org.jenkins-ci.plugins:cas-plugin (1.7.0), org.jenkins-ci.plugins:parallel-test-executor (500.va_5e1c1f1a_211) potentially affected by CVE-2026-57280 via org.jenkins-ci.plugins:script-security (1358.vb_26663c13537)

org.jenkins-ci.plugins:script-security MAVEN version 1358.vb26663c13537 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins:cas-plugin 1.7.0 -...

org.jenkins-ci.plugins:cas-plugin (1.7.0), org.jenkins-ci.plugins:parallel-test-executor (500.va_5e1c1f1a_211) potentially affected by CVE-2026-57281 via org.jenkins-ci.plugins:script-security (1358.vb_26663c13537)

org.jenkins-ci.plugins:script-security MAVEN version 1358.vb26663c13537 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins:cas-plugin 1.7.0 -...

org.jenkins-ci.main:jenkins-test-harness (1.470), org.jenkins-ci.main:jenkins-war (1.470) +5 more potentially affected by CVE-2026-53439 via org.jenkins-ci.main:jenkins-core (1.470)

org.jenkins-ci.main:jenkins-core MAVEN version 1.470 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.470 - org.jenkins-ci.main:jenkins-war 1.470 -...

org.jenkins-ci.main:jenkins-test-harness (1.470), org.jenkins-ci.main:jenkins-war (1.470) +5 more potentially affected by CVE-2026-53442 via org.jenkins-ci.main:jenkins-core (1.470)

org.jenkins-ci.main:jenkins-core MAVEN version 1.470 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.470 - org.jenkins-ci.main:jenkins-war 1.470 -...

org.jenkins-ci.main:jenkins-test-harness (1.470), org.jenkins-ci.main:jenkins-war (1.470) +5 more potentially affected by CVE-2026-53438 via org.jenkins-ci.main:jenkins-core (1.470)

org.jenkins-ci.main:jenkins-core MAVEN version 1.470 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.470 - org.jenkins-ci.main:jenkins-war 1.470 -...

org.jenkins-ci.plugins:cas-plugin (1.7.0), org.jenkins-ci.plugins:parallel-test-executor (500.va_5e1c1f1a_211) potentially affected by CVE-2026-42519 via org.jenkins-ci.plugins:script-security (1358.vb_26663c13537)

org.jenkins-ci.plugins:script-security MAVEN version 1358.vb26663c13537 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins:cas-plugin 1.7.0 -...

acegisecurity:acegi-security (0.7.0), acegisecurity:acegi-security-cas (0.7.0) +4 more potentially affected by CVE-2026-22737 via springframework:spring-webmvc (>=1.1.3, <=1.2.1)

springframework:spring-webmvc MAVEN version =1.1.3, =1.0-rc2, =1.0-rc3 Source cves: CVE-2026-22737 Source advisory: SNYK:JAVA-SPRINGFRAMEWORK-15701846...

PT-2026-4088

Name of the Vulnerable Software and Affected Versions Casey Bisson wpCAS versions through 1.07 Description The software contains a flaw due to improper neutralization of input during web page generation, leading to a Reflected Cross-Site Scripting XSS condition. This allows for the injection of...

CVE-2018-1000188

A server-side request forgery vulnerability exists in Jenkins CAS Plugin 1.4.1 and older in CasSecurityRealm.java that allows attackers with Overall/Read access to cause Jenkins to send a GET request to a specified URL...

org.jenkins-ci.main:jenkins-test-harness (1.470), org.jenkins-ci.main:jenkins-war (1.470) +5 more potentially affected by CVE-2025-67636 via org.jenkins-ci.main:jenkins-core (1.470)

org.jenkins-ci.main:jenkins-core MAVEN version 1.470 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.470 - org.jenkins-ci.main:jenkins-war 1.470 -...

EUVD-2023-1559

Malicious code in bioql PyPI...

EUVD-2022-2055

Malicious code in bioql PyPI...

EUVD-2022-3729

Malicious code in bioql PyPI...

CVE-2023-32997

Jenkins CAS Plugin 1.6.2 and earlier does not invalidate the previous session on login...

CVE-2021-21673

Jenkins CAS Plugin 1.6.0 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins, allowing attackers to perform phishing attacks...

org.jenkins-ci.main:jenkins-test-harness (1.470), org.jenkins-ci.main:jenkins-war (1.470) +5 more potentially affected by CVE-2025-27622 via org.jenkins-ci.main:jenkins-core (1.470)

org.jenkins-ci.main:jenkins-core MAVEN version 1.470 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.470 - org.jenkins-ci.main:jenkins-war 1.470 -...

CVE-2018-9411

In decrypt of ClearKeyCasPlugin.cpp there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote arbitrary code execution with no additional execution privileges needed. User interaction is needed for exploitation...

org.jenkins-ci.plugins:cas-plugin (1.7.0), org.jenkins-ci.plugins:parallel-test-executor (500.va_5e1c1f1a_211) potentially affected by CVE-2024-52549 via org.jenkins-ci.plugins:script-security (1358.vb_26663c13537)

org.jenkins-ci.plugins:script-security MAVEN version 1358.vb26663c13537 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins:cas-plugin 1.7.0 -...

CAS <= 1.0.0 - Unauthenticated SSRF

Description The plugin does not validate a parameter before making a request to it, which could allow unauthenticated users to perform SSRF attack PoC https://example.com/wp-content/themes/cas/download.php?path=http://127.0.0.1:8080...

Session Fixation

CAS Plugin is vulnerable to Session Fixation. The vulnerability exists due to not invalidating the existing session on login which allows an attacker to gain administrator access and perform unauthorized actions...