maven
Security Advisories in maven
High
about 16 hours ago
netty-incubator-codec-ohttp BinaryHttpParser: Unauthenticated CPU-exhaustion DoS via infinite loop in field-section decoding
maven
io.netty.incubator:netty-incubator-codec-bhttp
High
about 16 hours ago
netty-incubator-codec-ohttp: BinaryHttpParser should enforce limits for variable lengths fields
maven
io.netty.incubator:netty-incubator-codec-bhttp
High
about 16 hours ago
netty-incubator-codec-ohttp: Binary HTTP parser infinite loop on known-length field section boundary
maven
io.netty.incubator:netty-incubator-codec-bhttp
Moderate
about 16 hours ago
netty-incubator-codec-ohttp: Binary HTTP parser unchecked varint length overflow causes decoder crash
maven
io.netty.incubator:netty-incubator-codec-bhttp
High
about 16 hours ago
netty-incubator-codec-ohttp: BoringSSL HPKE private key bytes exposed through toString() and exception messages
maven
io.netty.incubator:netty-incubator-codec-ohttp-hpke-classes-boringssl
High
about 16 hours ago
netty-incubator-codec-ohttp: [OHttpServerCodec] Native Direct-Memory Leak on AEAD Decryption Failure Leads to Gateway Denial of Service
maven
io.netty.incubator:netty-incubator-codec-ohttp
High
1 day ago
GeoServer has a Server-Side Template Injection (SSTI) vulnerability in processing FreeMarker templates
maven
org.geoserver.web:gs-web-app, org.geoserver:gs-wms, org.geoserver:gs-main
High
1 day ago
XWiki Platform Live Data Live Table Connector has privilege escalation from edit to script right through Live Data editing
maven
org.xwiki.platform:xwiki-platform-livedata-livetable
Low
3 days ago
RabbitMQ Java client accepts broker frames larger than the negotiated AMQP frame_max
maven
com.rabbitmq:amqp-client
Moderate
3 days ago
RabbitMQ Java client: TrustEverythingTrustManager used by default in useSslProtocol() enables MITM
maven
com.rabbitmq:amqp-client
Moderate
3 days ago
RabbitMQ Java client malformed body frame triggers raw command assembler exception
maven
com.rabbitmq:amqp-client
High
3 days ago
RabbitMQ Java client: Unvalidated Class.forName in JSON-RPC ProcedureDescription enables arbitrary class loading
maven
com.rabbitmq:amqp-client
High
3 days ago
RabbitMQ Java client ValueReader: Oversized LongString/bytes length triggers OOM via unchecked allocation
maven
com.rabbitmq:amqp-client
High
3 days ago
RabbitMQ Java client ValueReader: Unbounded recursive table/array nesting causes StackOverflowError DoS
maven
com.rabbitmq:amqp-client
High
3 days ago
Kestra vulnerable to stored XSS via custom Markdown [[link]] attribute injection
maven
io.kestra:kestra
High
4 days ago
http4k: `DigestAuthProvider.verify` did not bind to request URI
maven
org.http4k:http4k-security-digest
Moderate
4 days ago
http4k: `DigestAuthProvider.verify` ignored configured algorithm and did not bind to request URI
maven
org.http4k:http4k-security-digest
High
4 days ago
docx4j: Stack Overflow via Cyclic `w:basedOn` Style Chain leads to Denial of Service
maven
org.docx4j:docx4j-core
High
4 days ago
http4k: Unbounded gzip decompression in `ServerFilters.GZip` / `RequestFilters.GunZip` allowed memory-exhaustion DoS
maven
org.http4k:http4k-core
Moderate
4 days ago
Netty Vulnerable to Cache Poisoning and Information Disclosure via CORS Vary Header Overwrite
maven
io.netty:netty-codec-http
High
4 days ago
Netty: Memory Exhaustion in SctpMessageCompletionHandler
maven
io.netty:netty-transport-sctp
High
7 days ago
mchange-commons-java contains elements susceptible to abuse via JNDI injection and "deserialization gadgets"
maven
com.mchange:mchange-commons-java
High
7 days ago
OpenAM Insecure SSO Cookie Initialization
maven
org.openidentityplatform.openam:openam-core
Moderate
14 days ago
Netty: RedisArrayAggregator max-elements failure leaves retained partial aggregate state
maven
io.netty:netty-codec-redis
Moderate
15 days ago
jsoup: Cleaner may expose markup with custom raw-text elements
