org.jenkins-ci.main:jenkins-test-harness (1.547), org.jenkins-ci.main:jenkins-war (1.547) +1 more potentially affected by CVE-2025-67638 via org.jenkins-ci.main:jenkins-core (1.547)

org.jenkins-ci.main:jenkins-core MAVEN version 1.547 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.547 - org.jenkins-ci.main:jenkins-war 1.547 -...

org.jenkins-ci.main:jenkins-test-harness (1.537), org.jenkins-ci.main:jenkins-war (1.537) +2 more potentially affected by CVE-2025-67638 via org.jenkins-ci.main:jenkins-core (1.537)

org.jenkins-ci.main:jenkins-core MAVEN version 1.537 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.537 - org.jenkins-ci.main:jenkins-war 1.537 -...

org.jenkins-ci.main:jenkins-test-harness (1.556), org.jenkins-ci.main:jenkins-war (1.556) +1 more potentially affected by CVE-2025-67638 via org.jenkins-ci.main:jenkins-core (1.556)

org.jenkins-ci.main:jenkins-core MAVEN version 1.556 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.556 - org.jenkins-ci.main:jenkins-war 1.556 -...

io.jenkins.plugins:aws-lambda-cloud (>=0.3, <=0.4), org.jenkins-ci.main:jenkins-test-harness (1.635) +2 more potentially affected by CVE-2025-67638 via org.jenkins-ci.main:jenkins-core (1.635)

org.jenkins-ci.main:jenkins-core MAVEN version 1.635 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - io.jenkins.plugins:aws-lambda-cloud =0.3, =0.4 - org.jenkins-ci.main:jenkins-test-harness 1.635...

org.jenkins-ci.main:jenkins-test-harness (1.643), org.jenkins-ci.main:jenkins-war (1.643) +1 more potentially affected by CVE-2025-67638 via org.jenkins-ci.main:jenkins-core (1.643)

org.jenkins-ci.main:jenkins-core MAVEN version 1.643 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.643 - org.jenkins-ci.main:jenkins-war 1.643 -...

com.groupon.jenkins-ci.plugins:dotci (>=2.10.0, <=2.28.1), com.groupon.jenkins-ci.plugins:dotci-dockerpublish (>=1.0.0, <=1.0.3) +8 more potentially affected by CVE-2025-67638 via org.jenkins-ci.main:jenkins-core (1.618)

org.jenkins-ci.main:jenkins-core MAVEN version 1.618 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.groupon.jenkins-ci.plugins:dotci =2.10.0, =1.0.0, =1.1.3, =1.7.2, =1.3.0, =1.0.0, =1.0, =1....

org.jenkins-ci.main:jenkins-test-harness (1.629), org.jenkins-ci.main:jenkins-war (1.629) +1 more potentially affected by CVE-2025-67638 via org.jenkins-ci.main:jenkins-core (1.629)

org.jenkins-ci.main:jenkins-core MAVEN version 1.629 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.629 - org.jenkins-ci.main:jenkins-war 1.629 -...

org.jenkins-ci.main:jenkins-test-harness (1.631), org.jenkins-ci.main:jenkins-war (1.631) +1 more potentially affected by CVE-2025-67638 via org.jenkins-ci.main:jenkins-core (1.631)

org.jenkins-ci.main:jenkins-core MAVEN version 1.631 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.631 - org.jenkins-ci.main:jenkins-war 1.631 -...

com.github.bogdanlivadariu:bootstraped-multi-test-results-report (>=1.3.5, <=1.4.24), org.jenkins-ci.main:jenkins-test-harness (1.602) +2 more potentially affected by CVE-2025-67638 via org.jenkins-ci.main:jenkins-core (1.602)

org.jenkins-ci.main:jenkins-core MAVEN version 1.602 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.github.bogdanlivadariu:bootstraped-multi-test-results-report =1.3.5, =1.4.24 -...

org.jenkins-ci.main:jenkins-test-harness (1.621), org.jenkins-ci.main:jenkins-war (1.621) +2 more potentially affected by CVE-2025-67635 via org.jenkins-ci.main:jenkins-core (1.621)

org.jenkins-ci.main:jenkins-core MAVEN version 1.621 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.621 - org.jenkins-ci.main:jenkins-war 1.621 -...

