org.jenkins-ci.main:jenkins-core (1.412), org.jenkins-ci.main:jenkins-test-harness (1.412) +6 more potentially affected by CVE-2025-67635 via org.jenkins-ci.main:cli (1.412)

org.jenkins-ci.main:cli MAVEN version 1.412 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:cli and may be impacted: - org.jenkins-ci.main:jenkins-core 1.412 - org.jenkins-ci.main:jenkins-test-harness 1.412 -...

com.cisco.step.jenkins.plugins:people-redirector (>=1.0, <=1.3), org.jenkins-ci.main:jenkins-core (1.415) +7 more potentially affected by CVE-2025-67635 via org.jenkins-ci.main:cli (1.415)

org.jenkins-ci.main:cli MAVEN version 1.415 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:cli and may be impacted: - com.cisco.step.jenkins.plugins:people-redirector =1.0, =1.1, =0.0.5, =0.0.9 - org.jenkins-ci.plugins:plugin 1.415...

com.cloudbees.jenkins.plugins:mansion-cloud (>=1.16, <=1.28), com.cloudbees.jenkins.plugins:oki-docki (1.0) +65 more potentially affected by CVE-2025-67635 via org.jenkins-ci.main:cli (1.532)

org.jenkins-ci.main:cli MAVEN version 1.532 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:cli and may be impacted: - com.cloudbees.jenkins.plugins:mansion-cloud =1.16, =1.10, =1.4.0, =1.20, =1.532, =1.35, =1.45 -...

org.jenkins-ci.main:jenkins-core (1.522), org.jenkins-ci.main:jenkins-test-harness (1.522) +5 more potentially affected by CVE-2025-67635 via org.jenkins-ci.main:cli (1.522)

org.jenkins-ci.main:cli MAVEN version 1.522 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:cli and may be impacted: - org.jenkins-ci.main:jenkins-core 1.522 - org.jenkins-ci.main:jenkins-test-harness 1.522 -...

org.jenkins-ci.main:jenkins-core (1.545), org.jenkins-ci.main:jenkins-test-harness (1.545) +3 more potentially affected by CVE-2025-67635 via org.jenkins-ci.main:cli (1.545)

org.jenkins-ci.main:cli MAVEN version 1.545 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:cli and may be impacted: - org.jenkins-ci.main:jenkins-core 1.545 - org.jenkins-ci.main:jenkins-test-harness 1.545 -...

org.jenkins-ci.main:jenkins-core (1.630), org.jenkins-ci.main:jenkins-test-harness (1.630) +2 more potentially affected by CVE-2025-67635 via org.jenkins-ci.main:cli (1.630)

org.jenkins-ci.main:cli MAVEN version 1.630 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:cli and may be impacted: - org.jenkins-ci.main:jenkins-core 1.630 - org.jenkins-ci.main:jenkins-test-harness 1.630 -...

org.jenkins-ci.main:jenkins-core (1.532.3.jenkins-22395-2), org.jenkins-ci.main:jenkins-war (1.532.3.jenkins-22395-2) potentially affected by CVE-2025-67635 via org.jenkins-ci.main:cli (1.532.3.jenkins-22395-2)

org.jenkins-ci.main:cli MAVEN version 1.532.3.jenkins-22395-2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:cli and may be impacted: - org.jenkins-ci.main:jenkins-core 1.532.3.jenkins-22395-2 - org.jenkins-ci.main:jenkins-war...

org.jenkins-ci.main:jenkins-core (1.533), org.jenkins-ci.main:jenkins-test-harness (1.533) +9 more potentially affected by CVE-2025-67635 via org.jenkins-ci.main:cli (1.533)

org.jenkins-ci.main:cli MAVEN version 1.533 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:cli and may be impacted: - org.jenkins-ci.main:jenkins-core 1.533 - org.jenkins-ci.main:jenkins-test-harness 1.533 -...

org.jenkins-ci.main:jenkins-core (1.444), org.jenkins-ci.main:jenkins-test-harness (1.444) +11 more potentially affected by CVE-2025-67635 via org.jenkins-ci.main:cli (1.444)

org.jenkins-ci.main:cli MAVEN version 1.444 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:cli and may be impacted: - org.jenkins-ci.main:jenkins-core 1.444 - org.jenkins-ci.main:jenkins-test-harness 1.444 -...

org.jenkins-ci.main:jenkins-core (1.462), org.jenkins-ci.main:jenkins-test-harness (1.462) +7 more potentially affected by CVE-2025-67635 via org.jenkins-ci.main:cli (1.462)

org.jenkins-ci.main:cli MAVEN version 1.462 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:cli and may be impacted: - org.jenkins-ci.main:jenkins-core 1.462 - org.jenkins-ci.main:jenkins-test-harness 1.462 -...

