org.jenkins-ci.main:jenkins-test-harness (1.544), org.jenkins-ci.main:jenkins-war (1.544) +2 more potentially affected by CVE-2019-10384 via org.jenkins-ci.main:jenkins-core (1.544)

org.jenkins-ci.main:jenkins-core MAVEN version 1.544 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.544 - org.jenkins-ci.main:jenkins-war 1.544 -...

net.praqma:monkit-plugin (>=0.2.5, <=1.0.0), org.jenkins-ci.main:jenkins-test-harness (1.426) +7 more potentially affected by CVE-2019-10384 via org.jenkins-ci.main:jenkins-core (1.426)

org.jenkins-ci.main:jenkins-core MAVEN version 1.426 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - net.praqma:monkit-plugin =0.2.5, =0.1, =1.0, =1.3 Source cves: CVE-2019-10384 Source advisory:...

com.xti.jenkins.plugins:aws-lambda-jenkins-plugin (0.0.1), org.jenkins-ci.main:jenkins-test-harness (1.599) +7 more potentially affected by CVE-2019-10384 via org.jenkins-ci.main:jenkins-core (1.599)

org.jenkins-ci.main:jenkins-core MAVEN version 1.599 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.xti.jenkins.plugins:aws-lambda-jenkins-plugin 0.0.1 -...

org.jenkins-ci.main:jenkins-test-harness (1.406), org.jenkins-ci.main:jenkins-war (1.406) +1 more potentially affected by CVE-2019-10358 via org.jenkins-ci.main:maven-plugin (1.406)

org.jenkins-ci.main:maven-plugin MAVEN version 1.406 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:maven-plugin and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.406 - org.jenkins-ci.main:jenkins-war 1.406 -...

org.jenkins-ci.main:jenkins-test-harness (1.429), org.jenkins-ci.main:jenkins-war (1.429) potentially affected by CVE-2019-10358 via org.jenkins-ci.main:maven-plugin (1.429)

org.jenkins-ci.main:maven-plugin MAVEN version 1.429 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:maven-plugin and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.429 - org.jenkins-ci.main:jenkins-war 1.429 Source...

org.jenkins-ci.plugins:cppncss (1.2), org.jenkins-ci.plugins:dependency-check-jenkins-plugin (>=3.1.1, <=4.0.2) +3 more potentially affected by CVE-2019-10358 via org.jenkins-ci.main:maven-plugin (>=3.0, <=3.1)

org.jenkins-ci.main:maven-plugin MAVEN version =3.0, =3.1.1, =2.30, =2.9, =0.11.0, =0.11.2 Source cves: CVE-2019-10358 Source advisory: OSV:GHSA-HR96-QFVM-52R6...

org.jenkins-ci.plugins:dependency-check-jenkins-plugin (>=1.3.0, <=3.1.0) potentially affected by CVE-2019-10358 via org.jenkins-ci.main:maven-plugin (2.4)

org.jenkins-ci.main:maven-plugin MAVEN version 2.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:maven-plugin and may be impacted: - org.jenkins-ci.plugins:dependency-check-jenkins-plugin =1.3.0, =3.1.0 Source cves: CVE-2019-10358...

org.jenkins-ci.main:jenkins-test-harness (1.480.3), org.jenkins-ci.main:jenkins-war (1.480.3) +6 more potentially affected by CVE-2019-10358 via org.jenkins-ci.main:maven-plugin (1.480.3)

org.jenkins-ci.main:maven-plugin MAVEN version 1.480.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:maven-plugin and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.480.3 - org.jenkins-ci.main:jenkins-war 1.480.3 -...

org.jenkins-ci.main:jenkins-test-harness (1.424.6), org.jenkins-ci.main:jenkins-war (1.424.6) potentially affected by CVE-2019-10358 via org.jenkins-ci.main:maven-plugin (1.424.6)

org.jenkins-ci.main:maven-plugin MAVEN version 1.424.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:maven-plugin and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.424.6 - org.jenkins-ci.main:jenkins-war 1.424.6...