com.groupon.jenkins-ci.plugins:dotci (>=2.10.0, <=2.28.1), com.groupon.jenkins-ci.plugins:dotci-dockerpublish (>=1.0.0, <=1.0.3) +8 more potentially affected by CVE-2025-67637 via org.jenkins-ci.main:jenkins-core (1.618)

org.jenkins-ci.main:jenkins-core MAVEN version 1.618 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.groupon.jenkins-ci.plugins:dotci =2.10.0, =1.0.0, =1.1.3, =1.7.2, =1.3.0, =1.0.0, =1.0, =1....

org.jenkins-ci.main:jenkins-test-harness (1.549), org.jenkins-ci.main:jenkins-war (1.549) +1 more potentially affected by CVE-2025-67635 via org.jenkins-ci.main:jenkins-core (1.549)

org.jenkins-ci.main:jenkins-core MAVEN version 1.549 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.549 - org.jenkins-ci.main:jenkins-war 1.549 -...

Wordfence Bug Bounty Program Monthly Report – November 2025

Last month in November 2025, the Wordfence Bug Bounty Program received 746 vulnerability submissions from our growing community of security researchers working to improve the overall security posture of the WordPress ecosystem. These submissions are reviewed, triaged, and processed by the Wordfen...

io.jenkins.plugins:autograding (4.2.0), io.jenkins.plugins:code-coverage-api (4.99.0) +3 more potentially affected by CVE-2025-67641 via io.jenkins.plugins:coverage (>=1.1.0, <=2.2941.v08df75b_767f1)

io.jenkins.plugins:coverage MAVEN version =1.1.0, =-rc6.886d29ff0f4d, =67.v35d155a1ffdf, =1554.v292f3d3479e6, =1556.vd9051bd6ef5d Source cves: CVE-2025-67641 Source advisory: MEND:CVE-2025-67641...

com.github.vzakharchenko:chillispot-radius-plugin (1.4.4), com.github.vzakharchenko:cisco-radius-plugin (1.4.4) +34 more potentially affected by CVE-2025-14082 via org.keycloak:keycloak-services (18.0.0)

org.keycloak:keycloak-services MAVEN version 18.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.4.4 -...

com.github.vzakharchenko:chillispot-radius-plugin (1.3.6), com.github.vzakharchenko:cisco-radius-plugin (1.3.6) +27 more potentially affected by CVE-2025-14082 via org.keycloak:keycloak-services (13.0.0)

org.keycloak:keycloak-services MAVEN version 13.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.3.6 -...

com.github.vzakharchenko:chillispot-radius-plugin (1.4.6), com.github.vzakharchenko:cisco-radius-plugin (1.4.6) +31 more potentially affected by CVE-2025-14082 via org.keycloak:keycloak-services (18.0.2)

org.keycloak:keycloak-services MAVEN version 18.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.4.6 -...

com.github.vzakharchenko:chillispot-radius-plugin (1.3.10), com.github.vzakharchenko:cisco-radius-plugin (1.3.10) +22 more potentially affected by CVE-2025-14082 via org.keycloak:keycloak-services (15.0.0)

org.keycloak:keycloak-services MAVEN version 15.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.3.10 -...

com.github.vzakharchenko:keycloak-plugins (1.2.4), com.github.vzakharchenko:mikrotik-radius-plugin (1.2.4) +12 more potentially affected by CVE-2025-14082 via org.keycloak:keycloak-services (10.0.1)

org.keycloak:keycloak-services MAVEN version 10.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:keycloak-plugins 1.2.4 - com.github.vzakharchenko:mikrotik-radius-plugin...

com.github.vzakharchenko:chillispot-radius-plugin (1.3.3), com.github.vzakharchenko:cisco-radius-plugin (1.3.3) +23 more potentially affected by CVE-2025-14082 via org.keycloak:keycloak-services (12.0.2)

org.keycloak:keycloak-services MAVEN version 12.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.3.3 -...