org.jenkins-ci.main:jenkins-core (1.487), org.jenkins-ci.main:jenkins-test-harness (1.487) +4 more potentially affected by CVE-2025-67635 via org.jenkins-ci.main:cli (1.487)

org.jenkins-ci.main:cli MAVEN version 1.487 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:cli and may be impacted: - org.jenkins-ci.main:jenkins-core 1.487 - org.jenkins-ci.main:jenkins-test-harness 1.487 -...

net.hurstfrost.jenkins:avatar (>=1.1, <=1.2), org.jenkins-ci.main:jenkins-core (1.434) +12 more potentially affected by CVE-2025-67635 via org.jenkins-ci.main:cli (1.434)

org.jenkins-ci.main:cli MAVEN version 1.434 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:cli and may be impacted: - net.hurstfrost.jenkins:avatar =1.1, =0.2.0, =0.5, =1.0 - org.jvnet.hudson.plugins:sitemonitor 0.4 Source cves:...

org.jenkins-ci.main:jenkins-core (1.643), org.jenkins-ci.main:jenkins-test-harness (1.643) +2 more potentially affected by CVE-2025-67635 via org.jenkins-ci.main:cli (1.643)

org.jenkins-ci.main:cli MAVEN version 1.643 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:cli and may be impacted: - org.jenkins-ci.main:jenkins-core 1.643 - org.jenkins-ci.main:jenkins-test-harness 1.643 -...

com.nirima.jenkins.repository:jenkins-maven-plugin (1.0), com.nirima.jenkins.repository:pom (1.0) +11 more potentially affected by CVE-2025-67635 via org.jenkins-ci.main:cli (1.499)

org.jenkins-ci.main:cli MAVEN version 1.499 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:cli and may be impacted: - com.nirima.jenkins.repository:jenkins-maven-plugin 1.0 - com.nirima.jenkins.repository:pom 1.0 -...

com.xti.jenkins.plugins:aws-lambda-jenkins-plugin (0.0.1), org.jenkins-ci.main:jenkins-core (1.599) +8 more potentially affected by CVE-2025-67635 via org.jenkins-ci.main:cli (1.599)

org.jenkins-ci.main:cli MAVEN version 1.599 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:cli and may be impacted: - com.xti.jenkins.plugins:aws-lambda-jenkins-plugin 0.0.1 - org.jenkins-ci.main:jenkins-core 1.599 -...

org.jenkins-ci.lib:xtrigger-lib (>=0.34, <=0.35), org.jenkins-ci.main:jenkins-core (1.590) +5 more potentially affected by CVE-2025-67635 via org.jenkins-ci.main:cli (1.590)

org.jenkins-ci.main:cli MAVEN version 1.590 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:cli and may be impacted: - org.jenkins-ci.lib:xtrigger-lib =0.34, =3.0, =4.4 - org.jenkins-ci.plugins:maintenance-jobs-scheduler 0.1.0 -...

org.jenkins-ci.main:jenkins-core (1.654), org.jenkins-ci.main:jenkins-war (1.654) +1 more potentially affected by CVE-2025-67635 via org.jenkins-ci.main:cli (1.654)

org.jenkins-ci.main:cli MAVEN version 1.654 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:cli and may be impacted: - org.jenkins-ci.main:jenkins-core 1.654 - org.jenkins-ci.main:jenkins-war 1.654 - org.jenkins-ci.main:test 1.654...

CVE-2025-67635

Jenkins 2.540 and earlier, LTS 2.528.2 and earlier does not properly close HTTP-based CLI connections when the connection stream becomes corrupted, allowing unauthenticated attackers to cause a denial of service...

CVE-2025-67635

Jenkins 2.540 and earlier, LTS 2.528.2 and earlier does not properly close HTTP-based CLI connections when the connection stream becomes corrupted, allowing unauthenticated attackers to cause a denial of service...

io.jenkins.plugins:csp (>=2.57.va_b_326b_54f1ee, <=2.58.v31cd65258cb_2), io.jenkins.plugins:custom-folder-icon (>=2.22, <=2.938.vb_42c40c33ea_5) +11 more potentially affected by CVE-2025-67635 via org.jenkins-ci.main:cli (>=2.529, <=2.540)

org.jenkins-ci.main:cli MAVEN version =2.529, =2.57.vab326b54f1ee, =2.22, =255.v3a5dec1abe28, =0.119.v479294b419a7, =664.v998752b00adc, =2.529, =2.529, =1398.v67030756d3fb, =1925.v62fb7ffb08ce, =212.210.v6a4ffe269ef8, =1372.vfeaf21efab26, =4.626.ve5ad9f26c051, =4.731.v4932b506e767 -...