3 matches found
CVE-2026-92131
Jenkins Pipeline: Groovy Libraries Plugin 805.vafc79344957d and earlier does not restrict the library path provided to the library Pipeline step to a relative path inside the SCM checkout, and follows symbolic links to locations outside of the SCM checkout when retrieving the library, resulting i...
CVE-2026-92131
Jenkins Pipeline: Groovy Libraries Plugin version 805.vfc79344957d and earlier contains a path traversal vulnerability. The library Pipeline step does not restrict the provided path to a relative path inside the SCM checkout and follows symbolic links to locations outside it. This allows attacker...
EUVD-2026-80755
Jenkins Pipeline: Groovy Libraries Plugin 805.vafc79344957d and earlier does not restrict the library path provided to the library Pipeline step to a relative path inside the SCM checkout, and follows symbolic links to locations outside of the SCM checkout when retrieving the library, resulting i...