com.synopsys.jenkinsci:ownership (>=365.v2cc1889ec61d, <=373.vb_41d439617c2), org.jenkins-ci.plugins:azure-ad (>=378.vd6e2874a_69eb, <=678.vf350db_9b_563a) +2 more potentially affected by CVE-2026-42521 via org.jenkins-ci.plugins:matrix-auth (>=3.1.5, <=3.2.9)

org.jenkins-ci.plugins:matrix-auth MAVEN version =3.1.5, =365.v2cc1889ec61d, =378.vd6e2874a69eb, =2.1.0, =1.1.0.227.v27e08dfb1a20, =1.1.0.263.v2e0ddecf8b25 Source cves: CVE-2026-42521 Source advisory: SNYK:JAVA-ORGJENKINSCIPLUGINS-16322871...

com.synopsys.jenkinsci:ownership (>=365.v2cc1889ec61d, <=373.vb_41d439617c2), org.jenkins-ci.plugins:azure-ad (>=378.vd6e2874a_69eb, <=678.vf350db_9b_563a) +2 more potentially affected by CVE-2026-42521 via org.jenkins-ci.plugins:matrix-auth (>=3.1.5, <=3.2.9)

org.jenkins-ci.plugins:matrix-auth MAVEN version =3.1.5, =365.v2cc1889ec61d, =378.vd6e2874a69eb, =2.1.0, =1.1.0.227.v27e08dfb1a20, =1.1.0.263.v2e0ddecf8b25 Source cves: CVE-2026-42521 Source advisory: OSV:GHSA-JP9R-MMHW-VFF3...

com.synopsys.jenkinsci:ownership (>=365.v2cc1889ec61d, <=373.vb_41d439617c2), org.jenkins-ci.plugins:azure-ad (>=378.vd6e2874a_69eb, <=678.vf350db_9b_563a) +2 more potentially affected by CVE-2026-42521 via org.jenkins-ci.plugins:matrix-auth (>=3.1.5, <=3.2.9)

org.jenkins-ci.plugins:matrix-auth MAVEN version =3.1.5, =365.v2cc1889ec61d, =378.vd6e2874a69eb, =2.1.0, =1.1.0.227.v27e08dfb1a20, =1.1.0.263.v2e0ddecf8b25 Source cves: CVE-2026-42521 Source advisory: GHSA-JP9R-MMHW-VFF3...

com.synopsys.jenkinsci:ownership (>=365.v2cc1889ec61d, <=373.vb_41d439617c2), org.jenkins-ci.plugins:azure-ad (>=378.vd6e2874a_69eb, <=678.vf350db_9b_563a) +2 more potentially affected by CVE-2026-42521 via org.jenkins-ci.plugins:matrix-auth (>=3.1.5, <=3.2.9)

org.jenkins-ci.plugins:matrix-auth MAVEN version =3.1.5, =365.v2cc1889ec61d, =378.vd6e2874a69eb, =2.1.0, =1.1.0.227.v27e08dfb1a20, =1.1.0.263.v2e0ddecf8b25 Source cves: CVE-2026-42521 Source advisory: MEND:CVE-2026-42521...

EUVD-2022-3658

Malicious code in bioql PyPI...

com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin (0.3), org.jenkins-ci.main:jenkins-test-harness (1.554.3) +34 more potentially affected by CVE-2019-10383 via org.jenkins-ci.main:jenkins-core (1.554.3)

org.jenkins-ci.main:jenkins-core MAVEN version 1.554.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin 0.3 -...

Jenkins Build Pipeline Plugin vulnerable to Cross-site Scripting

Build Pipeline Plugin does not properly escape variables in views, resulting in a stored cross-site scripting vulnerability exploitable by users with permission to configure build pipelines. This vulnerability is only exploitable on Jenkins releases older than 2.146 or 2.138.2 due to the security...

GHSA-CX5R-P4VJ-2MQH Jenkins Build Pipeline Plugin vulnerable to Cross-site Scripting

Build Pipeline Plugin does not properly escape variables in views, resulting in a stored cross-site scripting vulnerability exploitable by users with permission to configure build pipelines. This vulnerability is only exploitable on Jenkins releases older than 2.146 or 2.138.2 due to the security...

CloudBees Jenkins Build Pipeline Plugin Cross-Site Scripting Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools . A cross-site scripting vulnerability exists in the CloudBees Jenkins Build Pipeline Plugin, which can be exploited by an attacker to execute client-side code...

CVE-2019-10373

A stored cross-site scripting vulnerability in Jenkins Build Pipeline Plugin 1.5.8 and earlier allows attackers able to edit the build pipeline description to inject arbitrary HTML and JavaScript in the plugin-provided web pages in Jenkins...

CVE-2019-10373

A stored cross-site scripting vulnerability in Jenkins Build Pipeline Plugin 1.5.8 and earlier allows attackers able to edit the build pipeline description to inject arbitrary HTML and JavaScript in the plugin-provided web pages in Jenkins...

CVE-2019-10373

A stored cross-site scripting vulnerability in Jenkins Build Pipeline Plugin 1.5.8 and earlier allows attackers able to edit the build pipeline description to inject arbitrary HTML and JavaScript in the plugin-provided web pages in Jenkins...

CVE-2019-10373: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting vulnerability in Jenkins Build Pipeline Plugin 1.5.8 and earlier allows attackers able to edit the build pipeline description to inject arbitrary HTML and JavaScript in the plugin-provided web pages in Jenkins...

PT-2019-11769 · Jenkins · Jenkins Pipeline: Build Step Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Build Pipeline Plugin versions 1.5.8 and earlier Description: A stored cross-site scripting issue allows attackers who can edit the build pipeline description to inject arbitrary HTML and JavaScript into the plugin-provided web pages ...

Stored XSS vulnerability in build-pipeline-plugin

build-pipeline-plugin does not properly escape variables in views, resulting in a stored cross-site scripting vulnerability exploitable by users with permission to configure build pipelines. This vulnerability is only exploitable on Jenkins releases older than 2.146 or 2.138.2 due to the security...