org.jenkins-ci.plugins:pipeline-github-lib (65.v203688e7727e) potentially affected by CVE-2026-48921 via io.jenkins.plugins:pipeline-groovy-lib (745.vdf6077913de0)

io.jenkins.plugins:pipeline-groovy-lib MAVEN version 745.vdf6077913de0 is affected by a known vulnerability. The following packages have a transitive dependency on io.jenkins.plugins:pipeline-groovy-lib and may be impacted: - org.jenkins-ci.plugins:pipeline-github-lib 65.v203688e7727e Source cves...

io.jenkins.blueocean:blueocean (>=1.27.19, <=1.27.26), io.jenkins.blueocean:blueocean-bitbucket-pipeline (>=1.27.19, <=1.27.26) +19 more potentially affected by CVE-2026-48921 via io.jenkins.plugins:pipeline-groovy-lib (752.vdddedf804e72)

io.jenkins.plugins:pipeline-groovy-lib MAVEN version 752.vdddedf804e72 is affected by a known vulnerability. The following packages have a transitive dependency on io.jenkins.plugins:pipeline-groovy-lib and may be impacted: - io.jenkins.blueocean:blueocean =1.27.19, =1.27.19, =1.27.19, =1.27.19,...

io.jenkins.plugins:pipeline-lib-oras (46.va_0ee7b_f1b_02a) potentially affected by CVE-2026-48921 via io.jenkins.plugins:pipeline-groovy-lib (776.vfee5327b_b_a_5b)

io.jenkins.plugins:pipeline-groovy-lib MAVEN version 776.vfee5327bba5b is affected by a known vulnerability. The following packages have a transitive dependency on io.jenkins.plugins:pipeline-groovy-lib and may be impacted: - io.jenkins.plugins:pipeline-lib-oras 46.va0ee7bf1b02a Source cves:...

io.jenkins.plugins:pipeline-lib-oras (>=84.vcfdc020586ef, <=90.vecb_55543088a), org.jenkins-ci.plugins:changelog-history (1.4) +2 more potentially affected by CVE-2026-48921 via io.jenkins.plugins:pipeline-groovy-lib (787.ve2fef0efdca_6)

io.jenkins.plugins:pipeline-groovy-lib MAVEN version 787.ve2fef0efdca6 is affected by a known vulnerability. The following packages have a transitive dependency on io.jenkins.plugins:pipeline-groovy-lib and may be impacted: - io.jenkins.plugins:pipeline-lib-oras =84.vcfdc020586ef,...

com.amadeus.jenkins.plugins:workflow-cps-global-lib-http (>=2.34.0, <=2.57.0) potentially affected by CVE-2026-48921 via io.jenkins.plugins:pipeline-groovy-lib (689.veec561a_dee13)

io.jenkins.plugins:pipeline-groovy-lib MAVEN version 689.veec561adee13 is affected by a known vulnerability. The following packages have a transitive dependency on io.jenkins.plugins:pipeline-groovy-lib and may be impacted: - com.amadeus.jenkins.plugins:workflow-cps-global-lib-http =2.34.0, =2.57...

GHSA-QJQ3-WQJ5-G37Q Jenkins Pipeline: Groovy Libraries Plugin does not prohibit symbolic links in shared libraries

Jenkins Pipeline: Groovy Libraries Plugin 797.v90eaa9be45a0 and earlier does not prohibit symbolic links in shared libraries. This allows attackers able to control the content of a library used by a Pipeline job to read arbitrary files on the Jenkins controller filesystem. Pipeline: Groovy...

Jenkins Pipeline: Groovy Libraries Plugin does not prohibit symbolic links in shared libraries

Jenkins Pipeline: Groovy Libraries Plugin 797.v90eaa9be45a0 and earlier does not prohibit symbolic links in shared libraries. This allows attackers able to control the content of a library used by a Pipeline job to read arbitrary files on the Jenkins controller filesystem. Pipeline: Groovy...

CVE-2026-48921

Jenkins Pipeline: Groovy Libraries Plugin 797.v90eaa9be45a0 and earlier does not prohibit symbolic links in shared libraries, allowing attackers able to control the content of a library used by a Pipeline job to read arbitrary files on the Jenkins controller filesystem...

groovy (>=0.0.5, <=0.0.16) potentially affected by CVE-2026-48545 via gradio (5.19.0)

gradio PYPI version 5.19.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - groovy =0.0.5, =0.0.16 Source cves: CVE-2026-48545 Source advisory: OSV:PYSEC-2026-2178...

