skills.rest
sepehrrezaei
sepehrrezaeiCOMMUNITY
Explore all skills by this author →
GitHub

maven-cve-fix

Upgrade Maven dependencies to fix CVEs and validate resolution.

Updated Feb 28, 2026
Search Tags:#maven#pom.xml#cve#dependency-management#build-verification#dependency-tree
One-click install
npx skills add https://github.com/sepehrrezaei/custom-agent-skills --skill maven-cve-fix
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: maven-cve-fix
Source: https://github.com/sepehrrezaei/custom-agent-skills/tree/main/maven-cve-fix
Command: npx skills add https://github.com/sepehrrezaei/custom-agent-skills --skill maven-cve-fix

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

Maven projects often suffer CVEs in dependencies; this skill fixes them and verifies resolution to avoid breaking builds.

Core Features & Use Cases

  • Direct upgrade, property override, dependencyManagement, parent upgrade, BOM upgrade, exclude+re-add, or replacement strategies to remediate a vulnerable artifact.
  • Pre-flight checks and guided steps: snapshot dependency tree, verify build, and read target POM to ensure edits are correct.
  • End-to-end verification: edit POMs, run dependency verification, compile, execute tests, and confirm the vulnerability is resolved without regressing functionality.

Quick Start

Provide the target pom.xml, the CVE details, and the chosen fix strategy, then run the fix workflow to apply the update and verify the vulnerability is resolved.

Frequently Asked Questions about maven-cve-fix

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I fix a CVE in a Maven dependency without breaking my build?▼

To fix a Maven CVE without breaking your build, you upgrade the vulnerable dependency and run end-to-end verification using dependency:tree, compile, and test phases to confirm the resolution.

What strategies can I use to remediate a vulnerable artifact in a pom.xml file?▼

Remediation strategies for a vulnerable artifact in a pom.xml include direct upgrades, property overrides, dependencyManagement, BOM upgrades, parent updates, exclusions, or complete artifact replacement.

Can I apply Maven CVE fixes to multi-module workspaces?▼

Yes, you can apply Maven CVE fixes to multi-module workspaces. The process reads the target POM, applies the chosen update strategy across modules, and verifies the resolution without regressing functionality.

What do I need to provide to resolve a Maven dependency vulnerability?▼

To resolve a Maven dependency vulnerability, you need to provide the target pom.xml, the CVE details including the CVE ID and affected groupId:artifactId, and a chosen fix strategy.

How does dependency:tree verification help when upgrading Maven dependencies?▼

Running dependency:tree helps when upgrading Maven dependencies by snapshotting the dependency tree before and after edits, ensuring the vulnerable artifact is removed and no transitive regressions are introduced.

Related Skills

Explore More Software Engineering Skills→
sepehrrezaeisepehrrezaei

maven-cve-full-resolver

Remediate Maven CVE vulnerabilities across research, strategy, and fix phases.

Community
Advanced
Adelie-SquadAdelie-Squad
17

build-test

Run npx tsc --noEmit and npm run build, then verify dist/bin/solo-agents.js exists.

Official
Intermediate
sepehrrezaeisepehrrezaei

maven-cve-strategy

Map CVE remediation strategies for Maven dependencies across multi-module projects.

Community
Advanced
TheBushidoCollectiveTheBushidoCollective
187

maven-dependency-management

Resolve Maven dependency conflicts and optimize dependency trees in Java projects.

Official
Advanced