57 matches found
io.jenkins.blueocean:blueocean (>=1.0-alpha-1, <=1.0-alpha-2), io.jenkins.blueocean:blueocean-dashboard (>=1.0-alpha-1, <=1.0-alpha-2) +2 more potentially affected by CVE-2026-42522 via org.jenkins-ci.plugins:github-branch-source (1.6)
org.jenkins-ci.plugins:github-branch-source MAVEN version 1.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - io.jenkins.blueocean:blueocean =1.0-alpha-1, =1.0-alpha-1, =1.0-alpha-1,...
io.jenkins.blueocean:blueocean (>=1.0.0-b13, <=1.0.0-b21), io.jenkins.blueocean:blueocean-dashboard (>=1.0.0-b15, <=1.0.0-b21) +7 more potentially affected by CVE-2026-42520 via org.jenkins-ci.plugins:credentials-binding (1.9)
org.jenkins-ci.plugins:credentials-binding MAVEN version 1.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials-binding and may be impacted: - io.jenkins.blueocean:blueocean =1.0.0-b13, =1.0.0-b15, =1.0.0-b15, =1.0.0-b15...
io.jenkins.blueocean:blueocean (1.2.0-beta-1), io.jenkins.blueocean:blueocean-events (1.2.0-beta-1) +3 more potentially affected by CVE-2026-42522 via org.jenkins-ci.plugins:github-branch-source (2.0.6)
org.jenkins-ci.plugins:github-branch-source MAVEN version 2.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - io.jenkins.blueocean:blueocean 1.2.0-beta-1 -...
io.jenkins.blueocean:blueocean (>=1.1.0-beta-1, <=1.1.7), io.jenkins.blueocean:blueocean-events (>=1.1.0-beta-1, <=1.1.7) +5 more potentially affected by CVE-2026-42522 via org.jenkins-ci.plugins:github-branch-source (2.0.5)
org.jenkins-ci.plugins:github-branch-source MAVEN version 2.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - io.jenkins.blueocean:blueocean =1.1.0-beta-1, =1.1.0-beta-1, =1.1.0-beta-...
io.jenkins.blueocean:blueocean (>=1.0.0-b19-beta-1, <=1.0.0-b24), io.jenkins.blueocean:blueocean-dashboard (>=1.0.0-b19-beta-1, <=1.0.0-b24) +9 more potentially affected by CVE-2025-67640 via org.jenkins-ci.plugins:git-client (2.1.0)
org.jenkins-ci.plugins:git-client MAVEN version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - io.jenkins.blueocean:blueocean =1.0.0-b19-beta-1, =1.0.0-b19-beta-1, =1.0.0-b19-beta-1,...
EUVD-2022-2616
Malicious code in bioql PyPI...
EUVD-2022-5406
Malicious code in bioql PyPI...
EUVD-2023-2288
Malicious code in bioql PyPI...
EUVD-2022-2986
Malicious code in bioql PyPI...
EUVD-2022-5060
Malicious code in bioql PyPI...
EUVD-2022-5335
Malicious code in bioql PyPI...
CVE-2023-40341
A cross-site request forgery CSRF vulnerability in Jenkins Blue Ocean Plugin 1.27.5 and earlier allows attackers to connect to an attacker-specified URL, capturing GitHub credentials associated with an attacker-specified job...
CVE-2023-40341
A cross-site request forgery CSRF vulnerability in Jenkins Blue Ocean Plugin 1.27.5 and earlier allows attackers to connect to an attacker-specified URL, capturing GitHub credentials associated with an attacker-specified job...
CVE-2023-40341
A cross-site request forgery CSRF vulnerability in Jenkins Blue Ocean Plugin 1.27.5 and earlier allows attackers to connect to an attacker-specified URL, capturing GitHub credentials associated with an attacker-specified job...
PT-2023-27399
Name of the Vulnerable Software and Affected Versions Jenkins Blue Ocean Plugin versions 1.27.5 and earlier Description A cross-site request forgery CSRF vulnerability allows attackers to connect to an attacker-specified URL, capturing GitHub credentials associated with an attacker-specified job...
Jenkins Plugin Blue Ocean 跨站请求伪造漏洞
Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A cross-site request...
CVE-2023-40341: Cross-Site Request Forgery (CSRF)
A cross-site request forgery CSRF vulnerability in Jenkins Blue Ocean Plugin 1.27.5 and earlier allows attackers to connect to an attacker-specified URL, capturing GitHub credentials associated with an attacker-specified job...
plugin: CSRF vulnerability in Blue Ocean Plugin
A cross-site request forgery CSRF vulnerability in Jenkins Blue Ocean Plugin 1.25.3 and earlier allows attackers to connect to an attacker-specified HTTP server...
plugin: CSRF vulnerability in Blue Ocean Plugin
A cross-site request forgery CSRF vulnerability in Jenkins Blue Ocean Plugin 1.25.3 and earlier allows attackers to connect to an attacker-specified HTTP server...
plugin: CSRF vulnerability in Blue Ocean Plugin
A cross-site request forgery CSRF vulnerability in Jenkins Blue Ocean Plugin 1.25.3 and earlier allows attackers to connect to an attacker-specified HTTP server...