maven
org.jsoup:jsoup
Moderate
21 days ago
core-geonetwork has an Open Redirect Bypass
maven
org.geonetwork-opensource:geonetwork
High
21 days ago
Netty: HTTP/2 decompression leaks ByteBuf reference count when the decompressor channel is already closed (Direct memory leak / OOM DoS)
maven
io.netty:netty-codec-http2
High
21 days ago
Spring Data: Unbounded property-path cache keyed by externally-supplied path string
maven
org.springframework.data:spring-data-commons
Moderate
21 days ago
Apache HttpComponents Client: Connection Leak on Content-Encoding Decode Error Leads to Pool Exhaustion DoS
maven
org.apache.httpcomponents.client5:httpclient5
Moderate
23 days ago
OpenTelemetry Java Instrumentation: JDBC Auto-Instrumentation Logging Clear-Text Passwords
maven
io.opentelemetry.javaagent:opentelemetry-javaagent
Moderate
23 days ago
OpenTelemetry Javaagent RMI context propagation allows resource exhaustion
maven
io.opentelemetry.javaagent:opentelemetry-javaagent
High
23 days ago
Quarkus: Authentication/Authorization Bypass via Advanced Path Normalization Vulnerabilities
maven
io.quarkus:quarkus-vertx-http
Moderate
23 days ago
veraPDF Parser DoS via PostScript Type 1 Font Programs
maven
org.verapdf:parser
Moderate
23 days ago
veraPDF-validatio: Use of Default `DocumentBuilderFactory` leads to XXE When Processing Untrusted PDFs
maven
org.verapdf:validation-model-jakarta, org.verapdf:validation-model
High
23 days ago
veraPDF Validation XXE via Rich Text
maven
org.verapdf:validation-model-jakarta, org.verapdf:validation-model
High
23 days ago
veraPDF Validation XXE via XFA
maven
org.verapdf:validation-model-jakarta, org.verapdf:validation-model
High
24 days ago
QTINeon has unauthenticated relay-to-host amplification via unbounded RECONNECT_REQUEST forwarding
npm, pypi, maven
qti-neon, com.quietterminal:qti-neon
High
24 days ago
Cedar-Java has policy injection, type confusion, and incorrect equality comparison vulnerabilities
maven
com.cedarpolicy:cedar-java
High
24 days ago
java-client Allows Network Pivot via Unvalidated directConnect Redirect in AppiumCommandExecutor
maven
io.appium:java-client
Moderate
25 days ago
org.xwiki.contrib:discussions-server has Cross-Site Request Forgery (CSRF) issue that makes it possible to delete messages
maven
org.xwiki.contrib:discussions-server
High
28 days ago
OmniFaces: Forged combined-resource IDs and related output/push boundaries
maven
org.omnifaces:omnifaces
High
28 days ago
blaze: Unbounded WebSocket message aggregation in http4s-blaze-server
maven
org.http4s:http4s-blaze-server_3, org.http4s:http4s-blaze-server_2.12, org.http4s:http4s-blaze-server_2.13
High
28 days ago
blaze: Chunked-body trailer fields promoted into Request.headers in blaze-server (front-end header-sanitization bypass)
maven
org.http4s:blaze-http_2.13, org.http4s:blaze-http_3, org.http4s:blaze-http_2.12
High
28 days ago
blaze: Multiple HTTP/1.1 request-smuggling primitives in blaze's Java wire parser
maven
org.http4s:blaze-http_2.13, org.http4s:blaze-http_3, org.http4s:http4s-blaze-server_2.13
Critical
28 days ago
OpenDJ SASL PLAIN authzid bypassing the proxy ACI scope check
maven
org.openidentityplatform.opendj:opendj-server-legacy
Critical
28 days ago
OpenDJ unauthenticated SSRF, local file read and unbounded-read DoS in the DSMLv2 gateway
maven
org.openidentityplatform.opendj:opendj-dsml-servlet
Critical
28 days ago
OpenAM: Unauthenticated Remote Code Execution via Class.forName in AuthXMLUtils.createCustomCallback
maven
org.openidentityplatform.openam:openam-core
Moderate
28 days ago
OpenAM Reflected XSS in the OAuth2/OIDC `wap` consent page
maven
org.openidentityplatform.openam:openam-oauth2
Critical
28 days ago
OpenAM: WebAuthn Java deserialization RCE via ObjectInputFilter depth>1 bypass
maven
org.openidentityplatform.openam:openam-auth-webauthn
High
28 days ago
