Script Security sandbox bypass vulnerability in email-ext

email-ext allows defining custom email templates using https://plugins.jenkins.io/config-file-provider/Config File Provider plugin as Jelly or Groovy files. When defined inside a https://plugins.jenkins.io/cloudbees-folder/folder, email templates need to be subject to Script Security protection...

io.fabric8:process-spring-boot-itests-invoicing (1.1.0.cr2), io.fabric8:process-spring-boot-itests-service-invoicing (1.1.0.cr2) +11 more potentially affected by CVE-2022-22965 via org.springframework.boot:spring-boot-starter-web (1.1.1.release)

org.springframework.boot:spring-boot-starter-web MAVEN version 1.1.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-starter-web and may be impacted: - io.fabric8:process-spring-boot-itests-invoicing 1.1.0.c...

org.springframework.boot:spring-boot-starter-data-rest (1.1.11.release), org.springframework.boot:spring-boot-starter-freemarker (1.1.11.release) +9 more potentially affected by CVE-2022-22965 via org.springframework.boot:spring-boot-starter-web (1.1.11.release)

org.springframework.boot:spring-boot-starter-web MAVEN version 1.1.11.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-starter-web and may be impacted: - org.springframework.boot:spring-boot-starter-data-rest...