maven
Security Advisories in maven
High
3 days ago
mchange-commons-java contains elements susceptible to abuse via JNDI injection and "deserialization gadgets"
maven
com.mchange:mchange-commons-java
High
3 days ago
OpenAM Insecure SSO Cookie Initialization
maven
org.openidentityplatform.openam:openam-core
Moderate
10 days ago
Netty: RedisArrayAggregator max-elements failure leaves retained partial aggregate state
maven
io.netty:netty-codec-redis
Moderate
11 days ago
jsoup: Cleaner may expose markup with custom raw-text elements
maven
org.jsoup:jsoup
Moderate
17 days ago
core-geonetwork has an Open Redirect Bypass
maven
org.geonetwork-opensource:geonetwork
High
17 days ago
Netty: HTTP/2 decompression leaks ByteBuf reference count when the decompressor channel is already closed (Direct memory leak / OOM DoS)
maven
io.netty:netty-codec-http2
High
17 days ago
Spring Data: Unbounded property-path cache keyed by externally-supplied path string
maven
org.springframework.data:spring-data-commons
Moderate
17 days ago
Apache HttpComponents Client: Connection Leak on Content-Encoding Decode Error Leads to Pool Exhaustion DoS
maven
org.apache.httpcomponents.client5:httpclient5
Moderate
19 days ago
OpenTelemetry Java Instrumentation: JDBC Auto-Instrumentation Logging Clear-Text Passwords
maven
io.opentelemetry.javaagent:opentelemetry-javaagent
Moderate
19 days ago
OpenTelemetry Javaagent RMI context propagation allows resource exhaustion
maven
io.opentelemetry.javaagent:opentelemetry-javaagent
High
19 days ago
Quarkus: Authentication/Authorization Bypass via Advanced Path Normalization Vulnerabilities
maven
io.quarkus:quarkus-vertx-http
Moderate
19 days ago
veraPDF Parser DoS via PostScript Type 1 Font Programs
maven
org.verapdf:parser
Moderate
19 days ago
veraPDF-validatio: Use of Default `DocumentBuilderFactory` leads to XXE When Processing Untrusted PDFs
maven
org.verapdf:validation-model-jakarta, org.verapdf:validation-model
High
19 days ago
veraPDF Validation XXE via Rich Text
maven
org.verapdf:validation-model-jakarta, org.verapdf:validation-model
High
19 days ago
veraPDF Validation XXE via XFA
maven
org.verapdf:validation-model-jakarta, org.verapdf:validation-model
High
20 days ago
QTINeon has unauthenticated relay-to-host amplification via unbounded RECONNECT_REQUEST forwarding
npm, pypi, maven
qti-neon, com.quietterminal:qti-neon
High
20 days ago
Cedar-Java has policy injection, type confusion, and incorrect equality comparison vulnerabilities
maven
com.cedarpolicy:cedar-java
High
20 days ago
java-client Allows Network Pivot via Unvalidated directConnect Redirect in AppiumCommandExecutor
maven
io.appium:java-client
Moderate
21 days ago
org.xwiki.contrib:discussions-server has Cross-Site Request Forgery (CSRF) issue that makes it possible to delete messages
maven
org.xwiki.contrib:discussions-server
High
24 days ago
OmniFaces: Forged combined-resource IDs and related output/push boundaries
maven
org.omnifaces:omnifaces
High
24 days ago
blaze: Unbounded WebSocket message aggregation in http4s-blaze-server
maven
org.http4s:http4s-blaze-server_3, org.http4s:http4s-blaze-server_2.12, org.http4s:http4s-blaze-server_2.13
High
24 days ago
blaze: Chunked-body trailer fields promoted into Request.headers in blaze-server (front-end header-sanitization bypass)
maven
org.http4s:blaze-http_2.13, org.http4s:blaze-http_3, org.http4s:blaze-http_2.12
High
24 days ago
blaze: Multiple HTTP/1.1 request-smuggling primitives in blaze's Java wire parser
maven
org.http4s:blaze-http_2.13, org.http4s:blaze-http_3, org.http4s:http4s-blaze-server_2.13
Critical
24 days ago
OpenDJ SASL PLAIN authzid bypassing the proxy ACI scope check
maven
org.openidentityplatform.opendj:opendj-server-legacy
Critical
24 days ago
OpenDJ unauthenticated SSRF, local file read and unbounded-read DoS in the DSMLv2 gateway
maven
