org.jenkins-ci.plugins.workflow:workflow-aggregator (>=1.1, <=1.2), org.jenkins-ci.plugins.workflow:workflow-cps (>=1.1, <=1.2) +1 more potentially affected by CVE-2026-57281 via org.jenkins-ci.plugins:script-security (1.12)

org.jenkins-ci.plugins:script-security MAVEN version 1.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator =1.1, =1.1, =1.1, =1.2 Source...

io.jenkins.blueocean:blueocean (>=1.0.0-b25, <=1.1.7), io.jenkins.blueocean:blueocean-dashboard (>=1.0.0-b25, <=1.0.1) +25 more potentially affected by CVE-2026-57280 via org.jenkins-ci.plugins:script-security (1.26)

org.jenkins-ci.plugins:script-security MAVEN version 1.26 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - io.jenkins.blueocean:blueocean =1.0.0-b25, =1.0.0-b25, =1.0.0-b25, =1.0.0-b25,...

io.jenkins.plugins:createos-sandbox (24.vfe318c36a_db_8), io.jenkins.plugins:gitea-checks (606.679.vb_d632867a_6b_b) +10 more potentially affected by CVE-2026-57280 via org.jenkins-ci.plugins:script-security (1402.v94c9ce464861)

org.jenkins-ci.plugins:script-security MAVEN version 1402.v94c9ce464861 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - io.jenkins.plugins:createos-sandbox 24.vfe318c36adb8 -...

au.com.versent.jenkins.plugins:ignore-committer-strategy (29.v7c3891a_434c3), com.coravy.hudson.plugins.github:github (>=1.41.0, <=1.42.0) +52 more potentially affected by CVE-2026-57280 via org.jenkins-ci.plugins:script-security (1362.v67dc1f0e1b_b_3)

org.jenkins-ci.plugins:script-security MAVEN version 1362.v67dc1f0e1bb3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - au.com.versent.jenkins.plugins:ignore-committer-strategy...

com.openshift.jenkins.plugins:openshift-client (1.1.0.424.v829cb_ccf8798), io.jenkins.plugins:openshift-k8s-credentials (>=168.v79a_983191991, <=276.v708b_2cd34a_9e) +7 more potentially affected by CVE-2026-57280 via org.jenkins-ci.plugins:script-security (1313.v7a_6067dc7087)

org.jenkins-ci.plugins:script-security MAVEN version 1313.v7a6067dc7087 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - com.openshift.jenkins.plugins:openshift-client 1.1.0.424.v829cbccf8798...

io.jenkins.plugins:zohosprints (>=1.0, <=1.1.4), org.jenkins-ci.plugins:build-name-setter (2.0.4) +6 more potentially affected by CVE-2026-57280 via org.jenkins-ci.plugins:script-security (1.54)

org.jenkins-ci.plugins:script-security MAVEN version 1.54 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - io.jenkins.plugins:zohosprints =1.0, =2.4, =2.62.1, =2.2, =1.78, =2.0.0, =1.14,...

org.jenkins-ci.plugins:ant-in-workspace (1.2.2), org.jenkins-ci.plugins:applitools-eyes (>=1.14, <=1.15.1) +1 more potentially affected by CVE-2026-57280 via org.jenkins-ci.plugins:script-security (1.75)

org.jenkins-ci.plugins:script-security MAVEN version 1.75 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins:ant-in-workspace 1.2.2 - org.jenkins-ci.plugins:applitools-ey...

com.geteasyqa:easyqa (1.0), com.qasymphony.ci.jenkins:qtest (>=1.3.0, <=1.4.6) +15 more potentially affected by CVE-2026-57280 via org.jenkins-ci.plugins:script-security (1.27)

org.jenkins-ci.plugins:script-security MAVEN version 1.27 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - com.geteasyqa:easyqa 1.0 - com.qasymphony.ci.jenkins:qtest =1.3.0, =1.5.0, =1.5.0,...

com.mig82:folder-properties (57.vde5161ec7a_b_a), com.sonyericsson.jenkins.plugins.bfa:build-failure-analyzer (2.5.3) +24 more potentially affected by CVE-2026-57280 via org.jenkins-ci.plugins:script-security (1336.vf33a_a_9863911)

org.jenkins-ci.plugins:script-security MAVEN version 1336.vf33aa9863911 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - com.mig82:folder-properties 57.vde5161ec7aba -...

de.esailors.jenkins:test-stability (2.4), io.jenkins.blueocean:blueocean-rest-impl (>=1.27.17, <=1.27.18) +20 more potentially affected by CVE-2026-57280 via org.jenkins-ci.plugins:script-security (1335.vf07d9ce377a_e)

org.jenkins-ci.plugins:script-security MAVEN version 1335.vf07d9ce377ae is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - de.esailors.jenkins:test-stability 2.4 -...