Netty: Denial of Service in XmlFrameDecoder via CPU Exhaustion
maven
io.netty:netty-codec-xml
Moderate
28 days ago
Netty: Memory Leak in DNS Record Decoder via Malformed Domain Names
maven
io.netty:netty-codec-dns
Low
28 days ago
AWS CDK CodeBuild S3 Log Encryption Boolean Inversion
pypi, go, maven, nuget, npm
aws-cdk.aws-codebuild, aws-cdk-lib, github.com/aws/aws-cdk-go/awscdk, software.amazon.awscdk:codebuild, Amazon.CDK.AWS.CodeBuild, @aws-cdk/aws-codebuild, github.com/aws/aws-cdk-go/awscdk/v2, software.amazon.awscdk:aws-cdk-lib, Amazon.CDK.Lib
Moderate
28 days ago
LZ4 Java: Native XXHash implementations can crash the JVM when passed invalid byte array ranges
maven
org.lz4:lz4-java, at.yawk.lz4:lz4-java
Moderate
29 days ago
c3p0 can, in combination with other libraries, compose to a "sink" for deserialization gadgets
maven
com.mchange:c3p0
Critical
29 days ago
fastjson has a remote code execution (RCE) vulnerability
maven
com.alibaba:fastjson
High
29 days ago
Eclipse Jetty: DoS attack triggering OutOfMemory with 100-Continue requests
maven
org.eclipse.jetty:jetty-server
Moderate
29 days ago
Eclipse Jetty: HTTP Authority/Host mismatch
maven
org.eclipse.jetty:jetty-server
Moderate
30 days ago
Eclipse Jetty: Cross-Request Leakage for trailers on HTTP/1.1 keep-alive connections
maven
org.eclipse.jetty:jetty-server
High
30 days ago
Eclipse Jetty Digest Authentication: ISO-8859-1 lossy encoding allows authentication bypass via character substitution
maven
org.eclipse.jetty.ee9:jetty-ee9-security, org.eclipse.jetty.ee8:jetty-ee8-security, org.eclipse.jetty:jetty-security
Moderate
30 days ago
Netty: CRLF Injection via Multipart Filename in Netty HttpPostRequestEncoder
maven
io.netty:netty-codec-http
Moderate
30 days ago
Netty: STOMP CONNECT Frame Header Injection in Netty
maven
io.netty:netty-codec-stomp
Moderate
30 days ago
Netty: HAProxy V1 Protocol CRLF Injection via AF_UNIX Address
maven
io.netty:netty-codec-haproxy
High
30 days ago
Netty: [Bzip2Decoder] Infinite Loop in RLE State Machine Leads to Event-Loop Thread Hang
maven
io.netty:netty-codec, io.netty:netty-codec-compression
Moderate
30 days ago
Netty: [codec-http2] Lack of Host Header Deduplication in HTTP/2→HTTP/1.x Translation Leads to Request Routing Bypass
maven
io.netty:netty-codec-http2
Moderate
30 days ago
Netty: [HttpContentEncoder] Unbounded Per-Connection Queue Growth via HTTP/1.1 Pipelining Leads to Denial of Service
maven
io.netty:netty-codec-http
Moderate
30 days ago
Netty: WebSockets V07/V08 handshaker missing Connection/Upgrade validation
maven
io.netty:netty-codec-http
High
30 days ago
Netty: TOCTOU in OcspServerCertificateValidator
maven
io.netty:netty-handler-ssl-ocsp
High
30 days ago
Netty: Out-of-date OCSP Responses Accepted by OcspServerCertificateValidator
maven
io.netty:netty-handler-ssl-ocsp
High
30 days ago
Netty: Missing CertificateID Validation in OCSP Response Allows Replay Attacks
maven
io.netty:netty-handler-ssl-ocsp
High
30 days ago
Netty XML: Injection / Risky Sink — unconfigured XML factory with active DTD and entity handling
maven
io.netty:netty-codec-xml
High
30 days ago
Netty: Memory Exhaustion via HTTP/3 Reserved Frame Types
maven
io.netty:netty-codec-http3
Moderate
30 days ago
Netty: Security Control Bypass via CORS Short-Circuit Failure
maven
io.netty:netty-codec-http
High
30 days ago
Netty: [SpdyHttpDecoder] ByteBuf Reference Leak on RST_STREAM Leads to Native Memory Exhaustion
maven
io.netty:netty-codec-http
High
30 days ago
Netty: [codec-haproxy] Signed-Byte Sentinel Collision in HAProxyMessageDecoder Leads to Unbounded Memory Exhaustion
maven
io.netty:netty-codec-haproxy
High
30 days ago
Netty SPDY zlib header block continues decoded expansion after maxHeaderSize truncation
maven
io.netty:netty-codec-http
High
30 days ago
Netty SPDY SETTINGS frame count materializes unbounded settings map
maven
io.netty:netty-codec-http