org.openidentityplatform.opendj:opendj-dsml-servlet
Critical
24 days ago
OpenAM: Unauthenticated Remote Code Execution via Class.forName in AuthXMLUtils.createCustomCallback
maven
org.openidentityplatform.openam:openam-core
Moderate
24 days ago
OpenAM Reflected XSS in the OAuth2/OIDC `wap` consent page
maven
org.openidentityplatform.openam:openam-oauth2
Critical
24 days ago
OpenAM: WebAuthn Java deserialization RCE via ObjectInputFilter depth>1 bypass
maven
org.openidentityplatform.openam:openam-auth-webauthn
High
24 days ago
Netty: Denial of Service in XmlFrameDecoder via CPU Exhaustion
maven
io.netty:netty-codec-xml
Moderate
24 days ago
Netty: Memory Leak in DNS Record Decoder via Malformed Domain Names
maven
io.netty:netty-codec-dns
Low
24 days ago
AWS CDK CodeBuild S3 Log Encryption Boolean Inversion
pypi, go, maven, nuget, npm
aws-cdk.aws-codebuild, aws-cdk-lib, github.com/aws/aws-cdk-go/awscdk, software.amazon.awscdk:codebuild, Amazon.CDK.AWS.CodeBuild, @aws-cdk/aws-codebuild, github.com/aws/aws-cdk-go/awscdk/v2, software.amazon.awscdk:aws-cdk-lib, Amazon.CDK.Lib
Moderate
24 days ago
LZ4 Java: Native XXHash implementations can crash the JVM when passed invalid byte array ranges
maven
org.lz4:lz4-java, at.yawk.lz4:lz4-java
Moderate
25 days ago
c3p0 can, in combination with other libraries, compose to a "sink" for deserialization gadgets
maven
com.mchange:c3p0
Critical
25 days ago
fastjson has a remote code execution (RCE) vulnerability
maven
com.alibaba:fastjson
High
26 days ago
Eclipse Jetty: DoS attack triggering OutOfMemory with 100-Continue requests
maven
org.eclipse.jetty:jetty-server
Moderate
26 days ago
Eclipse Jetty: HTTP Authority/Host mismatch
maven
org.eclipse.jetty:jetty-server
Moderate
26 days ago
Eclipse Jetty: Cross-Request Leakage for trailers on HTTP/1.1 keep-alive connections
maven
org.eclipse.jetty:jetty-server
High
26 days ago
Eclipse Jetty Digest Authentication: ISO-8859-1 lossy encoding allows authentication bypass via character substitution
maven
org.eclipse.jetty.ee9:jetty-ee9-security, org.eclipse.jetty.ee8:jetty-ee8-security, org.eclipse.jetty:jetty-security
Moderate
26 days ago
Netty: CRLF Injection via Multipart Filename in Netty HttpPostRequestEncoder
maven
io.netty:netty-codec-http
Moderate
26 days ago
Netty: STOMP CONNECT Frame Header Injection in Netty
maven
io.netty:netty-codec-stomp
Moderate
26 days ago
Netty: HAProxy V1 Protocol CRLF Injection via AF_UNIX Address
maven
io.netty:netty-codec-haproxy
High
26 days ago
Netty: [Bzip2Decoder] Infinite Loop in RLE State Machine Leads to Event-Loop Thread Hang
maven
io.netty:netty-codec, io.netty:netty-codec-compression
Moderate
26 days ago
Netty: [codec-http2] Lack of Host Header Deduplication in HTTP/2→HTTP/1.x Translation Leads to Request Routing Bypass
maven
io.netty:netty-codec-http2
Moderate
26 days ago
Netty: [HttpContentEncoder] Unbounded Per-Connection Queue Growth via HTTP/1.1 Pipelining Leads to Denial of Service
maven
io.netty:netty-codec-http
Moderate
26 days ago
Netty: WebSockets V07/V08 handshaker missing Connection/Upgrade validation
maven
io.netty:netty-codec-http
High
26 days ago
Netty: TOCTOU in OcspServerCertificateValidator
maven
io.netty:netty-handler-ssl-ocsp
High
26 days ago
Netty: Out-of-date OCSP Responses Accepted by OcspServerCertificateValidator
maven
io.netty:netty-handler-ssl-ocsp
High
26 days ago
Netty: Missing CertificateID Validation in OCSP Response Allows Replay Attacks
maven
io.netty:netty-handler-ssl-ocsp
High
26 days ago
Netty XML: Injection / Risky Sink — unconfigured XML factory with active DTD and entity handling
maven
io.netty:netty-codec-xml
High
26 days ago
Netty: Memory Exhaustion via HTTP/3 Reserved Frame Types
maven
io.netty:netty-codec-http3
Moderate
26 days ago
Netty: Security Control Bypass via CORS Short-Circuit Failure
maven
io.netty:netty-codec-http
High
26 days ago
