Moderate 2,934 High 1,928 Critical 799 Low 327

org.jenkins-ci.main:jenkins-core 56 com.fasterxml.jackson.core:jackson-databind 43 org.apache.tomcat:tomcat 32 com.liferay.portal:release.portal.bom 25 com.thoughtworks.xstream:xstream 22 com.jfinal:jfinal 21 org.apache.struts:struts2-core 21 com.liferay.portal:release.dxp.bom 19 org.jenkins-ci.plugins:script-security 19 org.apache.tomcat.embed:tomcat-embed-core 18 io.undertow:undertow-core 17 org.xwiki.platform:xwiki-platform-oldcore 15 org.keycloak:keycloak-core 14 net.mingsoft:ms-mcms 14 org.keycloak:keycloak-services 13 org.apache.solr:solr-core 13 org.apache.openmeetings:openmeetings-parent 12 org.keycloak:keycloak-parent 11 org.springframework.security:spring-security-core 11 org.apache.tomcat:tomcat-catalina 10 org.cloudfoundry.identity:cloudfoundry-identity-server 9 org.apache.geode:geode-core 9 org.apache.nifi:nifi 9 org.apache.hadoop:hadoop-main 9 org.craftercms:crafter-studio 8 org.eclipse.jetty:jetty-server 8 ai.h2o:h2o-core 8 org.elasticsearch:elasticsearch 8 h2o 8 org.springframework:spring-core 8 org.jenkins-ci.plugins.workflow:workflow-cps 7 com.xuxueli:xxl-job 7 org.apache.tomcat:tomcat-coyote 7 org.jenkins-ci.plugins.workflow:workflow-cps-global-lib 7 org.apache.kylin:kylin 7 org.apache.struts.xwork:xwork-core 7 org.apache.inlong:manager-pojo 7 cn.hutool:hutool-core 7 org.bouncycastle:bcprov-jdk15on 7 struts:struts 6 de.tum.in.ase:artemis-java-test-sandbox 6 org.apache.camel:camel-core 6 org.apache.tika:tika-core 6 org.apache.dolphinscheduler:dolphinscheduler 6 org.springframework:spring-webmvc 6 org.apache.ranger:ranger 5 org.apache.mesos:mesos 5 org.apache.hive:hive-exec 5 org.apache.commons:commons-compress 5 org.apache.kylin:kylin-core-common 5 org.xwiki.platform:xwiki-platform-web 5 org.apache.kafka:kafka 5 org.apache.wicket:wicket-core 5 com.vaadin:vaadin-bom 5 org.postgresql:postgresql 5 org.apache.hive:hive 4 com.caucho:resin 4 org.dspace:dspace-jspui 4 ca.uhn.hapi.fhir:org.hl7.fhir.r5 4 org.jenkins-ci.plugins:pipeline-maven 4 org.apache.hadoop:hadoop-common 4 org.apache.tapestry:tapestry-core 4 org.apache.inlong:manager-service 4 org.apache.cxf:cxf-core 4 org.apache.hive:hive-service 4 org.apache.linkis:linkis 4 io.atomix:atomix 4 org.apache.struts:struts2-rest-plugin 4 ca.uhn.hapi.fhir:org.hl7.fhir.r4b 4 ca.uhn.hapi.fhir:org.hl7.fhir.utilities 4 commons-fileupload:commons-fileupload 4 org.codehaus.jettison:jettison 4 org.apache.james:james-server 4 io.netty:netty-handler 4 org.graylog2:graylog2-server 4 org.springframework:spring-web 4 info.magnolia:magnolia-core 4 com.google.protobuf:protobuf-java 4 org.apache.xmlgraphics:batik 4 org.apache.cassandra:cassandra-all 4 org.apache.cxf:cxf 4 org.xwiki.platform:xwiki-platform-web-templates 4 com.sonyericsson.jenkins.plugins.bfa:build-failure-analyzer 3 com.upokecenter:cbor 3 org.bouncycastle:bcprov-jdk14 3 rubygems-update 3 org.apache.storm:storm-core 3 org.jruby:jruby-stdlib 3 org.pf4j:pf4j 3 com.liferay.portal:com.liferay.portal.impl 3 org.apache.activemq:activemq-client 3 com.nimbusds:nimbus-jose-jwt 3 ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may 