org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source (>=2.0.0-beta-1, <=2.1.2), org.jenkins-ci.plugins:git (>=2.6.0, <=2.6.5) +5 more potentially affected by CVE-2025-67640 via org.jenkins-ci.plugins:git-client (1.21.0)

org.jenkins-ci.plugins:git-client MAVEN version 1.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source =2.0.0-beta-1, =2.6.0, =1.0,...

de.wellnerbou.jenkins:git-changelog (>=3.0, <=3.31), org.jenkins-ci.plugins:bitbucket (>=1.1.2, <=1.1.13) +4 more potentially affected by CVE-2025-58458 via org.jenkins-ci.plugins:git-client (1.16.1)

org.jenkins-ci.plugins:git-client MAVEN version 1.16.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - de.wellnerbou.jenkins:git-changelog =3.0, =1.1.2, =1.3, =0.1, =1.0.0, =2.5 Source cves:...

org.jenkins-ci.plugins:skip-notifications-trait (>=1.0.0, <=1.0.2) potentially affected by CVE-2024-39460 via org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source (2.2.0)

org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source MAVEN version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source and may be impacted: - org.jenkins-ci.plugins:skip-notifications-trait...

org.jenkins-ci.plugins:bitbucket-filter-project-trait (1.0) potentially affected by CVE-2024-39460 via org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source (2.2.13)

org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source MAVEN version 2.2.13 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source and may be impacted: -...

org.jenkins-ci.plugins:bitbucket-approval-filter (1.0.0) potentially affected by CVE-2024-39460 via org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source (2.4.1)

org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source MAVEN version 2.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source and may be impacted: - org.jenkins-ci.plugins:bitbucket-approval-filte...

Bitbucket OAuth access token exposed in the build log by cloudbees-bitbucket-branch-source

cloudbees-bitbucket-branch-source 886.v44cf5e4ecec5 and earlier prints the Bitbucket OAuth access token as part of the Bitbucket URL in the build log in some cases. cloudbees-bitbucket-branch-source 887.vad359b3d2d8d does not include the Bitbucket OAuth access token as part of the Bitbucket URL i...

org.jenkins-ci.plugins:bitbucket-filter-project-trait (1.0) potentially affected by CVE-2024-28152 via org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source (2.2.13)

org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source MAVEN version 2.2.13 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source and may be impacted: -...

org.jenkins-ci.plugins:bitbucket-approval-filter (1.0.0) potentially affected by CVE-2024-28152 via org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source (2.4.1)

org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source MAVEN version 2.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source and may be impacted: - org.jenkins-ci.plugins:bitbucket-approval-filte...

org.jenkins-ci.plugins:skip-notifications-trait (>=1.0.0, <=1.0.2) potentially affected by CVE-2024-28152 via org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source (2.2.0)

org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source MAVEN version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source and may be impacted: - org.jenkins-ci.plugins:skip-notifications-trait...

org.jenkins-ci.plugins:bitbucket-approval-filter (1.0.0), org.jenkins-ci.plugins:bitbucket-filter-project-trait (1.0) +1 more potentially affected by CVE-2024-28152 via org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source (>=2.2.0, <=2.4.1)

org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source MAVEN version =2.2.0, =1.0.0, =1.0.2 Source cves: CVE-2024-28152 Source advisory: MEND:CVE-2024-28152...

org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source (2.2.0-alpha-1) potentially affected by CVE-2022-43410 via org.jenkins-ci.plugins:mercurial (2.0-alpha-1)

org.jenkins-ci.plugins:mercurial MAVEN version 2.0-alpha-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:mercurial and may be impacted: - org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source 2.2.0-alpha-1 Source cves:...

org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source (2.0.0-beta-1) potentially affected by CVE-2022-43410 via org.jenkins-ci.plugins:mercurial (1.58-beta-1)

org.jenkins-ci.plugins:mercurial MAVEN version 1.58-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:mercurial and may be impacted: - org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source 2.0.0-beta-1 Source cves:...

org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source (2.2.0-beta-1) potentially affected by CVE-2022-43410 via org.jenkins-ci.plugins:mercurial (2.0-beta-1)

org.jenkins-ci.plugins:mercurial MAVEN version 2.0-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:mercurial and may be impacted: - org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source 2.2.0-beta-1 Source cves:...

org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source (>=2.0.0, <=2.1.2) potentially affected by CVE-2022-43410 via org.jenkins-ci.plugins:mercurial (1.58)

org.jenkins-ci.plugins:mercurial MAVEN version 1.58 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:mercurial and may be impacted: - org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source =2.0.0, =2.1.2 Source cves:...

org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source (2.2.0-alpha-4) potentially affected by CVE-2022-43410 via org.jenkins-ci.plugins:mercurial (2.0-alpha-4)

org.jenkins-ci.plugins:mercurial MAVEN version 2.0-alpha-4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:mercurial and may be impacted: - org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source 2.2.0-alpha-4 Source cves:...

org.jenkins-ci.plugins:bitbucket (>=1.1.4, <=1.1.13), org.jenkins-ci.plugins:bitbucket-build-status-notifier (>=1.1.0, <=1.4.2) +2 more potentially affected by CVE-2022-43410 via org.jenkins-ci.plugins:mercurial (1.54)

org.jenkins-ci.plugins:mercurial MAVEN version 1.54 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:mercurial and may be impacted: - org.jenkins-ci.plugins:bitbucket =1.1.4, =1.1.0, =1.3, =1.1.0, =1.1.2 Source cves: CVE-2022-4341...

org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source (2.0.0-beta-1), org.jenkins-ci.plugins:github-branch-source (2.0.0-beta-2) +1 more potentially affected by CVE-2022-38663 via org.jenkins-ci.plugins:git (2.6.2-beta-2)

org.jenkins-ci.plugins:git MAVEN version 2.6.2-beta-2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source 2.0.0-beta-1 -...

org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source (2.2.0-beta-1), org.jenkins-ci.plugins:github-branch-source (2.2.0-beta-1) potentially affected by CVE-2022-38663 via org.jenkins-ci.plugins:git (3.4.0-beta-1)

org.jenkins-ci.plugins:git MAVEN version 3.4.0-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source 2.2.0-beta-1 -...

org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source (>=2.1.0, <=2.1.2) potentially affected by CVE-2022-38663 via org.jenkins-ci.plugins:git (2.6.5)

org.jenkins-ci.plugins:git MAVEN version 2.6.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source =2.1.0, =2.1.2 Source cves: CVE-2022-38663 Source...

org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source (2.2.0-alpha-4), org.jenkins-ci.plugins:github-branch-source (2.2.0-alpha-4) potentially affected by CVE-2022-38663 via org.jenkins-ci.plugins:git (3.4.0-alpha-4)

org.jenkins-ci.plugins:git MAVEN version 3.4.0-alpha-4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source 2.2.0-alpha-4 -...