Netty: [SpdyHttpDecoder] ByteBuf Reference Leak on RST_STREAM Leads to Native Memory Exhaustion
maven
io.netty:netty-codec-http
High
26 days ago
Netty: [codec-haproxy] Signed-Byte Sentinel Collision in HAProxyMessageDecoder Leads to Unbounded Memory Exhaustion
maven
io.netty:netty-codec-haproxy
High
26 days ago
Netty SPDY zlib header block continues decoded expansion after maxHeaderSize truncation
maven
io.netty:netty-codec-http
High
26 days ago
Netty SPDY SETTINGS frame count materializes unbounded settings map
maven
io.netty:netty-codec-http
Moderate
27 days ago
jackson-databind: @JsonView bypassed for @JsonUnwrapped container properties on deserialization
maven
tools.jackson.core:jackson-databind, com.fasterxml.jackson.core:jackson-databind
High
27 days ago
jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq)
maven
tools.jackson.core:jackson-core, com.fasterxml.jackson.core:jackson-core
Moderate
27 days ago
jackson-databind: `@JsonView` bypass for creator properties with `@JsonTypeInfo(include=As.EXTERNAL_PROPERTY)`
maven
com.fasterxml.jackson.core:jackson-databind
Moderate
27 days ago
jackson-databind: @JsonIgnore on a Record property is bypassed with a PropertyNamingStrategy
maven
tools.jackson.core:jackson-databind, com.fasterxml.jackson.core:jackson-databind
High
27 days ago
PostgreSQL JDBC Driver: Silent channel-binding authentication downgrade via unsupported certificate algorithms
maven
org.postgresql:postgresql
High
about 1 month ago
AWS-JDBC Wrapper: Privilege Escalation in Aurora PostgreSQL instance
maven
software.amazon.jdbc:aws-advanced-jdbc-wrapper
High
about 1 month ago
ArcadeDB has cross-database IDOR: /ts/*, /batch/*, Prometheus and Grafana handlers bypass authorization
maven
com.arcadedb:arcadedb-server
High
about 1 month ago
ArcadeDB: Scripting authorization gate (GHSA-48qw-824m-86pr) bypassed via SQL DEFINE FUNCTION ... LANGUAGE js
maven
com.arcadedb:arcadedb-engine
High
about 1 month ago
ArcadeDB: Trigger scripts run with java.lang.* allowed, enabling OS command execution (RCE)
maven
com.arcadedb:arcadedb-engine
High
about 1 month ago
ArcadeDB: Privilege escalation via reader role in /api/v1/command JS scripting language — arbitrary host file read
maven
com.arcadedb:arcadedb-server
High
about 1 month ago
ArcadeDB: Read-only users can mutate database schema (incomplete fix of CVE-2026-44221)
maven
com.arcadedb:arcadedb-engine
High
about 1 month ago
ArcadeDB: IMPORT DATABASE allows SSRF and arbitrary local file read by authenticated users
maven
com.arcadedb:arcadedb-engine
High
about 1 month ago
dd-trace-java: Improper parsing of W3C baggage headers may lead to DoS
maven
com.datadoghq:dd-java-agent
High
about 1 month ago
Netty: Denial of Service via Unbounded Headers in StompSubframeDecoder
maven
io.netty:netty-codec-stomp
High
about 1 month ago
Apollo ConfigService access key authentication bypass via raw config file appId parsing
maven
com.ctrip.framework.apollo:apollo
High
about 1 month ago
Apollo ConfigService access key authentication bypass via appId parsing and non-canonical matching
maven
com.ctrip.framework.apollo:apollo
Moderate
about 1 month ago
Apollo Portal: There is a risk of unauthorized access to the Apollo configuration center
maven
com.ctrip.framework.apollo:apollo
Moderate
about 1 month ago
Apache Log4j API: Improper encoding of non-finite floating-point values during MapMessage JSON serialization
maven
org.apache.logging.log4j:log4j-api
High
about 1 month ago
org.hl7.fhir.core: ReDoS via FHIRPath matches()/replaceMatches() in FHIR Validator HTTP Endpoint
maven
ca.uhn.hapi.fhir:org.hl7.fhir.validation.cli, ca.uhn.hapi.fhir:org.hl7.fhir.validation, ca.uhn.hapi.fhir:org.hl7.fhir.r5, ca.uhn.hapi.fhir:org.hl7.fhir.r4b, ca.uhn.hapi.fhir:org.hl7.fhir.r4, ca.uhn.hapi.fhir:org.hl7.fhir.dstu3, ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may, ca.uhn.hapi.fhir:org.hl7.fhir.dstu2
