io.micronaut.aws:micronaut-aws-distributed-configuration (>=2.8.0, <=2.8.1), io.micronaut.aws:micronaut-aws-parameter-store (>=2.6.1, <=2.6.2) +10 more potentially affected by unknown CVE via io.micronaut:micronaut-http-client (2.4.2)

io.micronaut:micronaut-http-client MAVEN version 2.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-client and may be impacted: - io.micronaut.aws:micronaut-aws-distributed-configuration =2.8.0, =2.6.1, =2.6.1, =2.8.0,...

io.kestra:core (>=0.2.0, <=0.2.2), io.kestra:repository-memory (>=0.2.0, <=0.2.2) +12 more potentially affected by unknown CVE via io.micronaut:micronaut-http-client (2.3.4)

io.micronaut:micronaut-http-client MAVEN version 2.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-client and may be impacted: - io.kestra:core =0.2.0, =0.2.0, =0.2.0, =0.2.0, =2.4.0, =2.4.0, =2.4.0, =2.4.0, =2.6.0 -...

Missing permission checks in Jenkins CloudBees AWS Credentials Plugin allows enumerating credentials IDs

CloudBees AWS Credentials Plugin 1.28 and earlier does not perform a permission check in a helper method for HTTP endpoints. This allows attackers with Overall/Read permission to enumerate credentials IDs of AWS credentials stored in Jenkins if any of the following plugins are installed: - Amazon...

com.cloudbees.jenkins.plugins:amazon-ecs (>=1.12, <=1.17), dev.lsegal.jenkins:codebuilder-cloud (1.0.1) +3 more potentially affected by CVE-2022-27199 via org.jenkins-ci.plugins:aws-credentials (1.23)

org.jenkins-ci.plugins:aws-credentials MAVEN version 1.23 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:aws-credentials and may be impacted: - com.cloudbees.jenkins.plugins:amazon-ecs =1.12, =0.3, =1.2.2, =1.0.0, =1.2.2 Source...