124968 matches found
Jenkins Script Security Plugin sandbox bypass vulnerability
Jenkins Script Security Plugin provides a sandbox feature that allows running user-provided scripts safely by intercepting and checking potentially unsafe operations. Script Security Plugin 1402.v94c9ce464861 and earlier does not intercept the implicit type cast applied to each element of the...
com.openshift.jenkins:openshift-pipeline (>=1.0.14, <=1.0.57), org.jenkins-ci.plugins.workflow:workflow-aggregator (>=1.10-beta-1, <=1.13) +20 more potentially affected by CVE-2026-57281 via org.jenkins-ci.plugins:script-security (1.15)
org.jenkins-ci.plugins:script-security MAVEN version 1.15 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - com.openshift.jenkins:openshift-pipeline =1.0.14, =1.10-beta-1, =1.10-beta-1,...
io.jenkins.blueocean:blueocean (>=1.0.0-b25, <=1.1.7), io.jenkins.blueocean:blueocean-dashboard (>=1.0.0-b25, <=1.0.1) +25 more potentially affected by CVE-2026-57280 via org.jenkins-ci.plugins:script-security (1.26)
org.jenkins-ci.plugins:script-security MAVEN version 1.26 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - io.jenkins.blueocean:blueocean =1.0.0-b25, =1.0.0-b25, =1.0.0-b25, =1.0.0-b25,...
com.lookout.jenkins:environment-script (100.v3a_f1a_6a_b_7549), com.sonyericsson.jenkins.plugins.bfa:build-failure-analyzer (>=2.4.2, <=2.5.2) +38 more potentially affected by CVE-2026-57280 via org.jenkins-ci.plugins:script-security (1229.v4880b_b_e905a_6)
org.jenkins-ci.plugins:script-security MAVEN version 1229.v4880bbe905a6 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - com.lookout.jenkins:environment-script 100.v3af1a6ab7549 -...
com.openshift.jenkins.plugins:openshift-client (>=1.1.0.420.v8817277c1990, <=1.1.0.422.va_241c0c97580), com.paul8620.jenkins.plugins:pipeline-aggregator-view (104.v94a_e5f6cdb_c3) +45 more potentially affected by CVE-2026-57280 via org.jenkins-ci.plugins:script-security (1251.vfe552ed55f8d)
org.jenkins-ci.plugins:script-security MAVEN version 1251.vfe552ed55f8d is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - com.openshift.jenkins.plugins:openshift-client =1.1.0.420.v8817277c199...
hudson.plugins.octopusdeploy:octopusdeploy (4.0.2), org.jenkins-ci.plugins:badge (>=1.0, <=1.1) +2 more potentially affected by CVE-2026-57280 via org.jenkins-ci.plugins:script-security (1.39)
org.jenkins-ci.plugins:script-security MAVEN version 1.39 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - hudson.plugins.octopusdeploy:octopusdeploy 4.0.2 - org.jenkins-ci.plugins:badge =1.0...
org.jenkins-ci.plugins.workflow:workflow-aggregator (>=0.1-beta-8, <=1.0), org.jenkins-ci.plugins.workflow:workflow-cps (>=0.1-beta-8, <=1.0) +2 more potentially affected by CVE-2026-57281 via org.jenkins-ci.plugins:script-security (1.9)
org.jenkins-ci.plugins:script-security MAVEN version 1.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator =0.1-beta-8, =0.1-beta-8,...
org.jenkins-ci.plugins.workflow:workflow-cps (>=3990.vd281dd77a_388, <=3993.v3e20a_37282f8), org.jenkins-ci.plugins:badge (>=2.4, <=2.5) +2 more potentially affected by CVE-2026-57280 via org.jenkins-ci.plugins:script-security (1367.vdf2fc45f229c)
org.jenkins-ci.plugins:script-security MAVEN version 1367.vdf2fc45f229c is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-cps =3990.vd281dd77a388, =2.4...
org.jenkins-ci.plugins.workflow:workflow-aggregator (>=0.1-beta-1, <=0.1-beta-4), org.jenkins-ci.plugins.workflow:workflow-cps (>=0.1-beta-1, <=0.1-beta-4) +1 more potentially affected by CVE-2026-57281 via org.jenkins-ci.plugins:script-security (1.4)
org.jenkins-ci.plugins:script-security MAVEN version 1.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator =0.1-beta-1, =0.1-beta-1,...
