Vendor history
maven
Cumulative CVEs
6,303
across 230 monthly snapshots
Peak rank
#3
May 23
First seen
Sep 00
Latest seen
May 26
CVEs per month
Newest period on the right. Hover a point for detail · click to open that monthly report.
Jun 21May 26
Monthly history
Last 60 months · newest first.
| Period | Rank | Δ | CVEs | Critical | KEV | Nuclei | avg CVSS | Top products |
|---|---|---|---|---|---|---|---|---|
| May 26 | #176 | ↓43 | 7 | · | · | · | — | org.opensearch.plugin:opensearch-security (4) · land.oras:oras-java-sdk (1) · org.jdbi:jdbi3-freemarker (1) |
| Apr 26 | #133 | — | 9 | · | · | · | — | dev.dsf:dsf-bpe-server (2) · org.asynchttpclient:async-http-client (1) · org.omnifaces:omnifaces (1) |
| Mar 26 | #55 | — | 23 | 7 | · | · | 7.2 | org.apache.iotdb:iotdb-core (2) · org.keycloak:keycloak-services (2) · org.apache.livy:livy-server (2) |
| Feb 26 | #26 | — | 39 | 5 | · | · | 6.3 | org.keycloak:keycloak-services (6) · org.neo4j:neo4j (2) · org.jenkins-ci.main:jenkins-core (2) |
| Jan 26 | #18 | — | 53 | 6 | · | 1 | 6.9 | net.gleske:jervis (7) · org.keycloak:keycloak-services (4) · org.xwiki.contrib:macro-fullcalendar-pom (2) |
| Dec 25 | #24 | — | 48 | 2 | · | 3 | 6.5 | org.jenkins-ci.main:jenkins-core (5) · org.apache.streampark:streampark (3) · org.nutz:nutzboot-parent (3) |
| Nov 25 | #23 | — | 30 | 2 | 1 | 1 | 6.6 | org.geoserver:gs-wms (2) · org.geoserver.web:gs-web-app (2) · lsfusion.platform:web-client (2) |
| Oct 25 | #8 | — | 103 | 5 | · | 2 | 6.3 | com.liferay.portal:release.portal.bom (12) · com.liferay.portal:com.liferay.portal.impl (5) · com.liferay:com.liferay.change.tracking.web (4) |
| Sep 25 | #14 | — | 90 | 6 | · | 4 | 6.1 | com.liferay.portal:release.portal.bom (8) · com.liferay.portal:com.liferay.portal.impl (5) · org.jenkins-ci.main:jenkins-core (3) |
| Aug 25 | #8 | — | 81 | 10 | · | 4 | 6.3 | com.liferay.portal:release.portal.bom (20) · org.pytorch:executorch-android (5) · com.liferay.portal:release.dxp.bom (5) |
| Jul 25 | #23 | — | 69 | 6 | · | 1 | 6.7 | org.glassfish.main.admingui:console-common (5) · org.keycloak:keycloak-services (4) · org.jenkins-ci.plugins:applitools-eyes (3) |
| Jun 25 | #18 | — | 58 | 9 | · | 4 | 7.3 | org.geoserver.web:gs-web-app (6) · org.geoserver:gs-wfs (3) · org.apache.tomcat.embed:tomcat-embed-core (3) |
| May 25 | #33 | — | 35 | 7 | · | 1 | 7.2 | org.apache.inlong:manager-pojo (3) · org.jenkins-ci.plugins:vmanager-plugin (2) · org.graylog2:graylog2-server (2) |
| Apr 25 | #20 | — | 56 | 10 | · | 5 | 6.7 | org.keycloak:keycloak-services (4) · org.opencms:opencms-core (3) · org.apereo.cas:cas-management-webapp-support (2) |
| Mar 25 | #16 | — | 64 | 8 | 1 | 3 | 6.7 | ai.h2o:h2o-core (9) · io.github.robothy:local-s3-rest (4) · org.jenkins-ci.main:jenkins-core (4) |
| Feb 25 | #30 | — | 27 | 3 | 1 | 1 | 6.8 | org.apache.cassandra:cassandra-all (3) · org.keycloak:keycloak-services (2) · io.netty:netty-common (1) |
| Jan 25 | #28 | — | 43 | 4 | · | · | 6.3 | com.ruoyi:ruoyi (3) · org.jboss.hal:hal-console (2) · org.hl7.fhir.publisher:org.hl7.fhir.publisher.core (2) |
| Dec 24 | #22 | — | 39 | 10 | · | 3 | 7.1 | org.apache.tomcat:tomcat-catalina (3) · org.keycloak:keycloak-quarkus-server (2) · org.apache.tomcat.embed:tomcat-embed-core (2) |
| Nov 24 | #22 | — | 48 | 5 | · | · | 7.3 | org.keycloak:keycloak-quarkus-server (6) · org.keycloak:keycloak-services (4) · ca.uhn.hapi.fhir:org.hl7.fhir.dstu3 (2) |
