Exposure of Sensitive System Information to an Unauthorized Control Sphere

Overview org.jenkins-ci.plugins:github-branch-source is a multibranch projects and organization folders from GitHub. Maintained by CloudBees, Inc. Affected versions of this package are vulnerable to Exposure of Sensitive System Information to an Unauthorized Control Sphere via a missing permissio...

org.jenkins-ci.plugins:github-autostatus (>=4.204.vf74143795d5f, <=4.259.ve0468d8b_e5f1) potentially affected by CVE-2026-57285 via org.jenkins-ci.plugins:github-branch-source (1967.vdea_d580c1a_b_a)

org.jenkins-ci.plugins:github-branch-source MAVEN version 1967.vdead580c1aba is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - org.jenkins-ci.plugins:github-autostatus =4.204.vf74143795d5...

org.jenkins-ci.plugins:github-oauth (611.v70d151e60ec4) potentially affected by CVE-2026-57285 via org.jenkins-ci.plugins:github-branch-source (1793.v1831e9c68d77)

org.jenkins-ci.plugins:github-branch-source MAVEN version 1793.v1831e9c68d77 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - org.jenkins-ci.plugins:github-oauth 611.v70d151e60ec4 Source...

io.jenkins.plugins:github-checks (634.v371dc6d978a_3) potentially affected by CVE-2026-57285 via org.jenkins-ci.plugins:github-branch-source (1844.v4a_9883d49126)

org.jenkins-ci.plugins:github-branch-source MAVEN version 1844.v4a9883d49126 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - io.jenkins.plugins:github-checks 634.v371dc6d978a3 Source...

org.jenkins-ci.plugins:github-pr-comment-build (>=1.0, <=1.1) potentially affected by CVE-2026-57285 via org.jenkins-ci.plugins:github-branch-source (1.10)

org.jenkins-ci.plugins:github-branch-source MAVEN version 1.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - org.jenkins-ci.plugins:github-pr-comment-build =1.0, =1.1 Source cves:...

org.jenkins-ci.plugins:disable-github-multibranch-status (>=1.0, <=1.2) potentially affected by CVE-2026-57285 via org.jenkins-ci.plugins:github-branch-source (2.2.0)

org.jenkins-ci.plugins:github-branch-source MAVEN version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - org.jenkins-ci.plugins:disable-github-multibranch-status =1.0, =1.2 Sourc...

org.jenkins-ci.plugins:github-pr-comment-build (2.1) potentially affected by CVE-2026-57285 via org.jenkins-ci.plugins:github-branch-source (2.3.0)

org.jenkins-ci.plugins:github-branch-source MAVEN version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - org.jenkins-ci.plugins:github-pr-comment-build 2.1 Source cves:...

io.jenkins.blueocean:blueocean (>=1.27.17, <=1.27.18), io.jenkins.blueocean:blueocean-bitbucket-pipeline (>=1.27.17, <=1.27.18) +5 more potentially affected by CVE-2026-57285 via org.jenkins-ci.plugins:github-branch-source (1807.v50351eb_7dd13)

org.jenkins-ci.plugins:github-branch-source MAVEN version 1807.v50351eb7dd13 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - io.jenkins.blueocean:blueocean =1.27.17, =1.27.17, =1.27.17,...

org.jenkins-ci.plugins:coding-webhook (>=1.3.0-alpha.1, <=1.4.3), org.jenkins-ci.plugins:github-oauth (>=0.26, <=0.33) +1 more potentially affected by CVE-2026-57285 via org.jenkins-ci.plugins:github-branch-source (1.9)

org.jenkins-ci.plugins:github-branch-source MAVEN version 1.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - org.jenkins-ci.plugins:coding-webhook =1.3.0-alpha.1, =0.26, =0.33 -...

org.jenkins-ci.plugins:github-oauth (>=647.v44f5236c308d, <=651.v135e939e8b_60) potentially affected by CVE-2026-57285 via org.jenkins-ci.plugins:github-branch-source (1810.v913311241fa_9)

org.jenkins-ci.plugins:github-branch-source MAVEN version 1810.v913311241fa9 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - org.jenkins-ci.plugins:github-oauth =647.v44f5236c308d,...

