org.jenkins-ci.plugins:extreme-notification (>=1.5, <=1.6), org.jenkins-ci.plugins:junit-realtime-test-reporter (>=0.5, <=0.6) +1 more potentially affected by CVE-2026-57280 via org.jenkins-ci.plugins:script-security (1.33)

org.jenkins-ci.plugins:script-security MAVEN version 1.33 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins:extreme-notification =1.5, =0.5, =3.4.0-beta-1, =3.5.12 Sourc...

org.jenkins-ci.plugins:extreme-notification (>=1.5, <=1.6), org.jenkins-ci.plugins:junit-realtime-test-reporter (>=0.5, <=0.6) +1 more potentially affected by CVE-2026-57281 via org.jenkins-ci.plugins:script-security (1.33)

org.jenkins-ci.plugins:script-security MAVEN version 1.33 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins:extreme-notification =1.5, =0.5, =3.4.0-beta-1, =3.5.12 Sourc...

org.jenkins-ci.plugins:pipeline-maven (>=1719.v0a_884457729c, <=1724.vfcd808f49a_0c) potentially affected by CVE-2026-48922 via org.jenkins-ci.plugins:credentials-binding (720.v3f6decef43ea)

org.jenkins-ci.plugins:credentials-binding MAVEN version 720.v3f6decef43ea is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials-binding and may be impacted: - org.jenkins-ci.plugins:pipeline-maven =1719.v0a884457729c,...

org.jenkins-ci.plugins:pipeline-maven (>=1719.v0a_884457729c, <=1724.vfcd808f49a_0c) potentially affected by CVE-2026-48922 via org.jenkins-ci.plugins:credentials-binding (720.v3f6decef43ea)

org.jenkins-ci.plugins:credentials-binding MAVEN version 720.v3f6decef43ea is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials-binding and may be impacted: - org.jenkins-ci.plugins:pipeline-maven =1719.v0a884457729c,...

org.jenkins-ci.plugins:extreme-notification (>=1.5, <=1.6), org.jenkins-ci.plugins:junit-realtime-test-reporter (>=0.5, <=0.6) +1 more potentially affected by CVE-2026-42519 via org.jenkins-ci.plugins:script-security (1.33)

org.jenkins-ci.plugins:script-security MAVEN version 1.33 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins:extreme-notification =1.5, =0.5, =3.4.0-beta-1, =3.5.12 Sourc...

org.jenkins-ci.plugins:config-file-provider (>=973.vb_a_80ecb_9a_4d0, <=980.v88956a_a_5d6a_d), org.jenkins-ci.plugins:nodejs (>=1.6.2, <=1.6.4) +2 more potentially affected by CVE-2026-42520 via org.jenkins-ci.plugins:credentials-binding (657.v2b_19db_7d6e6d)

org.jenkins-ci.plugins:credentials-binding MAVEN version 657.v2b19db7d6e6d is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials-binding and may be impacted: - org.jenkins-ci.plugins:config-file-provider =973.vba80ecb9a4d0,...

io.jenkins.docker:docker-plugin (1336.v3711dec712de), io.jenkins.plugins:docker-slaves (259.v43582a_63e8b_9) +4 more potentially affected by CVE-2026-42520 via org.jenkins-ci.plugins:credentials-binding (717.v951d49b_5f3a_a)

org.jenkins-ci.plugins:credentials-binding MAVEN version 717.v951d49b5f3aa is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials-binding and may be impacted: - io.jenkins.docker:docker-plugin 1336.v3711dec712de -...

io.jenkins.plugins:coverage-badges-extension (>=157.vf5d725246222, <=197.vb_390173d00ec), org.jenkins-ci.plugins:pipeline-maven (>=1554.v292f3d3479e6, <=1556.vd9051b_d6ef5d) potentially affected by CVE-2025-67641 via io.jenkins.plugins:coverage (>=2.1.0, <=2.2941.v08df75b_767f1)

io.jenkins.plugins:coverage MAVEN version =2.1.0, =157.vf5d725246222, =1554.v292f3d3479e6, =1556.vd9051bd6ef5d Source cves: CVE-2025-67641 Source advisory: OSV:GHSA-V3F3-RF6R-43X5...

io.jenkins.plugins:coverage-badges-extension (>=157.vf5d725246222, <=197.vb_390173d00ec), org.jenkins-ci.plugins:pipeline-maven (>=1554.v292f3d3479e6, <=1556.vd9051b_d6ef5d) potentially affected by CVE-2025-67641 via io.jenkins.plugins:coverage (>=2.1.0, <=2.2941.v08df75b_767f1)

io.jenkins.plugins:coverage MAVEN version =2.1.0, =157.vf5d725246222, =1554.v292f3d3479e6, =1556.vd9051bd6ef5d Source cves: CVE-2025-67641 Source advisory: GHSA-V3F3-RF6R-43X5...