Storing Passwords in a Recoverable Format

Overview org.jenkins-ci.plugins:credentials-binding is a plugin that allows credentials to be bound to environment variables for use from miscellaneous build steps. Affected versions of this package are vulnerable to Storing Passwords in a Recoverable Format via the config-variables.jelly file,...

com.dubture.jenkins:digitalocean-plugin (>=0.9, <=0.12), com.inkysea.vmware.vra:vmware-vrealize-automation-plugin (>=1.2.1, <=1.2.3) +8 more potentially affected by CVE-2019-10353 via org.jenkins-ci.main:jenkins-core (1.642.2)

org.jenkins-ci.main:jenkins-core MAVEN version 1.642.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.dubture.jenkins:digitalocean-plugin =0.9, =1.2.1, =0.0.8, =0.6, =2.4.2, =1.13-alpha, =0.1...

org.jenkins-ci.main:jenkins-test-harness (1.501), org.jenkins-ci.main:jenkins-war (1.501) +5 more potentially affected by CVE-2019-10354 via org.jenkins-ci.main:jenkins-core (1.501)

org.jenkins-ci.main:jenkins-core MAVEN version 1.501 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.501 - org.jenkins-ci.main:jenkins-war 1.501 -...

org.jenkins-ci.main:jenkins-test-harness (1.458), org.jenkins-ci.main:jenkins-war (1.458) +7 more potentially affected by CVE-2019-10354 via org.jenkins-ci.main:jenkins-core (1.458)

org.jenkins-ci.main:jenkins-core MAVEN version 1.458 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.458 - org.jenkins-ci.main:jenkins-war 1.458 -...

org.jenkins-ci.main:jenkins-test-harness (1.460), org.jenkins-ci.main:jenkins-war (1.460) +10 more potentially affected by CVE-2019-10353 via org.jenkins-ci.main:jenkins-core (1.460)

org.jenkins-ci.main:jenkins-core MAVEN version 1.460 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.460 - org.jenkins-ci.main:jenkins-war 1.460 -...

org.jenkins-ci.main:jenkins-test-harness (1.424.2), org.jenkins-ci.main:jenkins-war (1.424.2) +4 more potentially affected by CVE-2019-10353 via org.jenkins-ci.main:jenkins-core (1.424.2)

org.jenkins-ci.main:jenkins-core MAVEN version 1.424.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.424.2 - org.jenkins-ci.main:jenkins-war 1.424.2 -...

org.jenkins-ci.main:jenkins-test-harness (1.562), org.jenkins-ci.main:jenkins-war (1.562) +1 more potentially affected by CVE-2019-10352 via org.jenkins-ci.main:jenkins-core (1.562)

org.jenkins-ci.main:jenkins-core MAVEN version 1.562 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.562 - org.jenkins-ci.main:jenkins-war 1.562 -...

com.dabsquared:gitlab-plugin (1.0.5), org.jenkins-ci.main:jenkins-test-harness (1.564) +3 more potentially affected by CVE-2019-10352 via org.jenkins-ci.main:jenkins-core (1.564)

org.jenkins-ci.main:jenkins-core MAVEN version 1.564 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.dabsquared:gitlab-plugin 1.0.5 - org.jenkins-ci.main:jenkins-test-harness 1.564 -...

org.jenkins-ci.main:jenkins-test-harness (1.521), org.jenkins-ci.main:jenkins-war (1.521) +9 more potentially affected by CVE-2019-10352 via org.jenkins-ci.main:jenkins-core (1.521)

org.jenkins-ci.main:jenkins-core MAVEN version 1.521 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.521 - org.jenkins-ci.main:jenkins-war 1.521 -...

GHSA-VVFJ-P4JF-J8RM Missing permission check in Jenkins Static Analysis Utilities Plugin

A missing permission check in Jenkins Static Analysis Utilities Plugin 1.95 and earlier in the DefaultGraphConfigurationViewdoSave form handler method allowed attackers with Overall/Read permission to change the per-job default graph configuration for all users...

GHSA-QW28-G63M-JXQV Sandbox bypass in ontrack Jenkins Plugin

A sandbox bypass vulnerability in Jenkins ontrack Plugin 3.4 and earlier allowed attackers with control over ontrack DSL definitions to execute arbitrary code on the Jenkins master JVM...