Moderate
about 1 month ago
Micronaut: DefaultHttpClient follows redirects, forwarding Authorization, Cookie, and Proxy-Authorization headers
maven
io.micronaut:micronaut-http-client
High
about 1 month ago
Micronaut doesn't set a maximum redirect count for its HTTP Client, enabling infinite loop DoS
maven
io.micronaut:micronaut-http-client
High
about 1 month ago
NL Portal: IDOR allows any authenticated user to complete and tamper with another user's taak
maven
nl.nl-portal:taak
Moderate
about 1 month ago
NL Portal: Missing per-user authorization on document and decision GraphQL queries in nl-portal-backend-libraries
maven
nl.nl-portal:besluiten, nl.nl-portal:documenten-api
Moderate
about 1 month ago
DSpace: Path Traversal is possible through LDN message generation
maven
org.dspace:dspace-api
Moderate
about 1 month ago
DSpace: ORE resource URI does not validate scheme for non-web resources
maven
org.dspace:dspace-api
Moderate
about 1 month ago
DSpace has a possible Path Traversal Vulnerability in its Curation Task Reporter output path
maven
org.dspace:dspace-api
High
about 1 month ago
DSpace has possible Remote Code Execution (RCE) through Velocity Templates used by LDN
maven
org.dspace:dspace-api
High
about 1 month ago
XWiki Platform Old Core: Resource path traversal via /skin/ action endpoint in Jetty 12+
maven
org.xwiki.platform:xwiki-platform-oldcore
High
about 1 month ago
OpenRemote has Authenticated SQL Injection via Datapoint Crosstab Export
maven
io.openremote:openremote-manager
High
about 1 month ago
OpenRemote has an incomplete fix for CVE-2026-40882: XXE in KNXProtocol.startAssetImport() allows arbitrary file read via unprotected XMLInputFactory
maven
io.openremote:openremote-agent
High
about 1 month ago
OpenRemote has Cross-Realm User Information Disclosure in UserResourceImpl
maven
io.openremote:openremote-manager
Moderate
about 1 month ago
OpenRemote read-only asset users can write predicted datapoints
maven
io.openremote:openremote-manager
Critical
about 1 month ago
Apache Camel: KeycloakSecurityPolicy has Improper Authentication, Missing Authentication for Critical Function and Failing Open Vulnerabilities
maven
org.apache.camel:camel-keycloak
Critical
about 1 month ago
Apache Camel DNS Has Improper Input Validation, Leading to Server-Side Request Forgery (SSRF)
maven
org.apache.camel:camel-dns
Critical
about 1 month ago
Apache Camel: camel-mongodb-gridfs producer allows GridFS operation override and NoSQL operator injection via unfiltered gridfs.* HTTP headers
maven
org.apache.camel:camel-mongodb-gridfs
Critical
about 2 months ago
LaunchServer FileServerHandler has an unauthenticated path traversal issue
maven
pro.gravit.launcher:launchserver-api
High
about 2 months ago
Keycloak: Unauthorized access via improper validation of encrypted SAML assertions
maven
org.keycloak:keycloak-services
High
about 2 months ago
OnGres SCRAM silent channel-binding authentication downgrade via unsupported certificate algorithms
maven
com.ongres.scram:scram-common, com.ongres.scram:scram-client
High
about 2 months ago
Keycloak has privilege escalation via improper scope mapping enforcement
maven
org.keycloak:keycloak-services
Low
about 2 months ago
land.oras:oras-java-sdk: Symlink-based path traversal in ArchiveUtils.untar / unzip allows arbitrary file write outside extraction directory
maven
land.oras:oras-java-sdk
High
about 2 months ago
Apache HttpComponents Core: HPackDecoder Unlimited Header List Size Before SETTINGS ACK
maven
org.apache.httpcomponents.core5:httpcore5-h2
High
about 2 months ago
Apache HttpComponents Core HTTP/1 header parsing can cause memory-exhaustion denial of service
maven
org.apache.httpcomponents.core5:httpcore5
Filter by Severity
Filter by Package
org.jenkins-ci.main:jenkins-core
259
com.liferay.portal:release.portal.bom