io.jenkins.plugins:coverage-badges-extension (>=157.vf5d725246222, <=197.vb_390173d00ec), org.jenkins-ci.plugins:pipeline-maven (>=1554.v292f3d3479e6, <=1556.vd9051b_d6ef5d) potentially affected by CVE-2025-67641 via io.jenkins.plugins:coverage (>=2.1.0, <=2.2941.v08df75b_767f1)

io.jenkins.plugins:coverage MAVEN version =2.1.0, =157.vf5d725246222, =1554.v292f3d3479e6, =1556.vd9051bd6ef5d Source cves: CVE-2025-67641 Source advisory: SNYK:JAVA-IOJENKINSPLUGINS-14383149...

org.jenkins-ci.plugins:config-file-provider (>=973.vb_a_80ecb_9a_4d0, <=980.v88956a_a_5d6a_d), org.jenkins-ci.plugins:nodejs (>=1.6.2, <=1.6.4) +2 more potentially affected by CVE-2025-53650 via org.jenkins-ci.plugins:credentials-binding (657.v2b_19db_7d6e6d)

org.jenkins-ci.plugins:credentials-binding MAVEN version 657.v2b19db7d6e6d is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials-binding and may be impacted: - org.jenkins-ci.plugins:config-file-provider =973.vba80ecb9a4d0,...

CVE-2020-2233

A missing permission check in Jenkins Pipeline Maven Integration Plugin 3.8.2 and earlier allows users with Overall/Read access to enumerate credentials ID of credentials stored in Jenkins...

CVE-2020-2235

A cross-site request forgery CSRF vulnerability in Jenkins Pipeline Maven Integration Plugin 3.8.2 and earlier allows attackers to connect to an attacker-specified JDBC URL using attacker-specified credentials IDs obtained through another method, potentially capturing credentials stored in Jenkin...

org.jenkins-ci.plugins:extreme-notification (>=1.5, <=1.6), org.jenkins-ci.plugins:junit-realtime-test-reporter (>=0.5, <=0.6) +1 more potentially affected by CVE-2024-52549 via org.jenkins-ci.plugins:script-security (1.33)

org.jenkins-ci.plugins:script-security MAVEN version 1.33 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins:extreme-notification =1.5, =0.5, =3.4.0-beta-1, =3.5.12 Sourc...

com.cloudcoreo.plugins:cloudcoreo-deploytime (>=0.1.0, <=0.2.3), com.github.kostyasha.yet-another-docker:yet-another-docker-plugin (>=0.1.0-rc16, <=0.2.0) +4 more potentially affected by CVE-2024-47805 via org.jenkins-ci.plugins:credentials (2.1.3)

org.jenkins-ci.plugins:credentials MAVEN version 2.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials and may be impacted: - com.cloudcoreo.plugins:cloudcoreo-deploytime =0.1.0, =0.1.0-rc16, =0.1-beta, =0.4 -...

org.jenkins-ci.plugins:extreme-notification (>=1.5, <=1.6), org.jenkins-ci.plugins:junit-realtime-test-reporter (>=0.5, <=0.6) +1 more potentially affected by CVE-2024-34145 via org.jenkins-ci.plugins:script-security (1.33)

org.jenkins-ci.plugins:script-security MAVEN version 1.33 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins:extreme-notification =1.5, =0.5, =3.4.0-beta-1, =3.5.12 Sourc...

org.jenkins-ci.plugins:extreme-notification (>=1.5, <=1.6), org.jenkins-ci.plugins:junit-realtime-test-reporter (>=0.5, <=0.6) +1 more potentially affected by CVE-2024-34144 via org.jenkins-ci.plugins:script-security (1.33)

org.jenkins-ci.plugins:script-security MAVEN version 1.33 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins:extreme-notification =1.5, =0.5, =3.4.0-beta-1, =3.5.12 Sourc...

io.jenkins.blueocean:blueocean (>=1.0.0-b23, <=1.0.1), io.jenkins.blueocean:blueocean-config (>=1.0.0-b23, <=1.0.1) +10 more potentially affected by CVE-2024-23900 via org.jenkins-ci.plugins:matrix-project (1.8)

org.jenkins-ci.plugins:matrix-project MAVEN version 1.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:matrix-project and may be impacted: - io.jenkins.blueocean:blueocean =1.0.0-b23, =1.0.0-b23, =1.0.0-b23, =1.0.0-b23,...

CVE-2023-41934

Jenkins Pipeline Maven Integration Plugin 1330.v18e473854496 and earlier does not properly mask i.e., replace with asterisks usernames of credentials specified in custom Maven settings in Pipeline build logs if "Treat username as secret" is checked...

CVE-2023-41934

Jenkins Pipeline Maven Integration Plugin 1330.v18e473854496 and earlier does not properly mask i.e., replace with asterisks usernames of credentials specified in custom Maven settings in Pipeline build logs if "Treat username as secret" is checked...