| Oct 24 | #27 | — | 44 | 7 | · | 3 | 7.0 | com.liferay.portal:release.portal.bom (5) · com.liferay.portal:release.dxp.bom (5) · org.openrefine:openrefine (4) |
| Sep 24 | #19 | ↑19 | 38 | 4 | · | 4 | 7.3 | org.keycloak:keycloak-services (6) · org.keycloak:keycloak-core (4) · org.xwiki.platform:xwiki-platform-notifications-ui (2) |
| Aug 24 | #38 | — | 27 | 8 | · | 1 | 7.5 | org.openhab.ui.bundles:org.openhab.ui.cometvisu (4) · org.jenkins-ci.main:jenkins-core (2) · org.apache.dolphinscheduler:dolphinscheduler (2) |
| Jul 24 | #23 | — | 48 | 8 | 1 | 3 | 7.3 | org.apache.streampark:streampark (4) · org.geoserver.web:gs-web-app (3) · org.apache.linkis:linkis-datasource (3) |
| Jun 24 | #27 | — | 31 | 8 | · | 3 | 6.9 | com.reposilite:reposilite-backend (3) · org.keycloak:keycloak-services (2) · org.apache.submarine:submarine-server-core (2) |
| May 24 | #47 | — | 29 | 5 | · | 2 | 7.0 | org.bouncycastle:bcprov-jdk18on (4) · org.bouncycastle:bcprov-jdk15to18 (4) · org.bouncycastle:bcprov-jdk14 (4) |
| Apr 24 | #26 | — | 50 | 14 | 1 | 2 | 7.3 | org.keycloak:keycloak-services (8) · org.apache.zeppelin:zeppelin-server (5) · org.xwiki.platform:xwiki-platform-oldcore (3) |
| Mar 24 | #13 | — | 67 | 6 | · | 2 | 6.7 | org.geoserver:gs-restconfig (3) · org.jenkins-ci.plugins:htmlpublisher (3) · org.open-metadata:openmetadata-service (3) |
| Feb 24 | #7 | — | 89 | 20 | · | 1 | 7.2 | com.liferay.portal:release.portal.bom (33) · com.liferay.portal:release.dxp.bom (32) · org.apache.dolphinscheduler:dolphinscheduler (4) |
| Jan 24 | #14 | — | 62 | 9 | 1 | 6 | 7.0 | de.tum.in.ase:artemis-java-test-sandbox (6) · com.jfinal:jfinal (4) · io.jenkins.plugins:gitlab-branch-source (3) |
| Dec 23 | #4 | — | 117 | 18 | · | 8 | 7.1 | com.jfinal:jfinal (27) · org.silverpeas.core:silverpeas-core-web (7) · com.cloudtp.jenkins:paaslane-estimate (4) |
| Nov 23 | #12 | — | 65 | 14 | · | 5 | 7.0 | org.opencrx:opencrx-core-models (8) · com.xuxueli:xxl-job-admin (3) · org.jenkins-ci.plugins:matlab (3) |
| Oct 23 | #8 | — | 81 | 26 | 2 | 7 | 7.6 | com.liferay.portal:release.dxp.bom (7) · org.xwiki.platform:xwiki-platform-web-templates (4) · org.yamcs:yamcs (4) |
| Sep 23 | #12 | — | 59 | 6 | · | 3 | 6.7 | org.jenkins-ci.main:jenkins-core (5) · org.jenkins-ci.plugins:aws-codecommit-trigger (4) · org.jenkins-ci.plugins:jobconfighistory (4) |
| Aug 23 | #13 | — | 58 | 8 | · | 2 | 6.6 | org.pf4j:pf4j (3) · org.graylog2:graylog2-server (3) · org.jenkins-ci.plugins:cloudbees-folder (3) |
| Jul 23 | #7 | — | 86 | 21 | · | 5 | 7.2 | com.mabl.integration.jenkins:mabl-integration (4) · org.jenkins-ci.plugins:dimensionsscm (3) · org.apache.pulsar:pulsar-broker (2) |
| Jun 23 | #8 | — | 86 | 25 | · | 11 | 7.5 | org.jeecgframework.boot:jeecg-boot-parent (4) · io.grpc:grpc-protobuf (3) · org.xerial.snappy:snappy-java (3) |
| May 23 | #3 | — | 99 | 15 | 2 | 4 | 7.1 | com.liferay.portal:release.portal.bom (14) · org.apache.inlong:manager-service (8) · org.apache.inlong:manager-pojo (7) |
| Apr 23 | #6 | — | 94 | 40 | · | 9 | 7.7 | org.xwiki.platform:xwiki-platform-oldcore (5) · tech.powerjob:powerjob (5) · org.xwiki.platform:xwiki-platform-web-templates (4) |
| Mar 23 | #12 | — | 77 | 14 | · | 4 | 7.2 | org.jenkins-ci.main:jenkins-core (7) · org.jenkinsci.plugins:octoperf (5) · org.jeecgframework.boot:jeecg-boot-parent (3) |
