Maven Vulnerability Scanner
Central repository for Java and JVM ecosystem. Maven powers enterprise applications, Android development, and more.
Scan your pom.xml online
Free dependency vulnerability scan for Maven — no signup required
Common Maven Risk Types
Java/Maven ecosystems see deserialization vulnerabilities and Log4Shell-style critical flaws. GeekWala cross-references CISA KEV to surface which Java CVEs are being actively exploited in production.
Maven Security Guide
How to Scan Maven Projects
GeekWala supports the following Java/Kotlin dependency files
Supported Files
pom.xml
Scan Methods
- Upload your lockfile
- Paste file contents
- Import from GitHub
What You Get
- Exploitation-ranked results (not just CVSS)
- CISA KEV: flag CVEs actively attacked right now
- EPSS: 30-day exploit probability per CVE
- Cross-ecosystem: cover your full stack in one scan
Compare & learn more
See how results are ranked by exploitation risk — KEV-flagged CVEs first, with EPSS scores.
See a live example121 Known Exploited Vulnerabilities
These vulnerabilities are actively being exploited in the wild. Scan your project to check if you're affected.
Recent Maven Vulnerabilities
Latest security issues affecting Java/Kotlin packages
Most Affected Maven Packages
Packages with the most known vulnerabilities
Secure Your Java/Kotlin Dependencies
Scan your pom.xml against OSV. Results are ranked by exploitation probability — CVEs under active attack appear first, so you fix what's actually being exploited, not just what scores highest.