com.groupon.jenkins-ci.plugins:dotci (>=2.30.2, <=2.36.2), org.jenkins-ci.main:jenkins-core (1.655) +2 more potentially affected by CVE-2025-67635 via org.jenkins-ci.main:cli (1.655)

org.jenkins-ci.main:cli MAVEN version 1.655 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:cli and may be impacted: - com.groupon.jenkins-ci.plugins:dotci =2.30.2, =2.36.2 - org.jenkins-ci.main:jenkins-core 1.655 -...

org.jenkins-ci.main:jenkins-core (1.656), org.jenkins-ci.main:jenkins-war (1.656) +1 more potentially affected by CVE-2025-67635 via org.jenkins-ci.main:cli (1.656)

org.jenkins-ci.main:cli MAVEN version 1.656 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:cli and may be impacted: - org.jenkins-ci.main:jenkins-core 1.656 - org.jenkins-ci.main:jenkins-war 1.656 - org.jenkins-ci.main:test 1.656...

org.jenkins-ci.main:jenkins-core (1.657), org.jenkins-ci.main:jenkins-war (1.657) +1 more potentially affected by CVE-2025-67635 via org.jenkins-ci.main:cli (1.657)

org.jenkins-ci.main:cli MAVEN version 1.657 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:cli and may be impacted: - org.jenkins-ci.main:jenkins-core 1.657 - org.jenkins-ci.main:jenkins-war 1.657 - org.jenkins-ci.main:test 1.657...

net.sleepymouse.jenkins.plugins:rpi-build-status (0.7), org.jenkins-ci.main:jenkins-core (1.658) +3 more potentially affected by CVE-2025-67635 via org.jenkins-ci.main:cli (1.658)

org.jenkins-ci.main:cli MAVEN version 1.658 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:cli and may be impacted: - net.sleepymouse.jenkins.plugins:rpi-build-status 0.7 - org.jenkins-ci.main:jenkins-core 1.658 -...

io.jenkins.plugins:csp (>=2.57.va_b_326b_54f1ee, <=2.58.v31cd65258cb_2), io.jenkins.plugins:custom-folder-icon (>=2.22, <=2.938.vb_42c40c33ea_5) +11 more potentially affected by CVE-2025-67635 via org.jenkins-ci.main:cli (>=2.529, <=2.540)

org.jenkins-ci.main:cli MAVEN version =2.529, =2.57.vab326b54f1ee, =2.22, =255.v3a5dec1abe28, =0.119.v479294b419a7, =664.v998752b00adc, =2.529, =2.529, =1398.v67030756d3fb, =1925.v62fb7ffb08ce, =212.210.v6a4ffe269ef8, =1372.vfeaf21efab26, =4.626.ve5ad9f26c051, =4.731.v4932b506e767 -...

io.jenkins.plugins:csp (>=2.57.va_b_326b_54f1ee, <=2.58.v31cd65258cb_2), io.jenkins.plugins:custom-folder-icon (>=2.22, <=2.938.vb_42c40c33ea_5) +11 more potentially affected by CVE-2025-67635 via org.jenkins-ci.main:cli (>=2.529, <=2.540)

org.jenkins-ci.main:cli MAVEN version =2.529, =2.57.vab326b54f1ee, =2.22, =255.v3a5dec1abe28, =0.119.v479294b419a7, =664.v998752b00adc, =2.529, =2.529, =1398.v67030756d3fb, =1925.v62fb7ffb08ce, =212.210.v6a4ffe269ef8, =1372.vfeaf21efab26, =4.626.ve5ad9f26c051, =4.731.v4932b506e767 -...

com.coravy.hudson.plugins.github:github (>=1.9, <=1.9.1), org.jenkins-ci.main:jenkins-test-harness (1.448) +10 more potentially affected by CVE-2025-67636 via org.jenkins-ci.main:jenkins-core (1.448)

org.jenkins-ci.main:jenkins-core MAVEN version 1.448 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.coravy.hudson.plugins.github:github =1.9, =1.3.0, =1.0.5, =2.6, =2.17 -...

CVE-2025-67635

Jenkins 2.540 and earlier, LTS 2.528.2 and earlier does not properly close HTTP-based CLI connections when the connection stream becomes corrupted, allowing unauthenticated attackers to cause a denial of service...

CVE-2025-67635

Jenkins 2.540 and earlier, LTS 2.528.2 and earlier does not properly close HTTP-based CLI connections when the connection stream becomes corrupted, allowing unauthenticated attackers to cause a denial of service...

