Title: How to search/locate/identify vulnerable jar versions in Intellij Community Maven project
Tags: maven;security;intellij-idea;nexus-iq
Question: Let's say I have a huge codebase using multiple maven dependencies. I have done some vulnerability scanning using a tool called Nexus-IQ and would like to identify all direct/indirect dependencies of the jar's marked as vulnerable or threat level above average.
Is there a functionality in Intellij where I can narrow down locations where these jars exists/used as 3rd party dependency? so I can exclude them out?
Comment: Try Maven helper plugin: https://plugins.jetbrains.com/plugin/7179-maven-helper



{'source': 'StackExchangeDataset', 'subset': 'stackoverflow.com', 'metadata': {'AnswerCount': 0, 'CommentCount': 1, 'ContentLicense': 'CC BY-SA 4.0', 'CreationDate': '2021:00:12/15/21', 'FavoriteCount': None, 'PostTypeId': 1, 'Tags': '<maven><security><intellij-idea><nexus-iq>', 'Title': 'How to search/locate/identify vulnerable jar versions in Intellij Community Maven project', 'ViewCount': 182, 'id': 70367106, 'user_AboutMe': '<p>Let me just begin by saying "I love programming!!!". Don\'t get me wrong, I don\'t even consider myself even as an average programmer. But, I am confident that I will learn to be one of the best since I am going to learn from the best. </p>\n\n<p>Looking forward to learn and help other users :) \nCheers.</p>\n\n<p>God, I just love this community. I visit StackOverFlow second to Google.</p>\n', 'user_AccountId': 1513513.0, 'user_DisplayName': 'AppSensei', 'user_Reputation': 8140.0, 'user_Views': 828.0, 'user_id': 1415064.0}}