org.jenkins-ci.main:jenkins-test-harness (1.575), org.jenkins-ci.main:jenkins-war (1.575) +2 more potentially affected by CVE-2016-3723 via org.jenkins-ci.main:jenkins-core (1.575)

org.jenkins-ci.main:jenkins-core MAVEN version 1.575 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.575 - org.jenkins-ci.main:jenkins-war 1.575 -...

GHSA-4RJ6-9PJH-882R Improper Restriction of XML External Entity Reference in Jenkins JUnit Plugin

Jenkins JUnit Plugin 1.23 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissions in Jenkins to extract secrets from the Jenkins master, perform server-side request forgery, or denial-of-service attacks...

aendter.jenkins.plugins:filesystem-list-parameter-plugin (0.0.6), br.com.ingenieux.jenkins.plugins:codecommit-url-helper (0.0.1) +228 more potentially affected by CVE-2018-1000056 via org.jenkins-ci.plugins:junit (>=1.0, <=1.23)

org.jenkins-ci.plugins:junit MAVEN version =1.0, =1.0.5.0, =0.2, =1.9.2-beta, =1.28.0, =2.37.0, =1.7.2, =1.1.2, =1.2.5, =1.1, =1.0.22, =2.2, =2.20 and more Source cves: CVE-2018-1000056 Source advisory: GHSA-4RJ6-9PJH-882R...

aendter.jenkins.plugins:filesystem-list-parameter-plugin (0.0.6), br.com.ingenieux.jenkins.plugins:codecommit-url-helper (0.0.1) +228 more potentially affected by CVE-2018-1000056 via org.jenkins-ci.plugins:junit (>=1.0, <=1.23)

org.jenkins-ci.plugins:junit MAVEN version =1.0, =1.0.5.0, =0.2, =1.9.2-beta, =1.28.0, =2.37.0, =1.7.2, =1.1.2, =1.2.5, =1.1, =1.0.22, =2.2, =2.20 and more Source cves: CVE-2018-1000056 Source advisory: OSV:GHSA-4RJ6-9PJH-882R...

GHSA-X9GM-M8PP-54VX Jenkins JUnit Plugin CSRF vulnerability

A cross-site request forgery vulnerability exists in Jenkins JUnit Plugin 1.25 and earlier in TestObject.java that allows setting the description of a test result...

Jenkins JUnit Plugin CSRF vulnerability

A cross-site request forgery vulnerability exists in Jenkins JUnit Plugin 1.25 and earlier in TestObject.java that allows setting the description of a test result...

jp.shiftinc.jenkins.plugins:discard-old-build (>=1.04, <=1.05), org.jenkins-ci.main:jenkins-test-harness (1.515) +6 more potentially affected by CVE-2018-1000406 via org.jenkins-ci.main:jenkins-core (1.515)

org.jenkins-ci.main:jenkins-core MAVEN version 1.515 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - jp.shiftinc.jenkins.plugins:discard-old-build =1.04, =1.05 -...

com.thalesgroup.dtkit:dtkit-default-junit-jenkins (0.20), com.thalesgroup.dtkit:dtkit-default-tusar-jenkins (>=0.23, <=0.24) +49 more potentially affected by CVE-2017-1000395 via org.jenkins-ci.main:jenkins-core (1.410)

org.jenkins-ci.main:jenkins-core MAVEN version 1.410 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.thalesgroup.dtkit:dtkit-default-junit-jenkins 0.20 -...

org.jenkins-ci.main:jenkins-test-harness (1.575), org.jenkins-ci.main:jenkins-war (1.575) +2 more potentially affected by CVE-2018-1999047 via org.jenkins-ci.main:jenkins-core (1.575)

org.jenkins-ci.main:jenkins-core MAVEN version 1.575 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.575 - org.jenkins-ci.main:jenkins-war 1.575 -...

org.jenkins-ci.main:jenkins-test-harness (1.575), org.jenkins-ci.main:jenkins-war (1.575) +2 more potentially affected by CVE-2017-2598 via org.jenkins-ci.main:jenkins-core (1.575)

org.jenkins-ci.main:jenkins-core MAVEN version 1.575 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.575 - org.jenkins-ci.main:jenkins-war 1.575 -...

org.jenkins-ci.main:jenkins-test-harness (1.575), org.jenkins-ci.main:jenkins-war (1.575) +2 more potentially affected by CVE-2017-1000400 via org.jenkins-ci.main:jenkins-core (1.575)

org.jenkins-ci.main:jenkins-core MAVEN version 1.575 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.575 - org.jenkins-ci.main:jenkins-war 1.575 -...