3 org.infinispan:infinispan-core 3 com.typesafe.akka:akka-http-core_2.11 3 dnsjava:dnsjava 3 com.google.protobuf:protobuf-javalite 3 org.apache.zeppelin:zeppelin 3 org.xwiki.platform:xwiki-platform-rest-server 3 org.apache.tomcat:tomcat-util 3 org.jenkins-ci.plugins:autocomplete-parameter 3 org.jenkins-ci.plugins:oic-auth 3 awsiotsdk 3 net.minidev:json-smart 3 io.dataease:dataease-plugin-common 3 org.geoserver:gs-main 3 org.igniterealtime.openfire:xmppserver 3 org.jenkins-ci.plugins:junit 3 org.jeecgframework.boot:jeecg-boot-parent 3 org.geoserver.web:gs-web-app 3 org.jenkins-ci.plugins:websphere-deployer 3 org.jeecgframework.boot:jeecg-boot-base 3 org.eclipse.jetty.http2:jetty-http2-common 3 com.typesafe.akka:akka-http-core_2.12 3 org.apache.thrift:libthrift 3 com.reposilite:reposilite-backend 3 org.apache.archiva:archiva 3 org.yaml:snakeyaml 3 ca.uhn.hapi.fhir:org.hl7.fhir.dstu3 3 org.jboss.netty:netty 3 org.apache.inlong:manager-web 3 org.jenkins-ci.plugins:matlab 3 org.open-metadata:openmetadata-service 3 io.netty:netty 3 org.apache.zookeeper:zookeeper 3 aws-iot-device-sdk-v2 3 org.openrefine:openrefine 3 org.apache.syncope:syncope-core 3 org.jboss.resteasy:resteasy-bom 3 ca.uhn.hapi.fhir:org.hl7.fhir.r4 3 org.jenkins-ci.plugins:sinatra-chef-builder 3 org.jvnet.hudson.plugins:warnings 3 org.wildfly:wildfly-parent 3 com.epam.reportportal:service-api 3 com.typesafe.play:play 3 software.amazon.awssdk.iotdevicesdk:aws-iot-device-sdk 3 org.jenkins-ci.plugins:azure-ad 3 org.openrefine:database 3 pyspark 3 org.jenkins-ci.plugins:pipeline-input-step 3 org.wildfly.security:wildfly-elytron 3 org.jenkins-ci.plugins:assembla-auth 3 com.hazelcast:hazelcast 3 org.apache.shenyu:shenyu-common 3 com.compuware.jenkins:compuware-topaz-for-total-test 3 org.springframework:spring-webflux 3 org.jenkins-ci.plugins:gitlab-plugin 3 com.graphql-java:graphql-java 3 org.restlet.jse:org.restlet 3 org.apache.linkis:linkis-datasource 3 commons-beanutils:commons-beanutils 3 org.geoserver:gs-wfs 3 org.jenkins-ci.plugins:recipe 3 io.swagger:swagger-codegen 2 org.apache.streampipes:streampipes-parent 2 org.apache.olingo:odata-client-core 2 org.apache.jena:jena 2 org.jvnet.hudson.plugins:selection-tasks-plugin 2 org.apache.cxf:apache-cxf 2 org.apache.portals.jetspeed-2:jetspeed 2 org.bouncycastle:bcprov-jdk15 2 io.jenkins.plugins:cavisson-ns-nd-integration 2 org.apache.dolphinscheduler:dolphinscheduler-master 2 org.jenkins-ci.plugins:covcomplplot 2 xerces:xercesImpl 2 org.apache.inlong:manager-common 2 net.snowflake:snowflake-jdbc 2 org.keycloak:keycloak-model-infinispan 2 org.xerial.snappy:snappy-java 2 org.jvnet.hudson.plugins:storable-configs-plugin 2 org.apache.cxf.fediz:fediz-spring2 2 io.jenkins.plugins:agent-server-parameter 2 com.liferay.portal:com.liferay.portal.kernel 2 com.elasticbox.jenkins-ci.plugins:kubernetes-ci 2 org.opensearch.plugin:opensearch-security 2 org.xwiki.commons:xwiki-commons-core 2 io.jenkins.plugins:miniorange-saml-sp 2 org.glassfish:mojarra-parent 2 org.apache.activemq:apache-activemq 2 com.synopsys.jenkinsci:ownership 2 io.ratpack:ratpack-core 