org.jenkins-ci.plugins:github-organization-folder (>=1.3, <=1.4) potentially affected by CVE-2026-57285 via org.jenkins-ci.plugins:github-branch-source (1.5)

org.jenkins-ci.plugins:github-branch-source MAVEN version 1.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - org.jenkins-ci.plugins:github-organization-folder =1.3, =1.4 Source cves:...

org.jenkins-ci.plugins:github-autostatus (>=4.204.vf74143795d5f, <=4.259.ve0468d8b_e5f1) potentially affected by CVE-2026-57285 via org.jenkins-ci.plugins:github-branch-source (1967.vdea_d580c1a_b_a)

org.jenkins-ci.plugins:github-branch-source MAVEN version 1967.vdead580c1aba is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - org.jenkins-ci.plugins:github-autostatus =4.204.vf74143795d5...

Jenkins GitHub Branch Source Plugin has missing permission check that allows enumerating GitHub Enterprise server URLs

Jenkins GitHub Branch Source Plugin 1967.1969.v205fd594c821 and earlier does not perform a permission check in an HTTP endpoint that lists the GitHub API endpoints configured in the global plugin configuration. This allows attackers with Overall/Read permission to obtain the URLs of GitHub...

io.jenkins.blueocean:blueocean (1.0.0-b19-beta-1), io.jenkins.blueocean:blueocean-dashboard (1.0.0-b19-beta-1) +5 more potentially affected by CVE-2026-57285 via org.jenkins-ci.plugins:github-branch-source (2.0.1-beta-2)

org.jenkins-ci.plugins:github-branch-source MAVEN version 2.0.1-beta-2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - io.jenkins.blueocean:blueocean 1.0.0-b19-beta-1 -...

io.jenkins.blueocean:blueocean (>=1.1.0-beta-1, <=1.1.7), io.jenkins.blueocean:blueocean-events (>=1.1.0-beta-1, <=1.1.7) +5 more potentially affected by CVE-2026-57285 via org.jenkins-ci.plugins:github-branch-source (2.0.5)

org.jenkins-ci.plugins:github-branch-source MAVEN version 2.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - io.jenkins.blueocean:blueocean =1.1.0-beta-1, =1.1.0-beta-1, =1.1.0-beta-...

org.jenkins-ci.plugins:github-organization-folder (1.6) potentially affected by CVE-2026-57285 via org.jenkins-ci.plugins:github-branch-source (2.0.0)

org.jenkins-ci.plugins:github-branch-source MAVEN version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - org.jenkins-ci.plugins:github-organization-folder 1.6 Source cves:...

org.jenkins-ci.plugins:pipeline-github (2.8-191.cb_1a_07f10b_a_f) potentially affected by CVE-2026-57285 via org.jenkins-ci.plugins:github-branch-source (1910.v4ca_b_2c639cb_0)

org.jenkins-ci.plugins:github-branch-source MAVEN version 1910.v4cab2c639cb0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - org.jenkins-ci.plugins:pipeline-github 2.8-191.cb1a07f10baf...

org.jenkins-ci.plugins:github-autostatus (>=1.0, <=2.0) potentially affected by CVE-2026-57285 via org.jenkins-ci.plugins:github-branch-source (2.2.3)

org.jenkins-ci.plugins:github-branch-source MAVEN version 2.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - org.jenkins-ci.plugins:github-autostatus =1.0, =2.0 Source cves:...

GHSA-G7C6-WXJF-8564 Jenkins GitHub Branch Source Plugin has missing permission check that allows enumerating GitHub Enterprise server URLs

Jenkins GitHub Branch Source Plugin 1967.1969.v205fd594c821 and earlier does not perform a permission check in an HTTP endpoint that lists the GitHub API endpoints configured in the global plugin configuration. This allows attackers with Overall/Read permission to obtain the URLs of GitHub...

io.jenkins.plugins:mergify (>=1.83.v5b_ff0e55cd2d, <=1.95.v8b_31e80441fb), org.jenkins-ci.plugins:github-oauth (>=683.v04a_a_b_e9d7e07, <=685.v53b_070455063) potentially affected by CVE-2026-57285 via org.jenkins-ci.plugins:github-branch-source (1824.v046257273408)

org.jenkins-ci.plugins:github-branch-source MAVEN version 1824.v046257273408 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - io.jenkins.plugins:mergify =1.83.v5bff0e55cd2d,...