Exposure of Sensitive System Information to an Unauthorized Control Sphere

Overview org.jenkins-ci.plugins:github-branch-source is a multibranch projects and organization folders from GitHub. Maintained by CloudBees, Inc. Affected versions of this package are vulnerable to Exposure of Sensitive System Information to an Unauthorized Control Sphere via a missing permissio...

org.jenkins-ci.plugins:github-autostatus (>=4.204.vf74143795d5f, <=4.259.ve0468d8b_e5f1) potentially affected by CVE-2026-57285 via org.jenkins-ci.plugins:github-branch-source (1967.vdea_d580c1a_b_a)

org.jenkins-ci.plugins:github-branch-source MAVEN version 1967.vdead580c1aba is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - org.jenkins-ci.plugins:github-autostatus =4.204.vf74143795d5...

org.jenkins-ci.plugins:github-autostatus (>=4.204.vf74143795d5f, <=4.259.ve0468d8b_e5f1) potentially affected by CVE-2026-57285 via org.jenkins-ci.plugins:github-branch-source (1967.vdea_d580c1a_b_a)

org.jenkins-ci.plugins:github-branch-source MAVEN version 1967.vdead580c1aba is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - org.jenkins-ci.plugins:github-autostatus =4.204.vf74143795d5...

org.jenkins-ci.plugins:github-oauth (>=647.v44f5236c308d, <=651.v135e939e8b_60) potentially affected by CVE-2026-57285 via org.jenkins-ci.plugins:github-branch-source (1810.v913311241fa_9)

org.jenkins-ci.plugins:github-branch-source MAVEN version 1810.v913311241fa9 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - org.jenkins-ci.plugins:github-oauth =647.v44f5236c308d,...

org.jenkins-ci.plugins:github-autostatus (>=4.204.vf74143795d5f, <=4.259.ve0468d8b_e5f1) potentially affected by CVE-2026-57285 via org.jenkins-ci.plugins:github-branch-source (1967.vdea_d580c1a_b_a)

org.jenkins-ci.plugins:github-branch-source MAVEN version 1967.vdead580c1aba is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - org.jenkins-ci.plugins:github-autostatus =4.204.vf74143795d5...

io.jenkins.blueocean:blueocean (>=1.0-alpha-1, <=1.0-alpha-2), io.jenkins.blueocean:blueocean-dashboard (>=1.0-alpha-1, <=1.0-alpha-2) +2 more potentially affected by CVE-2026-57285 via org.jenkins-ci.plugins:github-branch-source (1.6)

org.jenkins-ci.plugins:github-branch-source MAVEN version 1.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - io.jenkins.blueocean:blueocean =1.0-alpha-1, =1.0-alpha-1, =1.0-alpha-1,...

org.jenkins-ci.plugins:github-autostatus (>=1.0, <=2.0) potentially affected by CVE-2026-57285 via org.jenkins-ci.plugins:github-branch-source (2.2.3)

org.jenkins-ci.plugins:github-branch-source MAVEN version 2.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - org.jenkins-ci.plugins:github-autostatus =1.0, =2.0 Source cves:...

io.jenkins.blueocean:blueocean (1.2.0-beta-1), io.jenkins.blueocean:blueocean-events (1.2.0-beta-1) +3 more potentially affected by CVE-2026-57285 via org.jenkins-ci.plugins:github-branch-source (2.0.6)

org.jenkins-ci.plugins:github-branch-source MAVEN version 2.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - io.jenkins.blueocean:blueocean 1.2.0-beta-1 -...

Jenkins GitHub Branch Source Plugin has missing permission check that allows enumerating GitHub Enterprise server URLs

Jenkins GitHub Branch Source Plugin 1967.1969.v205fd594c821 and earlier does not perform a permission check in an HTTP endpoint that lists the GitHub API endpoints configured in the global plugin configuration. This allows attackers with Overall/Read permission to obtain the URLs of GitHub...

org.jenkins-ci.plugins:disable-github-multibranch-status (>=1.0, <=1.2) potentially affected by CVE-2026-57285 via org.jenkins-ci.plugins:github-branch-source (2.2.0)

org.jenkins-ci.plugins:github-branch-source MAVEN version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - org.jenkins-ci.plugins:disable-github-multibranch-status =1.0, =1.2 Sourc...