2 org.apache.sanselan:sanselan 2 org.apache.kylin:kylin-common-service 2 org.springframework.data:spring-data-commons 2 org.opennms:opennms 2 org.apache.nifi:nifi-hikari-dbcp-service 2 org.apache.spark:spark-core 2 org.jitsi:dnssecjava 2 org.jenkins-ci.plugins.workflow:workflow-support 2 org.jenkins-ci.plugins:libvirt-slave 2 org.jenkins-ci.plugins:wso2id-oauth 2 org.dspace:dspace-api 2 org.jenkins-ci.plugins:pipeline-githubnotify-step 2 org.jenkins-ci.plugins:openid 2 ca.uhn.hapi.fhir:org.hl7.fhir.convertors 2 com.linecorp.armeria:armeria 2 org.apache.hadoop:hadoop-client 2 grpc 2 org.apache.druid:druid 2 org.jenkins-ci.plugins:git 2

https://github.com/xwiki/xwiki-platform 64 https://github.com/FasterXML/jackson-databind 44 https://github.com/jenkinsci/jenkins 43 https://github.com/apache/tomcat 40 https://github.com/keycloak/keycloak 31 https://github.com/x-stream/xstream 22 https://github.com/apache/struts 20 https://github.com/spring-projects/spring-framework 19 https://github.com/apache/inlong 15 https://github.com/jenkinsci/script-security-plugin 14 https://github.com/liferay/liferay-portal 13 https://github.com/undertow-io/undertow 13 https://github.com/apache/nifi 11 https://github.com/netty/netty 10 https://github.com/geoserver/geoserver 9 https://github.com/cui2shark/cms 9 https://github.com/cloudfoundry/uaa 9 https://github.com/apache/cxf 9 https://github.com/apache/camel 9 https://github.com/spring-projects/spring-security 9 https://github.com/bcgit/bc-java 8 https://github.com/OpenRefine/OpenRefine 8 https://github.com/apache/kylin 8 https://github.com/h2oai/h2o-3 8 https://github.com/xuxueli/xxl-job 7 https://github.com/DSpace/DSpace 7 https://github.com/apache/activemq 7 https://github.com/eclipse/jetty.project 7 https://github.com/CVEProject/cvelist 6 https://github.com/OpenNMS/opennms 6 https://github.com/quarkusio/quarkus 6 https://github.com/opencast/opencast 6 https://github.com/dromara/hutool 6 https://github.com/ls1intum/Ares 6 https://github.com/Graylog2/graylog2-server 6 https://github.com/DrunkenShells/Disclosures 5 https://github.com/apache/geode 5 https://github.com/apache/hadoop 5 https://github.com/apache/xmlgraphics-batik 5 https://github.com/apache/dolphinscheduler 5 https://github.com/playframework/playframework 4 https://github.com/igniterealtime/Openfire 4 https://github.com/pgjdbc/pgjdbc 4 https://github.com/dataease/dataease 4 https://github.com/nightcloudos/new_cms 4 https://github.com/infinispan/infinispan 4 https://github.com/jenkinsci/workflow-cps-global-lib-plugin 4 https://github.com/protocolbuffers/protobuf 4 https://github.com/jettison-json/jettison 4 https://github.com/apache/syncope 4 https://github.com/JLLeitschuh/security-research 4 https://github.com/apache/lucene-solr 4 https://github.com/jetty/jetty.project 4 https://github.com/jeecgboot/jeecg-boot 4 https://github.com/restlet/restlet-framework-java 4 https://github.com/hazelcast/hazelcast 4 https://github.com/open-metadata/OpenMetadata 3 https://github.com/apache/openmeetings 3 https://github.com/jenkinsci/junit-plugin 3 https://github.com/grails/grails-core 