Moderate
about 1 month ago
jackson-databind: @JsonView bypassed for @JsonUnwrapped container properties on deserialization
maven
tools.jackson.core:jackson-databind, com.fasterxml.jackson.core:jackson-databind
High
about 1 month ago
jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq)
maven
tools.jackson.core:jackson-core, com.fasterxml.jackson.core:jackson-core
Moderate
about 1 month ago
jackson-databind: `@JsonView` bypass for creator properties with `@JsonTypeInfo(include=As.EXTERNAL_PROPERTY)`
maven
com.fasterxml.jackson.core:jackson-databind
Moderate
about 1 month ago
jackson-databind: @JsonIgnore on a Record property is bypassed with a PropertyNamingStrategy
maven
tools.jackson.core:jackson-databind, com.fasterxml.jackson.core:jackson-databind
High
about 1 month ago
PostgreSQL JDBC Driver: Silent channel-binding authentication downgrade via unsupported certificate algorithms
maven
org.postgresql:postgresql
High
about 1 month ago
AWS-JDBC Wrapper: Privilege Escalation in Aurora PostgreSQL instance
maven
software.amazon.jdbc:aws-advanced-jdbc-wrapper
High
about 1 month ago
ArcadeDB has cross-database IDOR: /ts/*, /batch/*, Prometheus and Grafana handlers bypass authorization
maven
com.arcadedb:arcadedb-server
High
about 1 month ago
ArcadeDB: Scripting authorization gate (GHSA-48qw-824m-86pr) bypassed via SQL DEFINE FUNCTION ... LANGUAGE js
maven
com.arcadedb:arcadedb-engine
High
about 1 month ago
ArcadeDB: Trigger scripts run with java.lang.* allowed, enabling OS command execution (RCE)
maven
com.arcadedb:arcadedb-engine
High
about 1 month ago
ArcadeDB: Privilege escalation via reader role in /api/v1/command JS scripting language — arbitrary host file read
maven
com.arcadedb:arcadedb-server
High
about 1 month ago
ArcadeDB: Read-only users can mutate database schema (incomplete fix of CVE-2026-44221)
maven
com.arcadedb:arcadedb-engine
High
about 1 month ago
ArcadeDB: IMPORT DATABASE allows SSRF and arbitrary local file read by authenticated users
maven
com.arcadedb:arcadedb-engine
High
about 1 month ago
dd-trace-java: Improper parsing of W3C baggage headers may lead to DoS
maven
com.datadoghq:dd-java-agent
High
about 1 month ago
Netty: Denial of Service via Unbounded Headers in StompSubframeDecoder
maven
io.netty:netty-codec-stomp
High
about 1 month ago
Apollo ConfigService access key authentication bypass via raw config file appId parsing
maven
com.ctrip.framework.apollo:apollo
High
about 1 month ago
Apollo ConfigService access key authentication bypass via appId parsing and non-canonical matching
maven
com.ctrip.framework.apollo:apollo
Moderate
about 1 month ago
Apollo Portal: There is a risk of unauthorized access to the Apollo configuration center
maven
com.ctrip.framework.apollo:apollo
Moderate
about 1 month ago
Apache Log4j API: Improper encoding of non-finite floating-point values during MapMessage JSON serialization
maven
org.apache.logging.log4j:log4j-api
High
about 1 month ago
org.hl7.fhir.core: ReDoS via FHIRPath matches()/replaceMatches() in FHIR Validator HTTP Endpoint
maven
ca.uhn.hapi.fhir:org.hl7.fhir.validation.cli, ca.uhn.hapi.fhir:org.hl7.fhir.validation, ca.uhn.hapi.fhir:org.hl7.fhir.r5, ca.uhn.hapi.fhir:org.hl7.fhir.r4b, ca.uhn.hapi.fhir:org.hl7.fhir.r4, ca.uhn.hapi.fhir:org.hl7.fhir.dstu3, ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may, ca.uhn.hapi.fhir:org.hl7.fhir.dstu2
Moderate
about 1 month ago
Micronaut: DefaultHttpClient follows redirects, forwarding Authorization, Cookie, and Proxy-Authorization headers
maven
io.micronaut:micronaut-http-client
High
about 1 month ago
Micronaut doesn't set a maximum redirect count for its HTTP Client, enabling infinite loop DoS
maven
io.micronaut:micronaut-http-client
High
about 1 month ago
NL Portal: IDOR allows any authenticated user to complete and tamper with another user's taak
maven
nl.nl-portal:taak
Filter by Severity
Filter by Package
