io.jenkins.plugins:code-coverage-api (>=4.2.0, <=4.4.0), io.jenkins.plugins:nested-data-reporting (5.2.1) +1 more potentially affected by CVE-2026-57281 via org.jenkins-ci.plugins:script-security (1228.vd93135a_2fb_25)

org.jenkins-ci.plugins:script-security MAVEN version 1228.vd93135a2fb25 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - io.jenkins.plugins:code-coverage-api =4.2.0, =4.4.0 -...

io.jenkins.plugins:code-coverage-api (>=4.2.0, <=4.4.0), io.jenkins.plugins:nested-data-reporting (5.2.1) +1 more potentially affected by CVE-2026-57280 via org.jenkins-ci.plugins:script-security (1228.vd93135a_2fb_25)

org.jenkins-ci.plugins:script-security MAVEN version 1228.vd93135a2fb25 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - io.jenkins.plugins:code-coverage-api =4.2.0, =4.4.0 -...

io.jenkins.plugins:code-coverage-api (>=4.2.0, <=4.4.0), io.jenkins.plugins:nested-data-reporting (5.2.1) +1 more potentially affected by CVE-2026-42519 via org.jenkins-ci.plugins:script-security (1228.vd93135a_2fb_25)

org.jenkins-ci.plugins:script-security MAVEN version 1228.vd93135a2fb25 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - io.jenkins.plugins:code-coverage-api =4.2.0, =4.4.0 -...

io.jenkins.plugins:code-coverage-api (4.99.0), io.jenkins.plugins:opencover (67.v35d155a_1ffdf) potentially affected by CVE-2025-67641 via io.jenkins.plugins:coverage (1.1.0)

io.jenkins.plugins:coverage MAVEN version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.jenkins.plugins:coverage and may be impacted: - io.jenkins.plugins:code-coverage-api 4.99.0 - io.jenkins.plugins:opencover 67.v35d155a1ffdf Source cves:...

CVE-2024-40625

GeoServer is an open source server that allows users to share and edit geospatial data. The Coverage rest api /workspaces/workspaceName/coveragestores/storeName/method.format allows attackers to upload files with a specified url with method equals 'url' with no restrict. This vulnerability is fix...

CVE-2024-40625 GeoServer Coverage REST API Allows Server Side Request Forgery

GeoServer is an open source server that allows users to share and edit geospatial data. The Coverage rest api /workspaces/workspaceName/coveragestores/storeName/method.format allows attackers to upload files with a specified url with method equals 'url' with no restrict. This vulnerability is fix...

GeoServer code-related vulnerabilities

GeoServer is GeoServer open source an open source software server written in Java. It allows users to share and edit geospatial data. A code issue vulnerability exists in GeoServer that stems from the Coverage rest api not restricting the URL for uploading files, which could lead to an attacker...

CVE-2021-21677

Jenkins Code Coverage API Plugin 1.4.0 and earlier does not apply Jenkins JEP-200 deserialization protection to Java objects it deserializes from disk, resulting in a remote code execution vulnerability...

CVE-2020-2106

Jenkins Code Coverage API Plugin 1.1.2 and earlier does not escape the filename of the coverage report used in its view, resulting in a stored XSS vulnerability exploitable by users able to change job configurations...

io.jenkins.plugins:code-coverage-api (>=4.2.0, <=4.4.0), io.jenkins.plugins:opencover (22.va_a_c423db_34d2) potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (3565.v4b_d9b_8c29a_b_3)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 3565.v4bd9b8c29ab3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - io.jenkins.plugins:code-coverage-api =4.2.0, =4.4.0 -...

io.jenkins.blueocean:blueocean-pipeline-scm-api (>=1.27.6, <=1.27.11), io.jenkins.plugins:code-coverage-api (>=4.8.0, <=4.99.0) +4 more potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (3691.v28b_14c465a_b_b)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 3691.v28b14c465abb is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - io.jenkins.blueocean:blueocean-pipeline-scm-api =1.27.6,...

io.jenkins.plugins:code-coverage-api (>=4.2.0, <=4.4.0), io.jenkins.plugins:nested-data-reporting (5.2.1) +1 more potentially affected by CVE-2024-52549 via org.jenkins-ci.plugins:script-security (1228.vd93135a_2fb_25)

org.jenkins-ci.plugins:script-security MAVEN version 1228.vd93135a2fb25 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - io.jenkins.plugins:code-coverage-api =4.2.0, =4.4.0 -...