3 https://github.com/jenkinsci/gitlab-plugin 3 https://github.com/li-yu320/cms 3 https://github.com/rubygems/rubygems 3 https://github.com/apache/shenyu 3 https://github.com/aws/aws-iot-device-sdk-java-v2 3 https://github.com/apache/activemq-artemis 3 https://github.com/h2database/h2database 3 https://github.com/alibaba/nacos 3 https://github.com/vaadin/framework 3 https://github.com/dnsjava/dnsjava 3 https://github.com/dzikoysk/reposilite 3 https://github.com/apache/commons-fileupload 3 https://bitbucket.org/connect2id/nimbus-jose-jwt 3 https://github.com/rundeck/rundeck 3 https://github.com/reportportal/reportportal 3 https://github.com/vaadin/platform 3 https://github.com/ming-soft/MCMS 3 https://github.com/resteasy/Resteasy 3 https://github.com/RhinoSecurityLabs/CVEs 3 https://github.com/graphql-java/graphql-java 3 https://github.com/ysuzhangbin/cms 3 https://github.com/pf4j/pf4j 3 https://github.com/apache/james-project 3 https://github.com/peteroupc/CBOR-Java 3 https://github.com/swagger-api/swagger-parser 2 https://github.com/eclipse-ee4j/mojarra 2 https://github.com/apache/ranger 2 https://github.com/jeecgboot/JeecgBoot 2 https://github.com/apache/solr 2 https://github.com/apache/myfaces 2 https://github.com/eclipse-californium/californium 2 https://github.com/yahoo/elide 2 https://github.com/HL7/fhir-ig-publisher 2 https://github.com/apache/tapestry-5 2 https://github.com/dropwizard/dropwizard 2 https://github.com/apiman/apiman 2 https://github.com/reactor/reactor-netty 2 https://github.com/OpenAPITools/openapi-generator 2 https://github.com/akka/akka-http 2 https://github.com/jenkinsci/code-coverage-api-plugin 2 https://github.com/jenkinsci/m2release-plugin 2 https://github.com/ratpack/ratpack 2 https://github.com/jenkinsci/pipeline-maven-plugin 2 https://github.com/apache/cxf-fediz 2 https://github.com/hapifhir/org.hl7.fhir.core 2 https://github.com/jenkinsci/saml-plugin 2 https://github.com/apache/pulsar 2 https://github.com/jenkinsci/nexus-platform-plugin 2 https://github.com/vert-x3/vertx-web 2 https://github.com/apache/commons-beanutils 2 https://github.com/apache/wicket 2 https://github.com/jenkinsci/compuware-topaz-for-total-test-plugin 2 https://github.com/apache/hbase 2 https://github.com/jenkinsci/config-file-provider-plugin 2 https://github.com/opensearch-project/security 2 https://github.com/jenkinsci/pipeline-input-step-plugin 2 https://github.com/xnio/xnio 2 https://github.com/spray/spray-json 2 https://github.com/jenkinsci/pipeline-model-definition-plugin 2 https://github.com/http4s/blaze 2 https://github.com/http4s/http4s 2 https://github.com/googleapis/google-oauth-java-client 2 https://github.com/matrix-org/matrix-android-sdk2 2 https://github.com/aws/amazon-redshift-jdbc-driver 2 https://github.com/ESAPI/esapi-java-legacy 2 https://github.com/jenkinsci/libvirt-slave-plugin 2 https://github.com/jenkinsci/matrix-project-plugin 2 https://github.com/jenkinsci/templating-engine-plugin 2 https://github.com/jenkinsci/github-plugin 2 https://github.com/line/armeria 2 https://github.com/resteasy/resteasy 2 