io.jenkins.blueocean:blueocean (>=1.0.0-b22, <=1.0.0-b24), io.jenkins.blueocean:blueocean-dashboard (>=1.0.0-b22, <=1.0.0-b24) +6 more potentially affected by CVE-2022-30947 via org.jenkins-ci.plugins:git (3.0.4)

org.jenkins-ci.plugins:git MAVEN version 3.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - io.jenkins.blueocean:blueocean =1.0.0-b22, =1.0.0-b22, =1.0.0-b22, =1.0.0-b22, =1.0.0-b22, =1.0.0-b22,...

io.jenkins.blueocean:blueocean-git-pipeline (>=1.2.0-beta-5, <=1.2.4), org.jenkins-ci.plugins:gerrit-code-review (>=0.1.1, <=0.7.0) +3 more potentially affected by CVE-2022-30947 via org.jenkins-ci.plugins:git (3.5.1)

org.jenkins-ci.plugins:git MAVEN version 3.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - io.jenkins.blueocean:blueocean-git-pipeline =1.2.0-beta-5, =0.1.1, =1.0, =3.0.0-beta.2, =3.1.2 Source cves:...

io.jenkins.blueocean:blueocean (>=1.0.0-b19-beta-1, <=1.0.0-b21-beta-1), io.jenkins.blueocean:blueocean-dashboard (>=1.0.0-b19-beta-1, <=1.0.0-b21-beta-1) +5 more potentially affected by CVE-2022-30947 via org.jenkins-ci.plugins:git (3.0.3)

org.jenkins-ci.plugins:git MAVEN version 3.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - io.jenkins.blueocean:blueocean =1.0.0-b19-beta-1, =1.0.0-b19-beta-1, =1.0.0-b19-beta-1, =1.0.0-b19-beta-1,...

io.jenkins.blueocean:blueocean (>=1.0.0-b04, <=1.0.0-b17), io.jenkins.blueocean:blueocean-dashboard (>=1.0.0-b04, <=1.0.0-b17) +6 more potentially affected by CVE-2022-30945 via org.jenkins-ci.plugins.workflow:workflow-cps (2.15)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 2.15 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - io.jenkins.blueocean:blueocean =1.0.0-b04, =1.0.0-b04, =1.0.0-b04,...

io.jenkins.blueocean:blueocean (>=1.0.0-b02, <=1.0.0-b03), io.jenkins.blueocean:blueocean-dashboard (>=1.0.0-b02, <=1.0.0-b03) +6 more potentially affected by CVE-2022-30945 via org.jenkins-ci.plugins.workflow:workflow-cps (2.13)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 2.13 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - io.jenkins.blueocean:blueocean =1.0.0-b02, =1.0.0-b02, =1.0.0-b02,...

io.jenkins.blueocean:blueocean (>=1.0.0-b22, <=1.0.0-b24), io.jenkins.blueocean:blueocean-dashboard (>=1.0.0-b22, <=1.0.0-b24) +9 more potentially affected by CVE-2022-30945 via org.jenkins-ci.plugins.workflow:workflow-cps (2.25)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 2.25 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - io.jenkins.blueocean:blueocean =1.0.0-b22, =1.0.0-b22, =1.0.0-b22,...

io.jenkins.blueocean:blueocean (1.2.0-beta-1), io.jenkins.blueocean:blueocean-events (1.2.0-beta-1) +5 more potentially affected by CVE-2022-30945 via org.jenkins-ci.plugins.workflow:workflow-cps (2.36)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 2.36 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - io.jenkins.blueocean:blueocean 1.2.0-beta-1 -...

io.jenkins.blueocean:blueocean-git-pipeline (>=1.2.0-beta-5, <=1.2.4), io.jenkins.blueocean:blueocean-pipeline-scm-api (>=1.2.0-beta-5, <=1.3.6) +2 more potentially affected by CVE-2022-30945 via org.jenkins-ci.plugins.workflow:workflow-cps (2.39)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 2.39 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - io.jenkins.blueocean:blueocean-git-pipeline =1.2.0-beta-5, =1.2.0-beta-5...