CVE-2025-67635

Jenkins 2.540 and earlier, LTS 2.528.2 and earlier does not properly close HTTP-based CLI connections when the connection stream becomes corrupted, allowing unauthenticated attackers to cause a denial of service...

CVE-2025-67635

Jenkins 2.540 and earlier, LTS 2.528.2 and earlier does not properly close HTTP-based CLI connections when the connection stream becomes corrupted, allowing unauthenticated attackers to cause a denial of service...

io.jenkins.plugins:csp (>=2.57.va_b_326b_54f1ee, <=2.58.v31cd65258cb_2), io.jenkins.plugins:custom-folder-icon (>=2.22, <=2.938.vb_42c40c33ea_5) +11 more potentially affected by CVE-2025-67635 via org.jenkins-ci.main:cli (>=2.529, <=2.540)

org.jenkins-ci.main:cli MAVEN version =2.529, =2.57.vab326b54f1ee, =2.22, =255.v3a5dec1abe28, =0.119.v479294b419a7, =664.v998752b00adc, =2.529, =2.529, =1398.v67030756d3fb, =1925.v62fb7ffb08ce, =212.210.v6a4ffe269ef8, =1372.vfeaf21efab26, =4.626.ve5ad9f26c051, =4.731.v4932b506e767 -...

CVE-2025-67635

Jenkins 2.540 and earlier, LTS 2.528.2 and earlier does not properly close HTTP-based CLI connections when the connection stream becomes corrupted, allowing unauthenticated attackers to cause a denial of service...

CVE-2025-67635

Jenkins 2.540 and earlier, LTS 2.528.2 and earlier does not properly close HTTP-based CLI connections when the connection stream becomes corrupted, allowing unauthenticated attackers to cause a denial of service...

CVE-2025-67635: Improper Resource Shutdown or Release

Jenkins 2.540 and earlier, LTS 2.528.2 and earlier does not properly close HTTP-based CLI connections when the connection stream becomes corrupted, allowing unauthenticated attackers to cause a denial of service...

PT-2025-50353

Name of the Vulnerable Software and Affected Versions Jenkins versions 2.540 and earlier Jenkins LTS versions 2.528.2 and earlier Description Jenkins does not properly close HTTP-based CLI connections when the connection stream becomes corrupted. This can allow unauthenticated attackers to cause ...

Denial of service vulnerability in HTTP-based CLI

Jenkins 2.540 and earlier, LTS 2.528.2 and earlier does not properly close HTTP-based CLI connections when the connection stream becomes corrupted. This allows unauthenticated attackers to cause a denial of service by creating HTTP-based CLI connection requests, resulting in request-handling...

@atonis/cli (3.0.15) potentially affected by CVE-2025-65513 via mcp-fetch-server (1.1.2)

mcp-fetch-server NPM version 1.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on mcp-fetch-server and may be impacted: - @atonis/cli 3.0.15 Source cves: CVE-2025-65513 Source advisory: SNYK:JS-MCPFETCHSERVER-14287685...

@nocobase/app (>=1.0.0-alpha.1, <=1.4.0-alpha.20240914095808), @nocobase/cli (>=1.0.0-alpha.1, <=1.4.0-alpha.20240914095808) +3 more potentially affected by CVE-2025-13877 via @nocobase/auth (>=1.0.0-alpha.1, <=1.9.0-beta.17)

@nocobase/auth NPM version =1.0.0-alpha.1, =1.0.0-alpha.1, =1.0.0-alpha.1, =1.0.0-alpha.1, =1.0.0-alpha.1, =1.0.0-alpha.1, =1.9.0-beta.17 Source cves: CVE-2025-13877 Source advisory: SNYK:JS-NOCOBASEAUTH-14287473...

@nocobase/app (>=1.0.0-alpha.1, <=1.4.0-alpha.20240914095808), @nocobase/cli (>=1.0.0-alpha.1, <=1.4.0-alpha.20240914095808) +3 more potentially affected by CVE-2025-13877 via @nocobase/auth (>=1.0.0-alpha.1, <=1.9.0-beta.17)

@nocobase/auth NPM version =1.0.0-alpha.1, =1.0.0-alpha.1, =1.0.0-alpha.1, =1.0.0-alpha.1, =1.0.0-alpha.1, =1.0.0-alpha.1, =1.9.0-beta.17 Source cves: CVE-2025-13877 Source advisory: OSV:GHSA-MV7P-34FV-4874...