EUVD-2022-3870

Malicious code in bioql PyPI...

EUVD-2022-4400

Malicious code in bioql PyPI...

EUVD-2025-9529

Malicious code in bioql PyPI...

EUVD-2022-1948

Malicious code in bioql PyPI...

EUVD-2022-2232

Malicious code in bioql PyPI...

org.jenkins-ci.main:jenkins-test-harness (1.489), org.jenkins-ci.main:jenkins-war (1.489) +9 more potentially affected by CVE-2025-59474 via org.jenkins-ci.main:jenkins-core (1.489)

org.jenkins-ci.main:jenkins-core MAVEN version 1.489 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.489 - org.jenkins-ci.main:jenkins-war 1.489 -...

org.jenkins-ci.main:jenkins-test-harness (1.475), org.jenkins-ci.main:jenkins-war (1.475) +7 more potentially affected by CVE-2025-59474 via org.jenkins-ci.main:jenkins-core (1.475)

org.jenkins-ci.main:jenkins-core MAVEN version 1.475 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.475 - org.jenkins-ci.main:jenkins-war 1.475 -...

org.jenkins-ci.main:jenkins-test-harness (1.424.1), org.jenkins-ci.main:jenkins-war (1.424.1) +6 more potentially affected by CVE-2025-59476 via org.jenkins-ci.main:jenkins-core (1.424.1)

org.jenkins-ci.main:jenkins-core MAVEN version 1.424.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.424.1 - org.jenkins-ci.main:jenkins-war 1.424.1 -...

com.technicolor:eloyente (1.0), org.jenkins-ci.main:jenkins-test-harness (1.492) +5 more potentially affected by CVE-2025-59476 via org.jenkins-ci.main:jenkins-core (1.492)

org.jenkins-ci.main:jenkins-core MAVEN version 1.492 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.technicolor:eloyente 1.0 - org.jenkins-ci.main:jenkins-test-harness 1.492 -...

net.praqma:monkit-plugin (>=0.2.5, <=1.0.0), org.jenkins-ci.main:jenkins-test-harness (1.426) +7 more potentially affected by CVE-2025-59474 via org.jenkins-ci.main:jenkins-core (1.426)

org.jenkins-ci.main:jenkins-core MAVEN version 1.426 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - net.praqma:monkit-plugin =0.2.5, =0.1, =1.0, =1.3 Source cves: CVE-2025-59474 Source advisory:...

com.xti.jenkins.plugins:aws-lambda-jenkins-plugin (0.0.1), org.jenkins-ci.main:jenkins-test-harness (1.599) +7 more potentially affected by CVE-2025-59474 via org.jenkins-ci.main:jenkins-core (1.599)

org.jenkins-ci.main:jenkins-core MAVEN version 1.599 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.xti.jenkins.plugins:aws-lambda-jenkins-plugin 0.0.1 -...

org.jenkins-ci.main:jenkins-test-harness (1.517), org.jenkins-ci.main:jenkins-war (1.517) +5 more potentially affected by CVE-2025-59474 via org.jenkins-ci.main:jenkins-core (1.517)

org.jenkins-ci.main:jenkins-core MAVEN version 1.517 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.517 - org.jenkins-ci.main:jenkins-war 1.517 -...

CVE-2025-58458

In Jenkins Git client Plugin 6.3.2 and earlier, except 6.1.4 and 6.2.1, Git URL field form validation responses differ based on whether the specified file path exists on the controller when specifying amazon-s3 protocol for use with JGit, allowing attackers with Overall/Read permission to check f...

GHSA-GM8G-FH49-QQ6V Jenkins global-build-stats Plugin missing permission check can result in graph IDs being enumerated

Jenkins global-build-stats Plugin 322.v22f4db18e2dd and earlier does not perform permission checks in its REST API endpoints, allowing attackers with Overall/Read permission to enumerate graph IDs. This has been patched in version 347.v32aeb0493c4f...

Jenkins global-build-stats Plugin missing permission check can result in graph IDs being enumerated

Jenkins global-build-stats Plugin 322.v22f4db18e2dd and earlier does not perform permission checks in its REST API endpoints, allowing attackers with Overall/Read permission to enumerate graph IDs. This has been patched in version 347.v32aeb0493c4f...

CVE-2025-58459

Jenkins global-build-stats Plugin 322.v22f4db18e2dd and earlier does not perform permission checks in its REST API endpoints, allowing attackers with Overall/Read permission to enumerate graph IDs...

Jenkins Plugin: Git Client Security Vulnerabilities

Jenkins and Jenkins plugin are both Jenkins open source products.Jenkins is an application software. An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins plugin is an application software plugin. A security...

User1st uTester Plugin Token Storage Issue

The vulnerability of the User1st uTester plugin for the Jenkins automation server lies in the fact that tokens are stored in an unencrypted form in the file io.jenkins.plugins.user1st.utester.UTesterPlugin.xml. Exploiting this vulnerability could allow a malicious actor to gain unauthorized acces...

Apica Loadtest Plugin Unauthorized Access

The vulnerability of the Apica Loadtest plugin for Jenkins-based automation servers lies in the way registration data is stored in an open manner within the config.xml file. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

Warrior Framework Plugin Password Exposure

The vulnerability of the Jenkins automation server’s Warrior Framework plugin lies in the storage of passwords in an exposed manner within the config.xml file. Exploiting this vulnerability allows a malicious actor to gain unauthorized access to protected information...