GHSA-C3JM-9VJ7-5V66 Jenkins Script Security Plugin sandbox bypass vulnerability

Jenkins Script Security Plugin provides a sandbox feature that allows running user-provided scripts safely by intercepting and checking potentially unsafe operations. Script Security Plugin 1402.v94c9ce464861 and earlier does not intercept the implicit type cast applied to each element of the...

org.jenkins-ci.plugins:groovy (2.1) potentially affected by CVE-2026-57280 via org.jenkins-ci.plugins:script-security (1.50)

org.jenkins-ci.plugins:script-security MAVEN version 1.50 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins:groovy 2.1 Source cves: CVE-2026-57280 Source advisory:...

org.biouno:uno-choice (>=2.8.5, <=2.8.6), org.jenkins-ci.plugins:job-dsl (1.90) potentially affected by CVE-2026-57280 via org.jenkins-ci.plugins:script-security (1365.v4778ca_84b_de5)

org.jenkins-ci.plugins:script-security MAVEN version 1365.v4778ca84bde5 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.biouno:uno-choice =2.8.5, =2.8.6 - org.jenkins-ci.plugins:job-dsl...

io.jenkins.blueocean:blueocean (>=1.0.0-b18, <=1.0.0-b21), io.jenkins.blueocean:blueocean-dashboard (>=1.0.0-b18, <=1.0.0-b21) +13 more potentially affected by CVE-2026-57280 via org.jenkins-ci.plugins:script-security (1.23)

org.jenkins-ci.plugins:script-security MAVEN version 1.23 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - io.jenkins.blueocean:blueocean =1.0.0-b18, =1.0.0-b18, =1.0.0-b18, =1.0.0-b18,...

io.jenkins.plugins:cdevents (>=1-37.v6412b_91c3799, <=1-40.vb_3d2c94f2379), io.jenkins.plugins:pipeline-agent-build-history (>=20.v2cb_6cc0a_7d81, <=34.v570d1a_452f30) +4 more potentially affected by CVE-2026-57280 via org.jenkins-ci.plugins:script-security (1273.v66c1964f0dfd)

org.jenkins-ci.plugins:script-security MAVEN version 1273.v66c1964f0dfd is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - io.jenkins.plugins:cdevents =1-37.v6412b91c3799, =20.v2cb6cc0a7d81,...

org.jenkins-ci.plugins:templating-engine (>=1.6, <=2.1) potentially affected by CVE-2026-57280 via org.jenkins-ci.plugins:script-security (1.42)

org.jenkins-ci.plugins:script-security MAVEN version 1.42 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins:templating-engine =1.6, =2.1 Source cves: CVE-2026-57280 Sour...

org.jenkins-ci.plugins.workflow:workflow-cps (>=3697.3699.v9cfca_8c0db_0c, <=3774.v4a_d648d409ce), org.jenkins-ci.plugins:command-launcher (>=100.102.v60240195db_50, <=107.v773860566e2e) potentially affected by CVE-2026-57280 via org.jenkins-ci.plugins:script-security (1265.va_fb_290b_4b_d34)

org.jenkins-ci.plugins:script-security MAVEN version 1265.vafb290b4bd34 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-cps =3697.3699.v9cfca8c0db0c,...

io.jenkins.blueocean:blueocean (1.2.0-beta-1), io.jenkins.blueocean:blueocean-events (1.2.0-beta-1) +9 more potentially affected by CVE-2026-57280 via org.jenkins-ci.plugins:script-security (1.29)

org.jenkins-ci.plugins:script-security MAVEN version 1.29 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - io.jenkins.blueocean:blueocean 1.2.0-beta-1 - io.jenkins.blueocean:blueocean-events...

GHSA-CFJ9-2VGR-HPXP Jenkins Script Security Plugin has a script security bypass vulnerability

Jenkins Script Security Plugin 1402.v94c9ce464861 and earlier does not reject Groovy AST transformation annotations such as @CompileStatic and @TypeChecked that carry an extensions member, which causes Groovy to load and execute a script from the classpath at compile time, before the sandbox is...

org.jenkins-ci.plugins:claim (543.v0061de6b_dcb_d) potentially affected by CVE-2026-57280 via org.jenkins-ci.plugins:script-security (1264.vecf66020eb_7d)

org.jenkins-ci.plugins:script-security MAVEN version 1264.vecf66020eb7d is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins:claim 543.v0061de6bdcbd Source cves:...