org.jenkins-ci.main:jenkins-test-harness (1.575), org.jenkins-ci.main:jenkins-war (1.575) +2 more potentially affected by CVE-2018-1000861 via org.jenkins-ci.main:jenkins-core (1.575)

org.jenkins-ci.main:jenkins-core MAVEN version 1.575 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.575 - org.jenkins-ci.main:jenkins-war 1.575 -...

com.googlecode.xmlblackbox:xmlblackbox (>=2.8.28, <=3.0.4), net.thucydides.maven.plugins:maven-thucydides-plugin (>=0.9.0-beta-4, <=0.9.0-rc3) +7 more potentially affected by CVE-2022-28108 via org.seleniumhq.selenium:selenium-server (2.24.1)

org.seleniumhq.selenium:selenium-server MAVEN version 2.24.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.seleniumhq.selenium:selenium-server and may be impacted: - com.googlecode.xmlblackbox:xmlblackbox =2.8.28, =0.9.0-beta-4, =0.9.0-beta-4,...

net.thucydides.maven.plugins:maven-thucydides-plugin (>=0.4.8, <=0.4.12), net.thucydides.plugins.jira:thucydides-jira-plugin (>=0.5.2, <=0.5.3) +2 more potentially affected by CVE-2022-28108 via org.seleniumhq.selenium:selenium-server (2.6.0)

org.seleniumhq.selenium:selenium-server MAVEN version 2.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.seleniumhq.selenium:selenium-server and may be impacted: - net.thucydides.maven.plugins:maven-thucydides-plugin =0.4.8, =0.5.2, =0.4.8,...

net.thucydides.maven.plugins:maven-thucydides-plugin (0.4.13), net.thucydides:thucydides-core (0.4.13) +4 more potentially affected by CVE-2022-28108 via org.seleniumhq.selenium:selenium-server (2.8.0)

org.seleniumhq.selenium:selenium-server MAVEN version 2.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.seleniumhq.selenium:selenium-server and may be impacted: - net.thucydides.maven.plugins:maven-thucydides-plugin 0.4.13 -...

com.github.hemanthsridhar:webappframework-cucumberjvm-junit (>=1.1, <=1.1.6) potentially affected by CVE-2022-28108 via org.seleniumhq.selenium:selenium-server (3.0.0-beta3)

org.seleniumhq.selenium:selenium-server MAVEN version 3.0.0-beta3 is affected by a known vulnerability. The following packages have a transitive dependency on org.seleniumhq.selenium:selenium-server and may be impacted: - com.github.hemanthsridhar:webappframework-cucumberjvm-junit =1.1, =1.1.6...

info.archinnov:achilles-embedded (3.0.7), info.archinnov:achilles-junit (3.0.7) potentially affected by CVE-2021-44521 via org.apache.cassandra:cassandra-all (2.0.10)

org.apache.cassandra:cassandra-all MAVEN version 2.0.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cassandra:cassandra-all and may be impacted: - info.archinnov:achilles-embedded 3.0.7 - info.archinnov:achilles-junit 3.0.7 Source cves:...

com.tuplejump:stargate-core (0.9.9), info.archinnov:achilles-embedded (>=3.0.8, <=3.0.16) +2 more potentially affected by CVE-2021-44521 via org.apache.cassandra:cassandra-all (2.0.11)

org.apache.cassandra:cassandra-all MAVEN version 2.0.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cassandra:cassandra-all and may be impacted: - com.tuplejump:stargate-core 0.9.9 - info.archinnov:achilles-embedded =3.0.8, =3.0.8, =3.0....

info.archinnov:achilles-embedded (>=3.0.20, <=3.0.22), info.archinnov:achilles-junit (>=3.0.20, <=3.0.22) +1 more potentially affected by CVE-2021-44521 via org.apache.cassandra:cassandra-all (2.0.15)

org.apache.cassandra:cassandra-all MAVEN version 2.0.15 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cassandra:cassandra-all and may be impacted: - info.archinnov:achilles-embedded =3.0.20, =3.0.20, =3.0.20, =3.0.22 Source cves:...

info.archinnov:achilles-embedded (>=3.0.18, <=3.0.19), info.archinnov:achilles-junit (>=3.0.18, <=3.0.19) +1 more potentially affected by CVE-2021-44521 via org.apache.cassandra:cassandra-all (2.0.13)

org.apache.cassandra:cassandra-all MAVEN version 2.0.13 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cassandra:cassandra-all and may be impacted: - info.archinnov:achilles-embedded =3.0.18, =3.0.18, =3.0.18, =3.0.19 Source cves:...