org.jenkins-ci.main:jenkins-core
259
org.apache.tomcat:tomcat
157
com.liferay.portal:release.portal.bom
151
com.liferay.portal:release.dxp.bom
125
org.keycloak:keycloak-services
97
com.fasterxml.jackson.core:jackson-databind
79
org.apache.struts:struts2-core
59
org.apache.tomcat.embed:tomcat-embed-core
55
org.keycloak:keycloak-core
50
org.xwiki.platform:xwiki-platform-oldcore
46
org.elasticsearch:elasticsearch
44
net.mingsoft:ms-mcms
39
io.undertow:undertow-core
39
com.thoughtworks.xstream:xstream
37
com.jfinal:jfinal
36
org.jenkins-ci.plugins:script-security
34
org.apache.tomcat:tomcat-catalina
32
org.opencms:opencms-core
31
org.springframework.security:spring-security-core
30
org.apache.solr:solr-core
30
org.eclipse.jetty:jetty-server
29
org.keycloak:keycloak-parent
26
org.apache.openmeetings:openmeetings-parent
25
org.bouncycastle:bcprov-jdk14
24
org.springframework:spring-webmvc
24
io.netty:netty-codec-http
23
org.xwiki.platform:xwiki-platform-web-templates
23
org.cloudfoundry.identity:cloudfoundry-identity-server
21
org.apache.nifi:nifi
21
org.apache.tomcat:tomcat-coyote
20
org.springframework:spring-core
19
org.apache.jspwiki:jspwiki-main
18
com.liferay.portal:com.liferay.portal.impl
18
com.vaadin:vaadin-bom
18
org.apache.activemq:activemq-client
18
org.springframework:spring-webflux
17
org.apache.inlong:manager-pojo
17
org.apache.dolphinscheduler:dolphinscheduler
17
org.apache.geode:geode-core
17
org.apache.dubbo:dubbo
16
org.apache.ranger:ranger
16
org.xwiki.platform:xwiki-platform-web
15
org.apache.struts.xwork:xwork-core
15
org.geoserver.web:gs-web-app
15
ai.h2o:h2o-core
15
org.bouncycastle:bcprov-jdk15
15
org.apache.activemq:apache-activemq
15
org.opensearch.plugin:opensearch-security
14
com.vaadin:flow-server
13
org.apache.hadoop:hadoop-main
13
h2o
13
org.apache.cxf:cxf-core
13
org.apache.kylin:kylin
13
org.apache.tika:tika-core
13
org.springframework:spring-web
13
org.jenkins-ci.plugins:git
12
org.jenkins-ci.plugins:email-ext
12
org.apache.shiro:shiro-core
12
org.apache.activemq:activemq-broker
12
org.jeecgframework.boot:jeecg-boot-parent
12
org.apache.hadoop:hadoop-common
12
org.jenkins-ci.plugins.workflow:workflow-cps
12
org.graylog2:graylog2-server
12
org.apache.cassandra:cassandra-all
12
org.apache.streampark:streampark
12
org.postgresql:postgresql
11
com.xuxueli:xxl-job
11
org.apache.jspwiki:jspwiki-war
11
org.mortbay.jetty:jetty
11
org.igniterealtime.openfire:parent
11
org.apache.commons:commons-compress
11
io.netty:netty-codec-http2
11
org.apache.archiva:archiva
11
org.apache.activemq:activemq-all
11
org.xwiki.platform:xwiki-platform-administration-ui
11
org.apache.camel:camel-core
11
org.apache.james:james-server
11
org.jenkins-ci.plugins:active-directory
11
org.bouncycastle:bcprov-jdk15to18
11
org.xwiki.platform:xwiki-platform-rest-server
11
com.sonyericsson.jenkins.plugins.bfa:build-failure-analyzer
10
io.netty:netty
10
org.apache.cxf:cxf
10
org.bouncycastle:bcprov-jdk15on
10
org.apache.linkis:linkis
10
org.jenkins-ci.plugins.workflow:workflow-cps-global-lib
10
org.craftercms:crafter-studio
10
org.apache.inlong:manager-service
10
org.apache.logging.log4j:log4j-core
10
ch.qos.logback:logback-core
10
io.netty:netty-handler
10
io.jenkins:configuration-as-code
9
org.apache.dolphinscheduler:dolphinscheduler-api
9
org.apache.hive:hive
9
org.opencrx:opencrx-core-models
9
org.apache.xmlgraphics:batik
9
org.opennms:opennms
9
org.jboss.netty:netty
9
org.apache.spark:spark-core_2.11
9
org.apache.tapestry:tapestry-core
9
org.keycloak:keycloak-quarkus-server
9
org.apache.hive:hive-exec
9
org.geoserver:gs-wms
9
org.apache.zookeeper:zookeeper
9
tools.jackson.core:jackson-databind
9
org.jenkins-ci.plugins:config-file-provider
9
org.jenkins-ci.plugins:electricflow
9
cn.hutool:hutool-core
9
org.bouncycastle:bcprov-jdk18on
9
org.jenkins-ci.plugins:subversion
8
org.dspace:dspace-api
8
com.rabbitmq:amqp-client