158
org.apache.tomcat:tomcat
149
com.liferay.portal:release.dxp.bom
118
org.keycloak:keycloak-services
97
com.fasterxml.jackson.core:jackson-databind
79
org.apache.struts:struts2-core
58
org.apache.tomcat.embed:tomcat-embed-core
56
org.keycloak:keycloak-core
50
org.xwiki.platform:xwiki-platform-oldcore
46
org.elasticsearch:elasticsearch
44
net.mingsoft:ms-mcms
39
io.undertow:undertow-core
39
com.thoughtworks.xstream:xstream
37
org.apache.tomcat:tomcat-catalina
37
com.jfinal:jfinal
36
org.jenkins-ci.plugins:script-security
34
org.opencms:opencms-core
31
org.apache.solr:solr-core
31
org.springframework.security:spring-security-core
30
org.eclipse.jetty:jetty-server
29
org.apache.tomcat:tomcat-coyote
28
org.keycloak:keycloak-parent
26
org.springframework:spring-webmvc
25
org.apache.openmeetings:openmeetings-parent
25
org.xwiki.platform:xwiki-platform-web-templates
23
io.netty:netty-codec-http
23
org.bouncycastle:bcprov-jdk15on
22
org.apache.nifi:nifi
21
org.cloudfoundry.identity:cloudfoundry-identity-server
21
org.springframework:spring-core
19
org.springframework:spring-webflux
18
org.apache.jspwiki:jspwiki-main
18
com.vaadin:vaadin-bom
18
com.liferay.portal:com.liferay.portal.impl
18
org.apache.activemq:activemq-client
18
org.apache.geode:geode-core
17
org.apache.inlong:manager-pojo
17
org.apache.dolphinscheduler:dolphinscheduler
16
org.apache.dubbo:dubbo
16
org.apache.ranger:ranger
16
org.apache.struts.xwork:xwork-core
15
ai.h2o:h2o-core
15
org.xwiki.platform:xwiki-platform-web
15
org.opensearch.plugin:opensearch-security
14
org.geoserver.web:gs-web-app
14
org.apache.activemq:apache-activemq
14
org.bouncycastle:bcprov-jdk14
13
org.apache.tika:tika-core
13
h2o
13
com.vaadin:flow-server
13
org.apache.kylin:kylin
13
org.apache.hadoop:hadoop-main
13
org.apache.cxf:cxf-core
13
org.springframework:spring-web
13
org.jeecgframework.boot:jeecg-boot-parent
12
org.apache.hadoop:hadoop-common
12
org.jenkins-ci.plugins:email-ext
12
org.jenkins-ci.plugins.workflow:workflow-cps
12
org.apache.cassandra:cassandra-all
12
org.graylog2:graylog2-server
12
org.apache.streampark:streampark
12
org.apache.shiro:shiro-core
12
org.apache.activemq:activemq-broker
12
org.jenkins-ci.plugins:git
12
org.jenkins-ci.plugins:active-directory
11
org.bouncycastle:bcprov-jdk15to18
11
org.apache.commons:commons-compress
11
com.xuxueli:xxl-job
11
org.apache.jspwiki:jspwiki-war
11
org.apache.james:james-server
11
org.mortbay.jetty:jetty
11
org.apache.camel:camel-core
11
org.xwiki.platform:xwiki-platform-rest-server
11
org.postgresql:postgresql
11
org.xwiki.platform:xwiki-platform-administration-ui
11
org.igniterealtime.openfire:parent
11
org.apache.archiva:archiva
11
io.netty:netty-codec-http2
11
io.netty:netty-handler
10
io.netty:netty
10
com.sonyericsson.jenkins.plugins.bfa:build-failure-analyzer
10
org.apache.activemq:activemq-all
10
org.apache.cxf:cxf
10
ch.qos.logback:logback-core
10
org.apache.linkis:linkis
10
org.craftercms:crafter-studio
10
org.apache.inlong:manager-service
10
org.jenkins-ci.plugins.workflow:workflow-cps-global-lib
10
org.apache.dolphinscheduler:dolphinscheduler-api
9
org.opencrx:opencrx-core-models
9
org.jenkins-ci.plugins:config-file-provider
9
org.apache.zookeeper:zookeeper
9
struts:struts
9
org.apache.tapestry:tapestry-core
9
org.opennms:opennms
9
org.apache.hive:hive-exec
9
org.apache.hive:hive
9
tools.jackson.core:jackson-databind
9
org.jboss.netty:netty
9
org.jenkins-ci.plugins:electricflow
9
cn.hutool:hutool-core
9
org.keycloak:keycloak-quarkus-server
9
io.jenkins:configuration-as-code
9
org.silverpeas.core:silverpeas-core-web
8
org.apache.pdfbox:pdfbox
8
org.apache.druid:druid
8
org.jenkins-ci.plugins:credentials-binding
8
org.apache.hive:hive-service
8
org.apache.zeppelin:zeppelin
8
mysql:mysql-connector-java
8
io.jenkins.blueocean:blueocean
8
org.apache.ozone:ozone-main
8