| Feb 23 | #16 | — | 48 | 6 | · | 4 | 6.7 | org.jenkins-ci.plugins:azure-credentials (3) · org.jenkins-ci.plugins:synopsys-coverity (3) · org.opennms:opennms (3) |
| Jan 23 | #8 | — | 78 | 15 | · | 2 | 7.3 | org.jenkins-ci.plugins:jira-steps (4) · io.jenkins.plugins:macstadium-orka (3) · org.jenkins-ci.plugins:testquality-updater (3) |
| Dec 22 | #16 | — | 56 | 8 | · | 2 | 7.1 | cn.hutool:hutool-json (3) · net.mingsoft:ms-mcms (3) · io.apiman:apiman-manager-api-rest-impl (2) |
| Nov 22 | #7 | — | 93 | 20 | · | 6 | 6.9 | com.liferay.portal:release.portal.bom (11) · com.liferay.portal:release.dxp.bom (8) · org.jeecgframework.boot:jeecg-module-system (4) |
| Oct 22 | #9 | — | 73 | 15 | · | 1 | 6.9 | commons-jxpath:commons-jxpath (6) · com.liferay.portal:release.dxp.bom (5) · org.jenkins-ci.plugins:katalon (4) |
| Sep 22 | #6 | — | 108 | 14 | · | 1 | 7.0 | com.fasterxml.woodstox:woodstox-core (5) · com.liferay.portal:release.dxp.bom (5) · org.yaml:snakeyaml (4) |
| Aug 22 | #13 | — | 64 | 9 | 1 | 4 | 7.2 | org.dspace:dspace-jspui (5) · org.apache.jspwiki:jspwiki-main (5) · org.keycloak:keycloak-core (5) |
| Jul 22 | #13 | — | 75 | 8 | 1 | 5 | 6.6 | io.dataease:dataease-plugin-common (4) · org.jenkins-ci.plugins:openshift-deployer (4) · org.jenkins-ci.plugins:git (3) |
| Jun 22 | #3 | — | 112 | 7 | · | 4 | 6.1 | org.jenkins-ci.main:jenkins-core (6) · org.jenkins-ci.plugins:ec2-deployment-dashboard (5) · com.geteasyqa:easyqa (3) |
| May 22 | #6 | — | 77 | 8 | · | 8 | 6.9 | org.jenkins-ci.plugins:autocomplete-parameter (3) · org.jenkins-ci.plugins:ssh (3) · org.jenkins-ci.plugins:mercurial (3) |
| Apr 22 | #19 | — | 58 | 7 | 3 | 10 | 6.7 | com.liferay.portal:release.dxp.bom (5) · net.sourceforge.htmlunit:neko-htmlunit (2) · org.owasp.antisamy:antisamy (2) |
| Mar 22 | #9 | — | 88 | 13 | 1 | 10 | 6.5 | com.liferay.portal:release.dxp.bom (7) · org.jenkins-ci.plugins:proxmox (4) · org.jenkins-ci.plugins:extended-choice-parameter (4) |
| Feb 22 | #10 | — | 89 | 12 | · | 8 | 7.3 | org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (6) · info.magnolia:magnolia-core (5) · org.xwiki.platform:xwiki-platform-oldcore (5) |
| Jan 22 | #14 | — | 75 | 15 | · | 11 | 7.0 | net.mingsoft:ms-mcms (6) · org.apache.kylin:kylin (6) · org.jenkins-ci.plugins:publish-over-ssh (5) |
| Dec 21 | #21 | — | 31 | 5 | 2 | 3 | 7.8 | io.atomix:atomix (7) · org.ops4j.pax.logging:pax-logging-log4j2 (5) · org.apache.logging.log4j:log4j-core (4) |
| Nov 21 | #13 | — | 46 | 18 | · | 3 | 7.9 | org.jenkins-ci.main:jenkins-core (13) · org.apache.ozone:ozone-main (7) · software.amazon.awssdk.iotdevicesdk:aws-iot-device-sdk (4) |
| Oct 21 | #33 | — | 27 | 5 | · | 1 | 7.0 | org.webjars.npm:jquery-ui (3) · edu.stanford.nlp:stanford-corenlp (2) · org.apache.storm:storm (2) |
| Sep 21 | #30 | — | 26 | 10 | · | 2 | 7.9 | org.apache.dubbo:dubbo (4) · org.apache.zeppelin:zeppelin (3) · org.http4s:http4s-server_2.11 (2) |
| Aug 21 | #17 | — | 51 | 2 | 1 | 5 | 6.7 | com.liferay.portal:release.dxp.bom (17) · com.thoughtworks.xstream:xstream (14) · com.liferay.portal:release.portal.bom (14) |
| Jul 21 | #19 | — | 28 | 1 | · | 4 | 6.4 | org.apache.commons:commons-compress (4) · org.webjars.npm:xlsx (3) · org.apache.tomcat:tomcat (3) |
| Jun 21 | #15 | — | 45 | 3 | · | 2 | 6.2 | com.xebialabs.deployit.ci:deployit-plugin (4) · org.jenkins-ci.plugins:requests (3) · org.apache.pdfbox:pdfbox (2) |