io.jenkins.blueocean:blueocean (>=1.0-alpha-3, <=1.0.0-b01), io.jenkins.blueocean:blueocean-dashboard (>=1.0-alpha-3, <=1.0.0-b01) +4 more potentially affected by CVE-2022-30945 via org.jenkins-ci.plugins.workflow:workflow-cps (2.8)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 2.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - io.jenkins.blueocean:blueocean =1.0-alpha-3, =1.0-alpha-3, =1.0-alpha-3,...

io.jenkins.blueocean:blueocean (>=1.0-alpha-1, <=1.0-alpha-2), io.jenkins.blueocean:blueocean-dashboard (>=1.0-alpha-1, <=1.0-alpha-2) +2 more potentially affected by CVE-2022-30945 via org.jenkins-ci.plugins.workflow:workflow-cps (2.1)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 2.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - io.jenkins.blueocean:blueocean =1.0-alpha-1, =1.0-alpha-1, =1.0-alpha-1,...

org.jenkins-ci.plugins.workflow:workflow-multibranch (>=2.4, <=2.8), org.jenkins-ci.plugins:blueocean-display-url (>=1.1, <=2.2.0) potentially affected by CVE-2022-30945 via org.jenkins-ci.plugins.workflow:workflow-cps (2.3)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 2.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-multibranch =2.4, =1.1, =2.2.0...

io.jenkins.blueocean:blueocean (>=1.0-alpha-1, <=1.0-alpha-2), io.jenkins.blueocean:blueocean-dashboard (>=1.0-alpha-1, <=1.0-alpha-2) +2 more potentially affected by CVE-2017-1000087 via org.jenkins-ci.plugins:github-branch-source (1.6)

org.jenkins-ci.plugins:github-branch-source MAVEN version 1.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - io.jenkins.blueocean:blueocean =1.0-alpha-1, =1.0-alpha-1, =1.0-alpha-1,...

io.jenkins.blueocean:blueocean (>=1.0.0-b19-beta-1, <=1.2.0-beta-1), io.jenkins.blueocean:blueocean-dashboard (>=1.0.0-b19-beta-1, <=1.0.1) +10 more potentially affected by CVE-2017-1000087 via org.jenkins-ci.plugins:github-branch-source (>=2.0.0-beta-1, <=2.0.6)

org.jenkins-ci.plugins:github-branch-source MAVEN version =2.0.0-beta-1, =1.0.0-b19-beta-1, =1.0.0-b19-beta-1, =1.0.0-b19-beta-1, =1.0.0-b19-beta-1, =1.0.0-b19-beta-1, =1.0.0-b19-beta-1, =1.0.0-b19-beta-1, =0.1-preview-4, =1.6-beta-1, =1.0-alpha-2, =1.0 - org.jenkins-ci.plugins:pipeline-github-li...

io.jenkins.blueocean:blueocean (>=1.0.0-b19-beta-1, <=1.2.0-beta-1), io.jenkins.blueocean:blueocean-dashboard (>=1.0.0-b19-beta-1, <=1.0.1) +10 more potentially affected by CVE-2017-1000087 via org.jenkins-ci.plugins:github-branch-source (>=2.0.0-beta-1, <=2.0.6)

org.jenkins-ci.plugins:github-branch-source MAVEN version =2.0.0-beta-1, =1.0.0-b19-beta-1, =1.0.0-b19-beta-1, =1.0.0-b19-beta-1, =1.0.0-b19-beta-1, =1.0.0-b19-beta-1, =1.0.0-b19-beta-1, =1.0.0-b19-beta-1, =0.1-preview-4, =1.6-beta-1, =1.0-alpha-2, =1.0 - org.jenkins-ci.plugins:pipeline-github-li...