org.jenkins-ci.plugins:subversion
8
org.jenkins-ci.plugins:oic-auth
8
com.ruoyi:ruoyi
8
org.jenkins-ci.plugins:ec2
8
org.yaml:snakeyaml
8
org.springframework.cloud:spring-cloud-config-server
8
org.apache.mina:mina-core
8
org.apache.wicket:wicket-core
8
org.apache.santuario:xmlsec
8
org.bouncycastle:bc-fips
8
org.bouncycastle:bcprov-jdk18on
8
org.dspace:dspace-api
8
org.jeecgframework.boot:jeecg-boot-common
8
org.apache.xmlgraphics:batik
8
org.springframework:spring-expression
8
org.apache.ambari:ambari
8
org.geoserver:gs-wms
8
net.opentsdb:opentsdb
7
org.jenkins-ci.plugins:artifactory
7
org.apache.activemq:activemq-parent
7
org.apache.karaf:apache-karaf
7
org.apache.poi:poi
7
org.apache.axis:axis
7
org.apache.inlong:manager-web
7
org.springframework.data:spring-data-commons
7
org.jenkins-ci.plugins:rundeck
7
rubygems-update
7
org.webjars:bootstrap
7
net.gleske:jervis
7
org.apache.syncope:syncope-core
7
tech.powerjob:powerjob
7
org.jenkins-ci.plugins:jobConfigHistory
7
org.apache.atlas:atlas-common
7
org.apache.kafka:kafka-clients
7
org.infinispan:infinispan-core
7
com.xuxueli:xxl-job-admin
7
org.jruby:jruby-stdlib
7
io.jenkins.plugins:miniorange-saml-sp
7
org.keycloak:keycloak-server-spi-private
7
io.atomix:atomix
7
org.jenkins-ci.plugins:htmlpublisher
7
org.apache.ignite:ignite-core
7
org.openidentityplatform.openam:openam-oauth2
7
org.jboss.resteasy:resteasy-client
7
org.owasp.esapi:esapi
7
io.openremote:openremote-manager
7
org.springframework.amqp:spring-amqp
7
org.apache.derby:derby
7
org.springframework.data:spring-data-rest-core
7
org.jeecgframework.boot:jeecg-boot-base
7
org.opencastproject:opencast-kernel
7
io.dataease:dataease-plugin-common
7
io.jenkins.plugins:cavisson-ns-nd-integration
7
com.ctrip.framework.apollo:apollo
7
org.jenkins-ci.plugins:openshift-deployer
7
com.vaadin:vaadin-server
7
io.vertx:vertx-core
7
org.owasp.antisamy:antisamy
7
com.hazelcast:hazelcast
7
io.jenkins.plugins:warnings-ng
7
io.vertx:vertx-web
7
org.yamcs:yamcs-core
6
com.coravy.hudson.plugins.github:github
6
org.igniterealtime.openfire:xmppserver
6
org.apache.shenyu:shenyu-common
6
org.apache.mesos:mesos
6
gov.nsa.emissary:emissary
6
org.apache.spark:spark-core_2.11
6
org.apache.zeppelin:zeppelin-server
6
org.jenkins-ci.plugins:repository-connector
6
jquery-ui
6
org.jenkins-ci.plugins:ghprb
6
org.silverpeas.core:silverpeas-core
6
org.apache.struts:struts2-rest-plugin
6
org.jenkins-ci.plugins:azure-vm-agents
6
org.glassfish.main.admingui:console-common
6
org.apache.spark:spark-core_2.10
6
com.datapipe.jenkins.plugins:hashicorp-vault-plugin
6
hudson.plugins:project-inheritance
6
org.jenkins-ci.plugins:gitlab-plugin
6
org.apache.streampipes:streampipes-parent
6
ca.uhn.hapi.fhir:org.hl7.fhir.utilities
6
org.wildfly:wildfly-parent
6
io.netty:netty-codec-redis
6
ca.uhn.hapi.fhir:org.hl7.fhir.validation
6
jQuery.UI.Combined
6
org.jenkins-ci.plugins:azure-ad
6
Filter by Repository
https://github.com/xwiki/xwiki-platform
222
https://github.com/jenkinsci/jenkins
178
https://github.com/liferay/liferay-portal
170
https://github.com/apache/tomcat
118
https://github.com/keycloak/keycloak
89
https://github.com/FasterXML/jackson-databind
70
https://github.com/spring-projects/spring-framework
51
https://github.com/apache/struts
47
https://github.com/x-stream/xstream
37
https://github.com/apache/activemq
34
https://github.com/apache/inlong
31
https://github.com/CVEProject/cvelist
28
https://github.com/netty/netty
27
https://github.com/geoserver/geoserver
26
https://github.com/apache/nifi
26
https://github.com/bcgit/bc-java
25
https://github.com/apache/cxf
24
https://github.com/eclipse/jetty.project
23
https://github.com/jenkinsci/script-security-plugin
22
https://github.com/undertow-io/undertow
21
https://github.com/opencast/opencast
20
https://github.com/OpenNMS/opennms
20
https://github.com/jeecgboot/jeecg-boot
20
