponents-client
5
https://github.com/jenkinsci/codedx-plugin
5
https://github.com/alibaba/nacos
5
https://bitbucket.org/connect2id/nimbus-jose-jwt
5
https://github.com/jenkinsci/email-ext-plugin
5
https://github.com/protocolbuffers/protobuf
5
https://github.com/jenkinsci/junit-plugin
5
https://github.com/nightcloudos/new_cms
4
https://github.com/jenkinsci/htmlpublisher-plugin
4
https://github.com/apiman/apiman
4
https://github.com/itext/itext7
4
https://github.com/HL7/fhir-ig-publisher
4
https://github.com/jenkinsci/vmanager-plugin
4
https://github.com/reportportal/reportportal
4
https://github.com/jenkinsci/hpe-application-automation-tools-plugin
4
https://github.com/resteasy/Resteasy
4
https://github.com/yamcs/yamcs
4
https://github.com/aws/aws-iot-device-sdk-java-v2
4
https://github.com/geonetwork/core-geonetwork
4
https://github.com/apache/streampipes
4
https://github.com/jenkinsci/p4-plugin
4
https://github.com/jenkinsci/git-client-plugin
4
https://github.com/jenkinsci/nexus-platform-plugin
4
https://github.com/openhab/openhab-webui
4
https://github.com/joniles/mpxj
4
https://github.com/jenkinsci/fortify-plugin
4
https://github.com/jenkinsci/matrix-project-plugin
4
https://github.com/shopizer-ecommerce/shopizer
4
https://github.com/jenkinsci/libvirt-slave-plugin
4
https://github.com/apache/ranger
4
https://github.com/bcgit/bc-csharp
4
https://github.com/jfinal/jfinal
4
https://github.com/powsybl/powsybl-core
4
https://github.com/xerial/snappy-java
4
https://github.com/pippo-java/pippo
4
https://github.com/Robothy/local-s3
4
https://github.com/jenkinsci/ansible-plugin
4
https://github.com/jenkinsci/job-config-history-plugin
4
https://github.com/wildfly/wildfly-core
4
https://github.com/unclebob/fitnesse
4
https://github.com/jenkinsci/workflow-cps-plugin
4
https://github.com/stanfordnlp/corenlp
4
https://github.com/open-metadata/OpenMetadata
4
https://github.com/jenkinsci/rundeck-plugin
4
https://github.com/jenkinsci/active-choices-plugin
4
https://github.com/jenkinsci/cloudbees-jenkins-advisor-plugin
4
https://github.com/skylot/jadx
4
https://github.com/jenkinsci/warnings-ng-plugin
4
https://github.com/micronaut-projects/micronaut-core
4
https://github.com/jenkinsci/xldeploy-plugin
4
https://github.com/jooby-project/jooby
4
https://github.com/AsyncHttpClient/async-http-client
4
https://github.com/jenkinsci/credentials-binding-plugin
4
https://github.com/HtmlUnit/htmlunit
4
https://github.com/jenkinsci/gitlab-oauth-plugin
4
https://github.com/wso2/carbon-identity-framework
4
https://github.com/grpc/grpc
3
https://github.com/wso2/docs-security
3
https://github.com/pf4j/pf4j
3
https://github.com/hal/console
3
https://github.com/jenkinsci/code-coverage-api-plugin
3
https://github.com/wso2/carbon-registry
3
https://github.com/google/guava
3
https://github.com/apereo/cas
3
https://github.com/jenkinsci/oic-auth-plugin
3
https://github.com/codehaus-plexus/plexus-utils
3
https://github.com/apache/derby
3
https://github.com/opengoofy/hippo4j
3
https://github.com/jenkinsci/audit-trail-plugin
3
https://github.com/Rabb1ter/cms
3
https://github.com/spray/spray-json
3
https://github.com/jenkinsci/cvs-plugin
3
https://github.com/jenkinsci/database-plugin
3
https://github.com/apache/pinot
3
https://github.com/jenkinsci/compuware-topaz-for-total-test-plugin
3
https://github.com/jenkinsci/ci-with-toad-edge-plugin
3
https://github.com/jenkinsci/jira-plugin
3
https://github.com/OWASP/json-sanitizer
3
https://github.com/apache/linkis
3
https://github.com/rhuss/jolokia
3
https://github.com/apache/mina-sshd
3
https://github.com/apache/rocketmq
3