com.openshift.jenkins.plugins:openshift-client (1.1.0.424.v829cb_ccf8798), io.jenkins.plugins:openshift-k8s-credentials (>=168.v79a_983191991, <=276.v708b_2cd34a_9e) +7 more potentially affected by CVE-2026-57281 via org.jenkins-ci.plugins:script-security (1313.v7a_6067dc7087)
org.jenkins-ci.plugins:script-security MAVEN version 1313.v7a6067dc7087 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - com.openshift.jenkins.plugins:openshift-client 1.1.0.424.v829cbccf8798...
org.biouno:uno-choice (>=2.8.5, <=2.8.6), org.jenkins-ci.plugins:job-dsl (1.90) potentially affected by CVE-2026-57281 via org.jenkins-ci.plugins:script-security (1365.v4778ca_84b_de5)
org.jenkins-ci.plugins:script-security MAVEN version 1365.v4778ca84bde5 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.biouno:uno-choice =2.8.5, =2.8.6 - org.jenkins-ci.plugins:job-dsl...
io.jenkins.plugins:synopsys-sigma (>=2021.12.0, <=2022.1.0) potentially affected by CVE-2026-57280 via org.jenkins-ci.plugins:script-security (1.71)
org.jenkins-ci.plugins:script-security MAVEN version 1.71 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - io.jenkins.plugins:synopsys-sigma =2021.12.0, =2022.1.0 Source cves: CVE-2026-57280...
org.jenkins-ci.plugins:ontrack (>=2.32.0, <=2.32.5) potentially affected by CVE-2026-57280 via org.jenkins-ci.plugins:script-security (1.28)
org.jenkins-ci.plugins:script-security MAVEN version 1.28 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins:ontrack =2.32.0, =2.32.5 Source cves: CVE-2026-57280 Source...
org.jenkins-ci.plugins.workflow:workflow-cps (>=2.40, <=2.41), org.jenkins-ci.plugins:claim (>=2.10, <=2.15) +3 more potentially affected by CVE-2026-57281 via org.jenkins-ci.plugins:script-security (1.34)
org.jenkins-ci.plugins:script-security MAVEN version 1.34 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-cps =2.40, =2.10, =1.7, =1.2.5, =1.2.5,...
GHSA-WP5X-HRRW-6R4G Jenkins Git client Plugin has an OS command injection vulnerability on agents
Jenkins Git client Plugin 6.6.0 and earlier does not correctly escape the workspace directory name when it is embedded into the SSH wrapper script generated by the "Manually provided keys" Git Host Key Verification strategy on Unix agents. This allows attackers able to control the name of a build...
GHSA-72C8-3WWG-R59W Jenkins Pipeline: Groovy Plugin has a CSRF vulnerability
Jenkins Pipeline: Groovy Plugin 4331.v9d06ed4658ff and earlier does not restrict the types that can be instantiated through the Pipeline Snippet Generator, instantiating any type with a constructor annotated with @DataBoundConstructor in response to a request. This allows attackers to have...
com.amadeus.jenkins.plugins:workflow-cps-global-lib-http (>=2.33.0, <=2.57.0), io.jenkins.blueocean:blueocean (>=1.27.17, <=1.27.18) +28 more potentially affected by CVE-2026-57280 via org.jenkins-ci.plugins:script-security (1275.v23895f409fb_d)
org.jenkins-ci.plugins:script-security MAVEN version 1275.v23895f409fbd is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - com.amadeus.jenkins.plugins:workflow-cps-global-lib-http =2.33.0,...
org.jvnet.hudson.plugins:groovy-postbuild (>=2.0, <=2.2.2) potentially affected by CVE-2026-57281 via org.jenkins-ci.plugins:script-security (1.5)
org.jenkins-ci.plugins:script-security MAVEN version 1.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jvnet.hudson.plugins:groovy-postbuild =2.0, =2.2.2 Source cves: CVE-2026-57281...
org.jenkins-ci.plugins.workflow:workflow-aggregator (>=0.1-beta-5, <=0.1-beta-7), org.jenkins-ci.plugins.workflow:workflow-cps (>=0.1-beta-5, <=0.1-beta-7) +4 more potentially affected by CVE-2026-57281 via org.jenkins-ci.plugins:script-security (1.6)
org.jenkins-ci.plugins:script-security MAVEN version 1.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator =0.1-beta-5, =0.1-beta-5,...
com.openshift.jenkins.plugins:openshift-client (1.1.0.424.v829cb_ccf8798), io.jenkins.plugins:openshift-k8s-credentials (>=168.v79a_983191991, <=276.v708b_2cd34a_9e) +7 more potentially affected by CVE-2026-57280 via org.jenkins-ci.plugins:script-security (1313.v7a_6067dc7087)
org.jenkins-ci.plugins:script-security MAVEN version 1313.v7a6067dc7087 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - com.openshift.jenkins.plugins:openshift-client 1.1.0.424.v829cbccf8798...