com.coravy.hudson.plugins.github:github (>=1.28.0, <=1.29.4), io.fabric8.jenkins.plugins:openshift-sync (>=y, <=1.0.45) +22 more potentially affected by CVE-2017-1000242 via org.jenkins-ci.plugins:git-client (>=2.0.0-beta1, <=2.4.0)

org.jenkins-ci.plugins:git-client MAVEN version =2.0.0-beta1, =1.28.0, =y, =1.0.0-b19-beta-1, =1.0.0-b19-beta-1, =1.0.0-b19-beta-1, =1.0.0-b19-beta-1, =1.0.0-b19-beta-1, =1.0.0-b19-beta-1, =1.0.0-b19-beta-1, =0.1-preview-4, =2.8, =2.2.0-alpha-1, =1.0, =1.40.0, =3.0.0-beta1, =3.4.1 and more Source...

CVE-2022-30952

Jenkins Pipeline SCM API for Blue Ocean Plugin 1.25.3 and earlier allows attackers with Job/Configure permission to access credentials with attacker-specified IDs stored in the private per-user credentials stores of any attacker-specified user in Jenkins...

io.jenkins.blueocean:blueocean (>=1.0.0-b19-beta-1, <=1.2.0-beta-1), io.jenkins.blueocean:blueocean-dashboard (>=1.0.0-b19-beta-1, <=1.0.1) +12 more potentially affected by CVE-2018-1000185 via org.jenkins-ci.plugins:github-branch-source (>=2.0.0-beta-1, <=2.3.0)

org.jenkins-ci.plugins:github-branch-source MAVEN version =2.0.0-beta-1, =1.0.0-b19-beta-1, =1.0.0-b19-beta-1, =1.0.0-b19-beta-1, =1.0.0-b19-beta-1, =1.0.0-b19-beta-1, =1.0.0-b19-beta-1, =1.0.0-b19-beta-1, =0.1-preview-4, =1.0, =1.0, =1.6-beta-1, =2.0, =1.0-alpha-2, =1.0 -...

io.jenkins.blueocean:blueocean (>=1.0-alpha-1, <=1.0-alpha-2), io.jenkins.blueocean:blueocean-dashboard (>=1.0-alpha-1, <=1.0-alpha-2) +2 more potentially affected by CVE-2018-1000185 via org.jenkins-ci.plugins:github-branch-source (1.6)

org.jenkins-ci.plugins:github-branch-source MAVEN version 1.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - io.jenkins.blueocean:blueocean =1.0-alpha-1, =1.0-alpha-1, =1.0-alpha-1,...

com.cloudbees.jenkins.plugins:cloudbees-registration (3.15), io.jenkins.blueocean:blueocean-pipeline-editor (>=1.0-alpha-3, <=1.0-alpha-4) +3 more potentially affected by CVE-2018-1000601 via org.jenkins-ci.plugins:credentials (1.23)

org.jenkins-ci.plugins:credentials MAVEN version 1.23 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials and may be impacted: - com.cloudbees.jenkins.plugins:cloudbees-registration 3.15 -...

io.jenkins.blueocean:blueocean (>=1.0.0-b12, <=1.1.0-beta-9), io.jenkins.blueocean:blueocean-config (>=1.0.0-b13, <=1.0.1) +9 more potentially affected by CVE-2017-1000243 via org.jvnet.hudson.plugins:favorite (>=2.0, <=2.0.4)

org.jvnet.hudson.plugins:favorite MAVEN version =2.0, =1.0.0-b12, =1.0.0-b13, =1.0.0-b12, =1.0.0-b12, =1.0.0-b15, =1.0.0-b15, =1.0.0-b12, =1.0.0-b12, =0.1-preview-4, =1.0.0-b12, =0.1, =1.0.0 Source cves: CVE-2017-1000243 Source advisory: GHSA-268V-2QQ7-84PF...