https://github.com/alkacon/opencms-core
19
https://github.com/cloudfoundry/uaa
19
https://github.com/apache/camel
18
https://github.com/vaadin/platform
18
https://github.com/apache/kylin
17
https://github.com/quarkusio/quarkus
16
https://github.com/xuxueli/xxl-job
15
https://github.com/spring-projects/spring-security
15
https://github.com/apache/zeppelin
14
https://github.com/ming-soft/MCMS
14
https://github.com/Graylog2/graylog2-server
14
https://github.com/dromara/hutool
13
https://github.com/apache/dolphinscheduler
13
https://github.com/OpenRefine/OpenRefine
13
https://github.com/DSpace/DSpace
12
https://github.com/h2oai/h2o-3
12
https://github.com/igniterealtime/Openfire
12
https://github.com/vaadin/flow
11
https://github.com/apache/lucene-solr
10
https://github.com/opensearch-project/security
10
https://github.com/jenkinsci/git-plugin
10
https://github.com/cui2shark/cms
9
https://github.com/dataease/dataease
9
https://github.com/nahsra/antisamy
8
https://github.com/apache/xmlgraphics-batik
8
https://github.com/hazelcast/hazelcast
8
https://github.com/apache/hadoop
8
https://github.com/pgjdbc/pgjdbc
8
https://github.com/vert-x3/vertx-web
8
https://github.com/jetty/jetty.project
8
https://github.com/vaadin/framework
8
https://github.com/jenkinsci/config-file-provider-plugin
8
https://github.com/xwiki/xwiki-commons
8
https://github.com/http4s/http4s
7
https://github.com/OpenTSDB/opentsdb
7
https://github.com/jflyfox/jfinal_cms
7
https://github.com/jenkinsci/blueocean-plugin
7
https://github.com/RhinoSecurityLabs/CVEs
7
https://github.com/elastic/elasticsearch
7
https://github.com/apache/pulsar
7
https://github.com/infinispan/infinispan
7
https://github.com/jenkinsci/build-failure-analyzer-plugin
7
https://github.com/apache/syncope
7
https://github.com/ratpack/ratpack
7
https://github.com/apache/openmeetings
7
https://github.com/rundeck/rundeck
7
https://github.com/twbs/bootstrap
7
https://github.com/rubygems/rubygems
7
https://github.com/apache/tika
7
https://github.com/apache/geode
6
https://github.com/playframework/playframework
6
https://github.com/OpenAPITools/openapi-generator
6
https://github.com/DrunkenShells/Disclosures
6
https://github.com/jenkinsci/electricflow-plugin
6
https://github.com/apache/hive
6
https://github.com/apache/solr
6
https://bitbucket.org/snakeyaml/snakeyaml
6
https://github.com/cui2shark/security
6
https://github.com/JLLeitschuh/security-research
6
https://github.com/jenkinsci/fortify-on-demand-uploader-plugin
6
https://github.com/line/armeria
6
https://github.com/jenkinsci/gerrit-trigger-plugin
6
https://github.com/qos-ch/logback
6
https://github.com/ESAPI/esapi-java-legacy
6
https://github.com/PowerJob/PowerJob
6
https://github.com/resteasy/resteasy
6
https://github.com/jenkinsci/configuration-as-code-plugin
6
https://github.com/jenkinsci/subversion-plugin
6
https://github.com/jenkinsci/ec2-plugin
6
https://github.com/apache/karaf
5
https://github.com/jenkinsci/codedx-plugin
5
https://github.com/apache/james-project
5
https://github.com/ktorio/ktor
5
https://github.com/snowflakedb/snowflake-jdbc
5
https://github.com/apache/druid
5
https://github.com/h2database/h2database
5
https://github.com/jenkinsci/support-core-plugin
5
https://github.com/neo4j-contrib/neo4j-apoc-procedures
5
https://github.com/jenkinsci/gitlab-plugin
5
https://github.com/jenkinsci/active-directory-plugin
5
https://github.com/jenkinsci/m2release-plugin
5
https://github.com/apache/activemq-artemis
5
https://github.com/apache/shenyu
5
https://github.com/jensdietrich/xshady-release
5
https://github.com/grails/grails-core
5
https://github.com/jquery/jquery-ui
5
https://github.com/apache/httpcomponents-client
5
https://github.com/jettison-json/jettison
5
https://github.com/protocolbuffers/protobuf
5
https://github.com/alibaba/nacos
5
https://github.com/jenkinsci/email-ext-plugin
5