8
org.jenkins-ci.plugins:oic-auth
8
org.yaml:snakeyaml
8
org.apache.zeppelin:zeppelin
8
mysql:mysql-connector-java
8
io.jenkins.blueocean:blueocean
8
org.jenkins-ci.plugins:credentials-binding
8
org.apache.wicket:wicket-core
8
org.silverpeas.core:silverpeas-core-web
8
org.bouncycastle:bc-fips
8
org.springframework.cloud:spring-cloud-config-server
8
org.apache.santuario:xmlsec
8
com.hazelcast:hazelcast
8
org.apache.pdfbox:pdfbox
8
org.apache.ozone:ozone-main
8
org.apache.druid:druid
8
org.jeecgframework.boot:jeecg-boot-common
8
com.ruoyi:ruoyi
8
org.apache.ambari:ambari
8
org.jenkins-ci.plugins:ec2
8
org.apache.mina:mina-core
8
org.springframework:spring-expression
8
org.apache.spark:spark-core_2.10
7
ca.uhn.hapi.fhir:org.hl7.fhir.validation
7
org.jenkins-ci.plugins:rundeck
7
org.apache.atlas:atlas-common
7
org.apache.karaf:apache-karaf
7
io.dataease:dataease-plugin-common
7
org.apache.activemq:activemq-parent
7
org.infinispan:infinispan-core
7
rubygems-update
7
ca.uhn.hapi.fhir:org.hl7.fhir.utilities
7
org.jenkins-ci.plugins:openshift-deployer
7
org.apache.derby:derby
7
org.geoserver:gs-main
7
tech.powerjob:powerjob
7
org.openidentityplatform.openam:openam-oauth2
7
io.openremote:openremote-manager
7
io.vertx:vertx-core
7
org.jboss.resteasy:resteasy-client
7
org.jenkins-ci.plugins:jobConfigHistory
7
com.vaadin:vaadin-server
7
ca.uhn.hapi.fhir:org.hl7.fhir.r4b
7
org.jruby:jruby-stdlib
7
com.xuxueli:xxl-job-admin
7
org.apache.kafka:kafka-clients
7
org.apache.axis:axis
7
org.apache.poi:poi
7
io.jenkins.plugins:warnings-ng
7
net.opentsdb:opentsdb
7
org.springframework.data:spring-data-commons
7
io.vertx:vertx-web
7
jquery-ui
7
org.springframework.amqp:spring-amqp
7
io.jenkins.plugins:cavisson-ns-nd-integration
7
org.apache.syncope:syncope-core
7
io.atomix:atomix
7
net.gleske:jervis
7
org.jenkins-ci.plugins:artifactory
7
ca.uhn.hapi.fhir:org.hl7.fhir.r5
7
io.jenkins.plugins:miniorange-saml-sp
7
org.webjars.npm:jquery-ui
7
org.owasp.antisamy:antisamy
7
org.silverpeas.core:silverpeas-core
7
org.jenkins-ci.plugins:htmlpublisher
7
org.jeecgframework.boot:jeecg-boot-base
7
org.apache.inlong:manager-web
7
org.apache.hive:hive-service
7
org.keycloak:keycloak-server-spi-private
7
org.owasp.esapi:esapi
7
com.ctrip.framework.apollo:apollo
7
org.springframework.data:spring-data-rest-core
7
org.opencastproject:opencast-kernel
7
org.apache.ignite:ignite-core
7
net.snowflake:snowflake-jdbc
6
com.vaadin:vaadin
6
com.jflyfox:jflyfox_jfinal
6
org.jenkins-ci.plugins:gitlab-plugin
6
org.apache.pulsar:pulsar-broker
6
org.jenkins-ci.plugins:mercurial
6
com.datapipe.jenkins.plugins:hashicorp-vault-plugin
6
org.apache.struts:struts2-rest-plugin
6
org.jenkins-ci.plugins:pipeline-maven
6
org.apache.zeppelin:zeppelin-server
6
com.xuxueli:xxl-job-core
6
commons-fileupload:commons-fileupload
6
org.jenkins-ci.plugins:azure-vm-agents
6
org.csanchez.jenkins.plugins:kubernetes
6
org.springframework.security:spring-security-web
6
Filter by Repository
https://github.com/xwiki/xwiki-platform
222
https://github.com/jenkinsci/jenkins
178
https://github.com/liferay/liferay-portal
170
https://github.com/apache/tomcat
118
https://github.com/keycloak/keycloak
89
https://github.com/FasterXML/jackson-databind
70
https://github.com/spring-projects/spring-framework
51
https://github.com/apache/struts
47
https://github.com/x-stream/xstream
37
https://github.com/apache/activemq
34
https://github.com/apache/inlong
31
https://github.com/CVEProject/cvelist
28
https://github.com/netty/netty
27
https://github.com/apache/nifi
26
https://github.com/geoserver/geoserver
26
https://github.com/bcgit/bc-java
25
https://github.com/apache/cxf
24
https://github.com/eclipse/jetty.project
23
https://github.com/jenkinsci/script-security-plugin
22
https://github.com/undertow-io/undertow
21
https://github.com/jeecgboot/jeecg-boot
20
https://github.com/OpenNMS/opennms
20
