Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2026/01/13 7:26 p.m.30 views

CVE-2025-68702 Jervis has a SHA-256 Hex String Padding Bug

Jervis is a library for Job DSL plugin scripts and shared Jenkins pipeline libraries. Prior to 2.2, Jervis uses padLeft32, '0' when it should use padLeft64, '0' because SHA-256 produces 32 bytes which equates to 64 hex characters. This vulnerability is fixed in 2.2...

8.7CVSS0.00147EPSS
SaveExploits0References2
Rows per page
Query Builder