org.jenkins-ci.plugins:coding-webhook (>=1.3.0-alpha.1, <=1.4.3), org.jenkins-ci.plugins:github-oauth (>=0.26, <=0.33) +1 more potentially affected by CVE-2026-57285 via org.jenkins-ci.plugins:github-branch-source (1.9)

org.jenkins-ci.plugins:github-branch-source MAVEN version 1.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - org.jenkins-ci.plugins:coding-webhook =1.3.0-alpha.1, =0.26, =0.33 -...

io.jenkins.blueocean:blueocean (>=1.1.0-beta-1, <=1.1.7), io.jenkins.blueocean:blueocean-events (>=1.1.0-beta-1, <=1.1.7) +5 more potentially affected by CVE-2026-57285 via org.jenkins-ci.plugins:github-branch-source (2.0.5)

org.jenkins-ci.plugins:github-branch-source MAVEN version 2.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - io.jenkins.blueocean:blueocean =1.1.0-beta-1, =1.1.0-beta-1, =1.1.0-beta-...

org.jenkins-ci.plugins:github-organization-folder (>=1.0-beta-1, <=1.2) potentially affected by CVE-2026-57285 via org.jenkins-ci.plugins:github-branch-source (1.3)

org.jenkins-ci.plugins:github-branch-source MAVEN version 1.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - org.jenkins-ci.plugins:github-organization-folder =1.0-beta-1, =1.2 Source...

org.jenkins-ci.plugins:github-organization-folder (1.6) potentially affected by CVE-2026-57285 via org.jenkins-ci.plugins:github-branch-source (2.0.0)

org.jenkins-ci.plugins:github-branch-source MAVEN version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - org.jenkins-ci.plugins:github-organization-folder 1.6 Source cves:...

org.jenkins-ci.plugins:github-pr-comment-build (2.1) potentially affected by CVE-2026-57285 via org.jenkins-ci.plugins:github-branch-source (2.3.0)

org.jenkins-ci.plugins:github-branch-source MAVEN version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - org.jenkins-ci.plugins:github-pr-comment-build 2.1 Source cves:...

org.jenkins-ci.plugins:pipeline-github (2.8-191.cb_1a_07f10b_a_f) potentially affected by CVE-2026-57285 via org.jenkins-ci.plugins:github-branch-source (1910.v4ca_b_2c639cb_0)

org.jenkins-ci.plugins:github-branch-source MAVEN version 1910.v4cab2c639cb0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - org.jenkins-ci.plugins:pipeline-github 2.8-191.cb1a07f10baf...

io.jenkins.plugins:github-checks (634.v371dc6d978a_3) potentially affected by CVE-2026-57285 via org.jenkins-ci.plugins:github-branch-source (1844.v4a_9883d49126)

org.jenkins-ci.plugins:github-branch-source MAVEN version 1844.v4a9883d49126 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - io.jenkins.plugins:github-checks 634.v371dc6d978a3 Source...

org.jenkins-ci.plugins:pipeline-githubnotify-step (>=1.0.0, <=1.0.5) potentially affected by CVE-2026-57285 via org.jenkins-ci.plugins:github-branch-source (1.10.1)

org.jenkins-ci.plugins:github-branch-source MAVEN version 1.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - org.jenkins-ci.plugins:pipeline-githubnotify-step =1.0.0, =1.0.5 Source...

org.jenkins-ci.plugins:github-oauth (611.v70d151e60ec4) potentially affected by CVE-2026-57285 via org.jenkins-ci.plugins:github-branch-source (1793.v1831e9c68d77)

org.jenkins-ci.plugins:github-branch-source MAVEN version 1793.v1831e9c68d77 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - org.jenkins-ci.plugins:github-oauth 611.v70d151e60ec4 Source...

io.jenkins.blueocean:blueocean (>=1.0.0-b22, <=1.0.0-b24), io.jenkins.blueocean:blueocean-dashboard (>=1.0.0-b22, <=1.0.0-b24) +6 more potentially affected by CVE-2026-57285 via org.jenkins-ci.plugins:github-branch-source (2.0.1)

org.jenkins-ci.plugins:github-branch-source MAVEN version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - io.jenkins.blueocean:blueocean =1.0.0-b22, =1.0.0-b22, =1.0.0-b22,...