https://github.com/opencast/opencast
20
https://github.com/alkacon/opencms-core
19
https://github.com/cloudfoundry/uaa
19
https://github.com/apache/camel
18
https://github.com/vaadin/platform
18
https://github.com/apache/kylin
17
https://github.com/quarkusio/quarkus
16
https://github.com/xuxueli/xxl-job
15
https://github.com/spring-projects/spring-security
15
https://github.com/Graylog2/graylog2-server
14
https://github.com/apache/zeppelin
14
https://github.com/ming-soft/MCMS
14
https://github.com/OpenRefine/OpenRefine
13
https://github.com/apache/dolphinscheduler
13
https://github.com/dromara/hutool
13
https://github.com/igniterealtime/Openfire
12
https://github.com/DSpace/DSpace
12
https://github.com/h2oai/h2o-3
12
https://github.com/vaadin/flow
11
https://github.com/jenkinsci/git-plugin
10
https://github.com/opensearch-project/security
10
https://github.com/apache/lucene-solr
10
https://github.com/dataease/dataease
9
https://github.com/cui2shark/cms
9
https://github.com/pgjdbc/pgjdbc
8
https://github.com/vaadin/framework
8
https://github.com/jetty/jetty.project
8
https://github.com/apache/xmlgraphics-batik
8
https://github.com/apache/hadoop
8
https://github.com/vert-x3/vertx-web
8
https://github.com/jenkinsci/config-file-provider-plugin
8
https://github.com/xwiki/xwiki-commons
8
https://github.com/hazelcast/hazelcast
8
https://github.com/nahsra/antisamy
8
https://github.com/RhinoSecurityLabs/CVEs
7
https://github.com/apache/pulsar
7
https://github.com/jenkinsci/blueocean-plugin
7
https://github.com/apache/openmeetings
7
https://github.com/OpenTSDB/opentsdb
7
https://github.com/infinispan/infinispan
7
https://github.com/elastic/elasticsearch
7
https://github.com/ratpack/ratpack
7
https://github.com/apache/syncope
7
https://github.com/apache/tika
7
https://github.com/jenkinsci/build-failure-analyzer-plugin
7
https://github.com/rubygems/rubygems
7
https://github.com/jflyfox/jfinal_cms
7
https://github.com/rundeck/rundeck
7
https://github.com/http4s/http4s
7
https://github.com/ESAPI/esapi-java-legacy
6
https://github.com/JLLeitschuh/security-research
6
https://github.com/apache/hive
6
https://bitbucket.org/snakeyaml/snakeyaml
6
https://github.com/jquery/jquery-ui
6
https://github.com/apache/geode
6
https://github.com/playframework/playframework
6
https://github.com/OpenAPITools/openapi-generator
6
https://github.com/jenkinsci/electricflow-plugin
6
https://github.com/apache/solr
6
https://github.com/jenkinsci/gerrit-trigger-plugin
6
https://github.com/line/armeria
6
https://github.com/jenkinsci/fortify-on-demand-uploader-plugin
6
https://github.com/jenkinsci/ec2-plugin
6
https://github.com/jenkinsci/subversion-plugin
6
https://github.com/cui2shark/security
6
https://github.com/PowerJob/PowerJob
6
https://github.com/jenkinsci/configuration-as-code-plugin
6
https://github.com/resteasy/resteasy
6
https://github.com/qos-ch/logback
6
https://github.com/DrunkenShells/Disclosures
6
https://github.com/neo4j-contrib/neo4j-apoc-procedures
5
https://github.com/jenkinsci/gitlab-plugin
5
https://github.com/jenkinsci/m2release-plugin
5
https://github.com/jensdietrich/xshady-release
5
https://github.com/apache/karaf
5
https://github.com/apache/activemq-artemis
5
https://github.com/apache/james-project
5
https://github.com/h2database/h2database
5
https://github.com/apache/druid
5
https://github.com/jenkinsci/codedx-plugin
5
https://github.com/apache/jackrabbit
5
https://github.com/apache/shiro
5
https://github.com/jenkinsci/github-plugin
5
https://github.com/protocolbuffers/protobuf
5
https://github.com/grails/grails-core
5
https://github.com/apache/shenyu
5
https://bitbucket.org/connect2id/nimbus-jose-jwt
5
https://github.com/alibaba/nacos
5
https://github.com/jenkinsci/junit-plugin
5
https://github.com/jenkinsci/email-ext-plugin
5
https://github.com/restlet/restlet-framework-java
5
https://github.com/jenkinsci/active-directory-plugin
