PT-2025-50977

Name of the Vulnerable Software and Affected Versions Lightning Flow Scanner versions 6.10.5 and below Description Lightning Flow Scanner, a CLI plugin, VS Code Extension, and GitHub Action for Salesforce Flow analysis and optimization, is affected by an issue where maliciously crafted flow...

FreeBSD : jenkins -- multiple vulnerabilities (2956aba3-1fcb-4c39-9cea-d88a46a3bf93)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 2956aba3-1fcb-4c39-9cea-d88a46a3bf93 advisory. Jenkins Security Advisory: Denial of service vulnerability in HTTP-based CLI Missing permissio...

@cedarjs/api-server (>=1.0.0-canary.12863, <=1.0.0-canary.12881), @cedarjs/cli (>=1.0.0-canary.12863, <=2.0.3-next.1) +10 more potentially affected by CVE-2025-67779 via react-server-dom-webpack (>=19.2.1, <=19.2.2)

react-server-dom-webpack NPM version =19.2.1, =1.0.0-canary.12863, =1.0.0-canary.12863, =1.0.0-canary.12863, =1.0.0-canary.12863, =1.0.0-canary.12863, =1.0.0-canary.12863, =1.0.0-canary.12863, =1.0.0-canary.12863, =1.0.0-canary.12863, =1.0.0-canary.12863, =1.0.0-canary.12863, =1.0.0-canary.12863,...

@cedarjs/api-server (>=1.0.0-canary.12863, <=1.0.0-canary.12878), @cedarjs/cli (>=1.0.0-canary.12863, <=2.0.3-next.1) +10 more potentially affected by CVE-2025-55184 via react-server-dom-webpack (19.2.1)

react-server-dom-webpack NPM version 19.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on react-server-dom-webpack and may be impacted: - @cedarjs/api-server =1.0.0-canary.12863, =1.0.0-canary.12863, =1.0.0-canary.12863, =1.0.0-canary.12863,...

@cedarjs/api-server (>=1.0.0-canary.12863, <=1.0.0-canary.12878), @cedarjs/cli (>=1.0.0-canary.12863, <=2.0.3-next.1) +10 more potentially affected by CVE-2025-55183 via react-server-dom-webpack (19.2.1)

react-server-dom-webpack NPM version 19.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on react-server-dom-webpack and may be impacted: - @cedarjs/api-server =1.0.0-canary.12863, =1.0.0-canary.12863, =1.0.0-canary.12863, =1.0.0-canary.12863,...

@cedarjs/api-server (>=1.0.0-canary.12863, <=1.0.0-canary.12881), @cedarjs/cli (>=1.0.0-canary.12863, <=2.0.3-next.1) +10 more potentially affected by CVE-2025-55184 via react-server-dom-webpack (>=19.2.1, <=19.2.2)

react-server-dom-webpack NPM version =19.2.1, =1.0.0-canary.12863, =1.0.0-canary.12863, =1.0.0-canary.12863, =1.0.0-canary.12863, =1.0.0-canary.12863, =1.0.0-canary.12863, =1.0.0-canary.12863, =1.0.0-canary.12863, =1.0.0-canary.12863, =1.0.0-canary.12863, =1.0.0-canary.12863, =1.0.0-canary.12863,...

org.jenkins-ci.main:jenkins-core (1.532.1.jenkins-19453), org.jenkins-ci.main:jenkins-war (1.532.1.jenkins-19453) potentially affected by CVE-2025-67635 via org.jenkins-ci.main:cli (1.532.1.jenkins-19453)

org.jenkins-ci.main:cli MAVEN version 1.532.1.jenkins-19453 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:cli and may be impacted: - org.jenkins-ci.main:jenkins-core 1.532.1.jenkins-19453 - org.jenkins-ci.main:jenkins-war...

org.jenkins-ci.main:jenkins-core (1.523), org.jenkins-ci.main:jenkins-test-harness (1.523) +7 more potentially affected by CVE-2025-67635 via org.jenkins-ci.main:cli (1.523)

org.jenkins-ci.main:cli MAVEN version 1.523 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:cli and may be impacted: - org.jenkins-ci.main:jenkins-core 1.523 - org.jenkins-ci.main:jenkins-test-harness 1.523 -...

com.amazonaws:codedeploy (>=1.17, <=1.23), hudson.plugins.octopusdeploy:octopusdeploy (>=1.3.0, <=1.4.0) +7 more potentially affected by CVE-2025-67635 via org.jenkins-ci.main:cli (1.612)

org.jenkins-ci.main:cli MAVEN version 1.612 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:cli and may be impacted: - com.amazonaws:codedeploy =1.17, =1.3.0, =2.7.0, =1.0, =1.4 - org.jenkins-ci.plugins:ssh2easy-plugin 1.3 Source...

org.jenkins-ci.main:jenkins-core (1.509.2.jenkins-14362-jzlib), org.jenkins-ci.main:jenkins-war (1.509.2.jenkins-14362-jzlib) +1 more potentially affected by CVE-2025-67635 via org.jenkins-ci.main:cli (1.509.2.jenkins-14362-jzlib)

org.jenkins-ci.main:cli MAVEN version 1.509.2.jenkins-14362-jzlib is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:cli and may be impacted: - org.jenkins-ci.main:jenkins-core 1.509.2.jenkins-14362-jzlib -...

