CVE-2025-59476 vulnerabilities

Vulnerabilities for packages: jenkins...

ColumnPack:ColumnPack-plugin (=1.0.3), CustomHistory:CustomHistory (>=1.1 <=1.3) +1879 more potentially affected by CVE-2025-59476 via org.jenkins-ci.main:jenkins-core (>=1.396 <=2.516.2)

org.jenkins-ci.main:jenkins-core MAVEN version =1.396, =1.1, =0.0.1, =1.0, =55.v51410e712e0c, =1.0, =0.0.1, =0.1.0, =1.0, =0.9, =1.3, =1.23 and more Source cves: CVE-2025-59476 Source advisory: OSV:GHSA-QRH5-JG98-CR48...

CVE-2025-59476

creationtimestamp| type| source ---|---|--- 2025-09-17 15:05:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lz24d3yipm2x...

CVE-2025-59476

Jenkins 2.527 and earlier, LTS 2.516.2 and earlier does not restrict or transform the characters that can be inserted from user-specified content in log messages, allowing attackers able to control log message contents to insert line break characters, followed by forged log messages that may...