maven-cve-fix

Upgrade Maven dependencies to fix CVEs and validate resolution.

Updated Feb 28, 2026

Search Tags:#maven #pom.xml #cve #dependency-management #build-verification #dependency-tree

Ready to run

npx skills add https://github.com/sepehrrezaei/custom-agent-skills --skill maven-cve-fix

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: maven-cve-fix
Source: https://github.com/sepehrrezaei/custom-agent-skills/tree/main/maven-cve-fix
Command: npx skills add https://github.com/sepehrrezaei/custom-agent-skills --skill maven-cve-fix

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

Maven projects often suffer CVEs in dependencies; this skill fixes them and verifies resolution to avoid breaking builds.

Core Features & Use Cases

Direct upgrade, property override, dependencyManagement, parent upgrade, BOM upgrade, exclude+re-add, or replacement strategies to remediate a vulnerable artifact.
Pre-flight checks and guided steps: snapshot dependency tree, verify build, and read target POM to ensure edits are correct.
End-to-end verification: edit POMs, run dependency verification, compile, execute tests, and confirm the vulnerability is resolved without regressing functionality.

Quick Start

Provide the target pom.xml, the CVE details, and the chosen fix strategy, then run the fix workflow to apply the update and verify the vulnerability is resolved.

Frequently Asked Questions about maven-cve-fix

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I fix a CVE in a Maven dependency without breaking my build?▼

To fix a Maven CVE without breaking your build, you upgrade the vulnerable dependency and run end-to-end verification using dependency:tree, compile, and test phases to confirm the resolution.

What strategies can I use to remediate a vulnerable artifact in a pom.xml file?▼

Remediation strategies for a vulnerable artifact in a pom.xml include direct upgrades, property overrides, dependencyManagement, BOM upgrades, parent updates, exclusions, or complete artifact replacement.

Can I apply Maven CVE fixes to multi-module workspaces?▼

Yes, you can apply Maven CVE fixes to multi-module workspaces. The process reads the target POM, applies the chosen update strategy across modules, and verifies the resolution without regressing functionality.

What do I need to provide to resolve a Maven dependency vulnerability?▼

To resolve a Maven dependency vulnerability, you need to provide the target pom.xml, the CVE details including the CVE ID and affected groupId:artifactId, and a chosen fix strategy.

How does dependency:tree verification help when upgrading Maven dependencies?▼

Running dependency:tree helps when upgrading Maven dependencies by snapshotting the dependency tree before and after edits, ensuring the vulnerable artifact is removed and no transitive regressions are introduced.