https://github.com/restlet/restlet-framework-java
5
https://github.com/jenkinsci/publish-over-ssh-plugin
5
https://github.com/xwiki/xwiki-rendering
5
https://github.com/jenkinsci/github-plugin
5
https://github.com/jenkinsci/workflow-cps-global-lib-plugin
5
https://github.com/apache/shiro
5
https://github.com/apache/jackrabbit
5
https://github.com/jquery/jquery
5
https://github.com/jenkinsci/junit-plugin
5
https://bitbucket.org/connect2id/nimbus-jose-jwt
5
https://github.com/jenkinsci/ansible-plugin
4
https://github.com/Robothy/local-s3
4
https://github.com/jenkinsci/matrix-project-plugin
4
https://github.com/xerial/snappy-java
4
https://github.com/HL7/fhir-ig-publisher
4
https://github.com/shopizer-ecommerce/shopizer
4
https://github.com/yamcs/yamcs
4
https://github.com/apiman/apiman
4
https://github.com/jenkinsci/fortify-plugin
4
https://github.com/jenkinsci/xldeploy-plugin
4
https://github.com/wso2/carbon-identity-framework
4
https://github.com/jenkinsci/htmlpublisher-plugin
4
https://github.com/jenkinsci/libvirt-slave-plugin
4
https://github.com/joniles/mpxj
4
https://github.com/jenkinsci/active-choices-plugin
4
https://github.com/nightcloudos/new_cms
4
https://github.com/jenkinsci/warnings-ng-plugin
4
https://github.com/pippo-java/pippo
4
https://github.com/apache/iotdb
4
https://github.com/jooby-project/jooby
4
https://github.com/apache/ranger
4
https://github.com/jenkinsci/vmanager-plugin
4
https://github.com/jenkinsci/gitlab-oauth-plugin
4
https://github.com/reportportal/reportportal
4
https://github.com/jenkinsci/p4-plugin
4
https://github.com/jenkinsci/workflow-cps-plugin
4
https://github.com/aws/aws-iot-device-sdk-java-v2
4
https://github.com/stanfordnlp/corenlp
4
https://github.com/jenkinsci/git-client-plugin
4
https://github.com/resteasy/Resteasy
4
https://github.com/itext/itext7
4
https://github.com/HtmlUnit/htmlunit
4
https://github.com/skylot/jadx
4
https://github.com/jenkinsci/credentials-binding-plugin
4
https://github.com/AsyncHttpClient/async-http-client
4
https://github.com/powsybl/powsybl-core
4
https://github.com/jenkinsci/job-config-history-plugin
4
https://github.com/geonetwork/core-geonetwork
4
https://github.com/jfinal/jfinal
4
https://github.com/jenkinsci/rundeck-plugin
4
https://github.com/openhab/openhab-webui
4
https://github.com/jenkinsci/cloudbees-jenkins-advisor-plugin
4
https://github.com/apache/streampipes
4
https://github.com/wildfly/wildfly-core
4
https://github.com/jenkinsci/hpe-application-automation-tools-plugin
4
https://github.com/micronaut-projects/micronaut-core
4
https://github.com/unclebob/fitnesse
4
https://github.com/jenkinsci/nexus-platform-plugin
4
https://github.com/open-metadata/OpenMetadata
4
https://github.com/jenkinsci/embeddable-build-status-plugin
3
https://github.com/jenkinsci/gitlab-branch-source-plugin
3
https://github.com/hibernate/hibernate-validator
3
https://github.com/jenkinsci/cas-plugin
3
https://github.com/ls1intum/Ares
3
https://bitbucket.org/b_c/jose4j
3
https://github.com/vaadin/flow-components
3
https://github.com/reactor/reactor-netty
3
https://github.com/graphql-java/graphql-java
3
https://github.com/HubSpot/jinjava
3
https://github.com/Adobe-Consulting-Services/acs-aem-commons
3
https://github.com/apache/zookeeper
3
https://github.com/jenkinsci/kubernetes-plugin
3
https://svn.apache.org/viewvc/tomcat/tc7.0.x
3
https://github.com/wildfly/wildfly
3
https://github.com/li-yu320/cms
3
https://github.com/jenkinsci/mercurial-plugin
3
https://github.com/akka/akka-http
3
https://github.com/apache/santuario-java
3
https://github.com/jenkinsci/azure-credentials-plugin
3
https://github.com/spring-projects/spring-boot
3
https://github.com/jenkinsci/audit-trail-plugin
3
https://github.com/codehaus-plexus/plexus-utils
3
https://github.com/apache/incubator-hugegraph
3
https://github.com/google/guava
3
https://github.com/wso2/carbon-registry
3