https://github.com/apache/jackrabbit 2 https://github.com/apache/kafka 2 https://github.com/kawasima/struts1-forever 2 https://github.com/jenkinsci/plot-plugin 2 https://github.com/apache/httpcomponents-client 2 https://github.com/apache/hive 2 https://github.com/jenkinsci/groovy-plugin 2 https://github.com/xerial/snappy-java 2 https://github.com/apache/cassandra 2 https://github.com/jenkinsci/cavisson-ns-nd-integration-plugin 2 https://github.com/jenkinsci/build-failure-analyzer-plugin 2 https://git-wip-us.apache.org/repos/asf/cxf-fediz 2 https://github.com/jenkinsci/workflow-cps-plugin 2 https://github.com/apache/ozone 2 https://github.com/prestodb/presto 2 https://github.com/jenkinsci/nested-view-plugin 2 https://github.com/qos-ch/logback 2 https://github.com/grpc/grpc 2 https://github.com/jenkinsci/htmlpublisher-plugin 2 https://github.com/hjson/hjson-java 2 https://github.com/HtmlUnit/htmlunit 2 https://github.com/snowflakedb/snowflake-jdbc 2 https://github.com/geonetwork/core-geonetwork 2 https://github.com/spring-projects/spring-security-samples 2 https://github.com/eclipse/milo 2 https://github.com/jenkinsci/gerrit-trigger-plugin 2 https://github.com/koral--/android-gif-drawable 2 https://github.com/4thline/cling 1 https://github.com/jenkinsci/custom-checkbox-parameter-plugin 1 https://github.com/wireapp/lithium 1 https://github.com/jenkinsci/anchore-container-scanner-plugin 1 https://github.com/jenkinsci/bitbucket-oauth-plugin 1 https://svn.apache.org/viewvc/lucene/dev 1 https://github.com/payara/Payara 1 https://github.com/jquery/jquery 1 https://github.com/looly/hutool 1 https://github.com/jenkinsci/yet-another-build-visualizer-plugin 1 https://github.com/SAP/scimono 1 https://github.com/jenkinsci/openstack-cloud-plugin 1 https://github.com/jenkinsci/hidden-parameter-plugin 1 https://github.com/jenkinsci/neoload-plugin 1 https://github.com/jenkinsci/workflow-support-plugin 1 https://github.com/jenkinsci/deployer-framework-plugin 1 https://github.com/jenkinsci/build-with-parameters-plugin 1 https://github.com/browserup/browserup-proxy 1 https://github.com/spring-cloud/spring-cloud-function 1 https://github.com/dotCMS/dotCMS 1 https://github.com/3breadt/dd-plist 1 https://github.com/bpmn-io/min-dash 1 https://github.com/perwendel/spark 1 https://github.com/jenkinsci/mashup-portlets-plugin 1 https://github.com/eclipse/rdf4j 1 https://github.com/apache/drill 1 https://github.com/jenkinsci/emailext-template-plugin 1 https://github.com/breaktoprotect/CVE-2017-12615 1 https://github.com/jenkinsci/cvs-plugin 1 https://github.com/jenkinsci/liquibase-runner-plugin 1 https://github.com/FasterXML/jackson-dataformats-binary 1 https://bitbucket.org/asomov/snakeyaml 1 https://github.com/h3ak/MCMS-CVE-Request 1 https://github.com/jenkinsci/gatling-plugin 1 https://github.com/almounah/vulnerability-research 1 https://github.com/snakeyaml/snakeyaml 1 https://github.com/jenkinsci/neuvector-vulnerability-scanner-plugin 1 https://bitbucket.org/snakeyaml/snakeyaml 1 https://github.com/tanalala/CVE 1 https://github.com/SmartBear/soapui 1 https://github.com/spring-projects/spring-boot 1