CVE-2026-48921

Jenkins Pipeline: Groovy Libraries Plugin 797.v90eaa9be45a0 and earlier does not prohibit symbolic links in shared libraries, allowing attackers able to control the content of a library used by a Pipeline job to read arbitrary files on the Jenkins controller filesystem...

CVE-2026-48921

Jenkins Pipeline: Groovy Libraries Plugin 797.v90eaa9be45a0 and earlier does not prohibit symbolic links in shared libraries, allowing attackers able to control the content of a library used by a Pipeline job to read arbitrary files on the Jenkins controller filesystem...

EUVD-2026-32512

Jenkins Pipeline: Groovy Libraries Plugin 797.v90eaa9be45a0 and earlier does not prohibit symbolic links in shared libraries, allowing attackers able to control the content of a library used by a Pipeline job to read arbitrary files on the Jenkins controller filesystem...

CVE-2026-48921

Jenkins Pipeline: Groovy Libraries Plugin 797.v90eaa9be45a0 and earlier does not prohibit symbolic links in shared libraries, allowing attackers able to control the content of a library used by a Pipeline job to read arbitrary files on the Jenkins controller filesystem...

CVE-2026-48921

Jenkins Pipeline: Groovy Libraries Plugin 797.v90eaa9be45a0 and earlier does not prohibit symbolic links in shared libraries, allowing attackers able to control the content of a library used by a Pipeline job to read arbitrary files on the Jenkins controller filesystem...

com.amadeus.jenkins.plugins:workflow-cps-global-lib-http (>=2.33.0, <=2.57.0), com.mig82:folder-properties (>=57.vde5161ec7a_b_a, <=61.vc6d404b_75d60) +25 more potentially affected by CVE-2026-48921 via io.jenkins.plugins:pipeline-groovy-lib (>=685.v8ee9ed91d574, <=787.ve2fef0efdca_6)

io.jenkins.plugins:pipeline-groovy-lib MAVEN version =685.v8ee9ed91d574, =2.33.0, =57.vde5161ec7aba, =1.27.17, =1.27.17, =1.27.17, =1.27.17, =1.27.17, =1.27.17, =1.27.17, =1.83.v5bff0e55cd2d, =3.1391.vcbaab9779d75, =242.vb90abf42ca07, =365.vc5cf79113809, =5.v2bc0b458b8b2, =129.ve552fdda5604,...

CVE-2026-48921

The Jenkins Pipeline: Groovy Libraries Plugin versions 797.v90ea_a_9b_e45a_0 and earlier are vulnerable to a security flaw where the plugin fails to prohibit symbolic links in shared libraries. This allows an attacker who can control the content of a library used by a Pipeline job to read arbitra...

CVE-2026-48921

Jenkins Pipeline: Groovy Libraries Plugin 797.v90eaa9be45a0 and earlier does not prohibit symbolic links in shared libraries, allowing attackers able to control the content of a library used by a Pipeline job to read arbitrary files on the Jenkins controller filesystem...

Jenkins plugins Multiple Vulnerabilities (2026-05-27)

According to their self-reported version numbers, the version of Jenkins plugins running on the remote web server are affected by multiple vulnerabilities: - Jenkins buildgraph-view Plugin 1.8 and earlier does not escape the build URL, resulting in a stored cross- site scripting XSS vulnerability...

Jenkins Pipeline: Groovy Libraries Plugin security vulnerabilities

Jenkins Pipeline: The Groovy Libraries Plugin is an open-source Jenkins Pipeline plugin that manages Groovy libraries. The Jenkins Pipeline: Groovy Libraries Plugin versions 797.v90eaa9be45a0 and earlier have security vulnerabilities. These vulnerabilities stem from the lack of protection against...

PT-2026-55155

Jenkins Pipeline: Groovy Libraries Plugin 797.v90ea a 9b e45a 0 and earlier does not prohibit symbolic links in shared libraries. This allows attackers able to control the content of a library used by a Pipeline job to read arbitrary files on the Jenkins controller filesystem. Pipeline: Groovy...