org.jenkins-ci.main:jenkins-core (1.530), org.jenkins-ci.main:jenkins-test-harness (1.530) +4 more potentially affected by CVE-2025-67635 via org.jenkins-ci.main:cli (1.530)

org.jenkins-ci.main:cli MAVEN version 1.530 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:cli and may be impacted: - org.jenkins-ci.main:jenkins-core 1.530 - org.jenkins-ci.main:jenkins-test-harness 1.530 -...

org.jenkins-ci.main:jenkins-core (1.532.3.jenkins-22395), org.jenkins-ci.main:jenkins-war (1.532.3.jenkins-22395) potentially affected by CVE-2025-67635 via org.jenkins-ci.main:cli (1.532.3.jenkins-22395)

org.jenkins-ci.main:cli MAVEN version 1.532.3.jenkins-22395 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:cli and may be impacted: - org.jenkins-ci.main:jenkins-core 1.532.3.jenkins-22395 - org.jenkins-ci.main:jenkins-war...

com.groupon.jenkins-ci.plugins:dotci (>=2.30.2, <=2.36.2), org.jenkins-ci.main:jenkins-core (1.655) +2 more potentially affected by CVE-2025-67635 via org.jenkins-ci.main:cli (1.655)

org.jenkins-ci.main:cli MAVEN version 1.655 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:cli and may be impacted: - com.groupon.jenkins-ci.plugins:dotci =2.30.2, =2.36.2 - org.jenkins-ci.main:jenkins-core 1.655 -...

me.leejay.jenkins:date-parameter (>=0.0.1, <=0.0.4), org.jenkins-ci.main:jenkins-core (1.614) +6 more potentially affected by CVE-2025-67635 via org.jenkins-ci.main:cli (1.614)

org.jenkins-ci.main:cli MAVEN version 1.614 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:cli and may be impacted: - me.leejay.jenkins:date-parameter =0.0.1, =1.0, =1.8, =1.10 Source cves: CVE-2025-67635 Source advisory:...

com.moded.extendedchoiceparameter:dynamic_extended_choice_parameter (>=1.0.0, <=1.0.1), org.jenkins-ci.main:jenkins-core (1.548) +8 more potentially affected by CVE-2025-67635 via org.jenkins-ci.main:cli (1.548)

org.jenkins-ci.main:cli MAVEN version 1.548 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:cli and may be impacted: - com.moded.extendedchoiceparameter:dynamicextendedchoiceparameter =1.0.0, =4.3, =4.6.1 -...

org.jenkins-ci.main:jenkins-core (1.538), org.jenkins-ci.main:jenkins-test-harness (1.538) +6 more potentially affected by CVE-2025-67635 via org.jenkins-ci.main:cli (1.538)

org.jenkins-ci.main:cli MAVEN version 1.538 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:cli and may be impacted: - org.jenkins-ci.main:jenkins-core 1.538 - org.jenkins-ci.main:jenkins-test-harness 1.538 -...

com.coravy.hudson.plugins.github:github (>=1.1, <=1.8), org.jenkins-ci.main:jenkins-core (1.445) +8 more potentially affected by CVE-2025-67635 via org.jenkins-ci.main:cli (1.445)

org.jenkins-ci.main:cli MAVEN version 1.445 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:cli and may be impacted: - com.coravy.hudson.plugins.github:github =1.1, =1.88, =1.1, =1.3 Source cves: CVE-2025-67635 Source advisory:...

org.jenkins-ci.main:jenkins-core (1.516.jenkins-14362-jzlib), org.jenkins-ci.main:jenkins-war (1.516.jenkins-14362-jzlib) +1 more potentially affected by CVE-2025-67635 via org.jenkins-ci.main:cli (1.516.jenkins-14362-jzlib)

org.jenkins-ci.main:cli MAVEN version 1.516.jenkins-14362-jzlib is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:cli and may be impacted: - org.jenkins-ci.main:jenkins-core 1.516.jenkins-14362-jzlib - org.jenkins-ci.main:jenkins-war...

com.sonyericsson.hudson.plugins.rebuild:rebuild (>=1.10, <=1.14), org.jenkins-ci.main:jenkins-core (1.405) +9 more potentially affected by CVE-2025-67635 via org.jenkins-ci.main:cli (1.405)

org.jenkins-ci.main:cli MAVEN version 1.405 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:cli and may be impacted: - com.sonyericsson.hudson.plugins.rebuild:rebuild =1.10, =1.29, =0.92, =1.33, =1.43 Source cves: CVE-2025-67635...

org.jenkins-ci.main:jenkins-core (1.497), org.jenkins-ci.main:jenkins-test-harness (1.497) +4 more potentially affected by CVE-2025-67635 via org.jenkins-ci.main:cli (1.497)

org.jenkins-ci.main:cli MAVEN version 1.497 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:cli and may be impacted: - org.jenkins-ci.main:jenkins-core 1.497 - org.jenkins-ci.main:jenkins-test-harness 1.497 -...