io.jenkins.plugins:code-coverage-api (>=4.2.0, <=4.4.0), io.jenkins.plugins:nested-data-reporting (5.2.1) +1 more potentially affected by CVE-2024-34145 via org.jenkins-ci.plugins:script-security (1228.vd93135a_2fb_25)

org.jenkins-ci.plugins:script-security MAVEN version 1228.vd93135a2fb25 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - io.jenkins.plugins:code-coverage-api =4.2.0, =4.4.0 -...

io.jenkins.plugins:code-coverage-api (>=4.2.0, <=4.4.0), io.jenkins.plugins:nested-data-reporting (5.2.1) +1 more potentially affected by CVE-2024-34144 via org.jenkins-ci.plugins:script-security (1228.vd93135a_2fb_25)

org.jenkins-ci.plugins:script-security MAVEN version 1228.vd93135a2fb25 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - io.jenkins.plugins:code-coverage-api =4.2.0, =4.4.0 -...

io.jenkins.blueocean:blueocean-pipeline-scm-api (>=1.27.4, <=1.27.5.1), io.jenkins.plugins:code-coverage-api (>=4.5.0, <=4.7.0) +2 more potentially affected by CVE-2023-32977 via org.jenkins-ci.plugins.workflow:workflow-job (1282.ve6d865025906)

org.jenkins-ci.plugins.workflow:workflow-job MAVEN version 1282.ve6d865025906 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-job and may be impacted: - io.jenkins.blueocean:blueocean-pipeline-scm-api =1.27.4,...

io.jenkins.plugins:code-coverage-api (>=4.2.0, <=4.4.0), io.jenkins.plugins:opencover (22.va_a_c423db_34d2) potentially affected by CVE-2023-32977 via org.jenkins-ci.plugins.workflow:workflow-job (1254.v3f64639b_11dd)

org.jenkins-ci.plugins.workflow:workflow-job MAVEN version 1254.v3f64639b11dd is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-job and may be impacted: - io.jenkins.plugins:code-coverage-api =4.2.0, =4.4.0 -...

io.jenkins.plugins:code-coverage-api (>=4.2.0, <=4.4.0), io.jenkins.plugins:nested-data-reporting (5.2.1) +1 more potentially affected by CVE-2023-24422 via org.jenkins-ci.plugins:script-security (1228.vd93135a_2fb_25)

org.jenkins-ci.plugins:script-security MAVEN version 1228.vd93135a2fb25 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - io.jenkins.plugins:code-coverage-api =4.2.0, =4.4.0 -...

io.jenkins.plugins:sonarqube-generic-coverage (1.0), org.jenkins-ci.plugins:github-autostatus (>=4.204.vf74143795d5f, <=4.270.v17dcca_3c8209) potentially affected by CVE-2021-21677 via io.jenkins.plugins:code-coverage-api (>=1.0.11, <=1.1.0)

io.jenkins.plugins:code-coverage-api MAVEN version =1.0.11, =4.204.vf74143795d5f, =4.270.v17dcca3c8209 Source cves: CVE-2021-21677 Source advisory: GHSA-58PR-HPRX-7HG6...

io.jenkins.plugins:sonarqube-generic-coverage (1.0), org.jenkins-ci.plugins:github-autostatus (>=4.204.vf74143795d5f, <=4.270.v17dcca_3c8209) potentially affected by CVE-2021-21677 via io.jenkins.plugins:code-coverage-api (>=1.0.11, <=1.1.0)

io.jenkins.plugins:code-coverage-api MAVEN version =1.0.11, =4.204.vf74143795d5f, =4.270.v17dcca3c8209 Source cves: CVE-2021-21677 Source advisory: OSV:GHSA-58PR-HPRX-7HG6...

io.jenkins.plugins:sonarqube-generic-coverage (1.0), org.jenkins-ci.plugins:github-autostatus (>=4.204.vf74143795d5f, <=4.270.v17dcca_3c8209) potentially affected by CVE-2020-2172 via io.jenkins.plugins:code-coverage-api (>=1.0.11, <=1.1.0)

io.jenkins.plugins:code-coverage-api MAVEN version =1.0.11, =4.204.vf74143795d5f, =4.270.v17dcca3c8209 Source cves: CVE-2020-2172 Source advisory: OSV:GHSA-CMGM-Q8HF-P7JC...