5
https://github.com/jenkinsci/support-core-plugin
5
https://github.com/jettison-json/jettison
5
https://github.com/snowflakedb/snowflake-jdbc
5
https://github.com/apache/httpcomponents-client
5
https://github.com/xwiki/xwiki-rendering
5
https://github.com/jenkinsci/workflow-cps-global-lib-plugin
5
https://github.com/jenkinsci/publish-over-ssh-plugin
5
https://github.com/ktorio/ktor
5
https://github.com/wso2/carbon-identity-framework
4
https://github.com/joniles/mpxj
4
https://github.com/pippo-java/pippo
4
https://github.com/powsybl/powsybl-core
4
https://github.com/nightcloudos/new_cms
4
https://github.com/stanfordnlp/corenlp
4
https://github.com/jenkinsci/xldeploy-plugin
4
https://github.com/jenkinsci/vmanager-plugin
4
https://github.com/jenkinsci/warnings-ng-plugin
4
https://github.com/apache/ranger
4
https://github.com/jenkinsci/libvirt-slave-plugin
4
https://github.com/jenkinsci/htmlpublisher-plugin
4
https://github.com/skylot/jadx
4
https://github.com/open-metadata/OpenMetadata
4
https://github.com/apache/streampipes
4
https://github.com/apache/iotdb
4
https://github.com/shopizer-ecommerce/shopizer
4
https://github.com/jenkinsci/cloudbees-jenkins-advisor-plugin
4
https://github.com/jenkinsci/fortify-plugin
4
https://github.com/HL7/fhir-ig-publisher
4
https://github.com/apiman/apiman
4
https://github.com/geonetwork/core-geonetwork
4
https://github.com/xerial/snappy-java
4
https://github.com/jenkinsci/matrix-project-plugin
4
https://github.com/jenkinsci/nexus-platform-plugin
4
https://github.com/AsyncHttpClient/async-http-client
4
https://github.com/unclebob/fitnesse
4
https://github.com/jenkinsci/hpe-application-automation-tools-plugin
4
https://github.com/jfinal/jfinal
4
https://github.com/micronaut-projects/micronaut-core
4
https://github.com/wildfly/wildfly-core
4
https://github.com/resteasy/Resteasy
4
https://github.com/aws/aws-iot-device-sdk-java-v2
4
https://github.com/jenkinsci/credentials-binding-plugin
4
https://github.com/jenkinsci/workflow-cps-plugin
4
https://github.com/jenkinsci/gitlab-oauth-plugin
4
https://github.com/reportportal/reportportal
4
https://github.com/openhab/openhab-webui
4
https://github.com/jenkinsci/git-client-plugin
4
https://github.com/jooby-project/jooby
4
https://github.com/jquery/jquery
4
https://github.com/HtmlUnit/htmlunit
4
https://github.com/itext/itext7
4
https://github.com/yamcs/yamcs
4
https://github.com/jenkinsci/job-config-history-plugin
4
https://github.com/jenkinsci/ansible-plugin
4
https://github.com/jenkinsci/active-choices-plugin
4
https://github.com/Robothy/local-s3
4
https://github.com/jenkinsci/p4-plugin
4
https://github.com/jenkinsci/rundeck-plugin
4
https://github.com/graphql-java/graphql-java
3
https://github.com/bcgit/bc-csharp
3
https://bitbucket.org/b_c/jose4j
3
https://github.com/jenkinsci/embeddable-build-status-plugin
3
https://github.com/hibernate/hibernate-validator
3
https://github.com/jenkinsci/cas-plugin
3
https://github.com/ls1intum/Ares
3
https://github.com/jenkinsci/gitlab-branch-source-plugin
3
https://github.com/reactor/reactor-netty
3
https://github.com/spring-projects/spring-boot
3
https://github.com/mbechler/marshalsec
3
https://github.com/jenkinsci/azure-credentials-plugin
3
https://github.com/aws/amazon-redshift-jdbc-driver
3
https://github.com/apache/santuario-java
3
https://github.com/jenkinsci/mercurial-plugin
3
https://github.com/li-yu320/cms
3
https://github.com/wildfly/wildfly
3
https://github.com/Adobe-Consulting-Services/acs-aem-commons
3
https://github.com/matrix-org/matrix-android-sdk2
3
https://github.com/apache/cxf-fediz
3
https://github.com/HubSpot/jinjava
3
https://github.com/apache/zookeeper
3
https://github.com/jenkinsci/kubernetes-plugin
3
https://svn.apache.org/viewvc/tomcat/tc7.0.x
3
https://github.com/akka/akka-http
3
https://github.com/vaadin/flow-components
3
https://github.com/javamelody/javamelody
3