io.jenkins.blueocean:blueocean (>=1.0.0-b13, <=1.0.0-b21), io.jenkins.blueocean:blueocean-dashboard (>=1.0.0-b15, <=1.0.0-b21) +7 more potentially affected by CVE-2025-53650 via org.jenkins-ci.plugins:credentials-binding (1.9)

org.jenkins-ci.plugins:credentials-binding MAVEN version 1.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials-binding and may be impacted: - io.jenkins.blueocean:blueocean =1.0.0-b13, =1.0.0-b15, =1.0.0-b15, =1.0.0-b15...

org.jenkins-ci.plugins:docker-build-step (>=2.4, <=2.8) potentially affected by CVE-2025-53650 via org.jenkins-ci.plugins:credentials-binding (1.18)

org.jenkins-ci.plugins:credentials-binding MAVEN version 1.18 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials-binding and may be impacted: - org.jenkins-ci.plugins:docker-build-step =2.4, =2.8 Source cves:...

au.com.versent.jenkins.plugins:ignore-committer-strategy (>=37.v0d3157c4a_ef8, <=63.v7e87d06b_a_30c), com.amazon.jenkins.fleet:ec2-fleet (>=4.1.0.506.v619d63b_ec9d8, <=4.2.1.515.v100267825939) +71 more potentially affected by CVE-2025-53650 via org.jenkins-ci.plugins:credentials-binding (687.v619cb_15e923f)

org.jenkins-ci.plugins:credentials-binding MAVEN version 687.v619cb15e923f is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials-binding and may be impacted: - au.com.versent.jenkins.plugins:ignore-committer-strategy...

org.jenkins-ci.plugins:templating-engine (>=2.3, <=2.5.3) potentially affected by CVE-2025-53650 via org.jenkins-ci.plugins:credentials-binding (1.24)

org.jenkins-ci.plugins:credentials-binding MAVEN version 1.24 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials-binding and may be impacted: - org.jenkins-ci.plugins:templating-engine =2.3, =2.5.3 Source cves:...

au.com.versent.jenkins.plugins:ignore-committer-strategy (29.v7c3891a_434c3), com.cloudbees.jenkins.plugins:amazon-ecr (1.151.vb_ca_71ddd0b_cf) +22 more potentially affected by CVE-2025-53650 via org.jenkins-ci.plugins:credentials-binding (681.vf91669a_32e45)

org.jenkins-ci.plugins:credentials-binding MAVEN version 681.vf91669a32e45 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials-binding and may be impacted: - au.com.versent.jenkins.plugins:ignore-committer-strategy...

com.testinium.jenkins:testinium (1.0), io.jenkins.blueocean:blueocean (>=1.0.0-b22, <=1.0.1) +17 more potentially affected by CVE-2025-53650 via org.jenkins-ci.plugins:credentials-binding (1.10)

org.jenkins-ci.plugins:credentials-binding MAVEN version 1.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials-binding and may be impacted: - com.testinium.jenkins:testinium 1.0 - io.jenkins.blueocean:blueocean...

com.mig82:folder-properties (57.vde5161ec7a_b_a), io.jenkins.blueocean:blueocean-pipeline-editor (>=1.27.17, <=1.27.18) +10 more potentially affected by CVE-2025-53650 via org.jenkins-ci.plugins:credentials-binding (677.vdc9d38cb_254d)

org.jenkins-ci.plugins:credentials-binding MAVEN version 677.vdc9d38cb254d is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials-binding and may be impacted: - com.mig82:folder-properties 57.vde5161ec7aba -...

com.amazon.jenkins.fleet:ec2-fleet (>=1.0, <=1.17.3), com.cloudbees.jenkins.plugins:amazon-ecr (1.6) +10 more potentially affected by CVE-2025-53650 via org.jenkins-ci.plugins:credentials-binding (1.7)

org.jenkins-ci.plugins:credentials-binding MAVEN version 1.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials-binding and may be impacted: - com.amazon.jenkins.fleet:ec2-fleet =1.0, =1.4, =0.3, =1.2.2, =1.13, =1.0.0,...

org.jenkinsci.plugins:pipeline-model-definition (>=1.2.6, <=1.2.7), org.waveywaves.jenkins.plugins:tekton-client (1.1.0) potentially affected by CVE-2025-53650 via org.jenkins-ci.plugins:credentials-binding (1.13)

org.jenkins-ci.plugins:credentials-binding MAVEN version 1.13 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials-binding and may be impacted: - org.jenkinsci.plugins:pipeline-model-definition =1.2.6, =1.2.7 -...

org.jenkins-ci.plugins:config-file-provider (>=973.vb_a_80ecb_9a_4d0, <=980.v88956a_a_5d6a_d), org.jenkins-ci.plugins:nodejs (>=1.6.2, <=1.6.4) +2 more potentially affected by CVE-2025-53650 via org.jenkins-ci.plugins:credentials-binding (657.v2b_19db_7d6e6d)

org.jenkins-ci.plugins:credentials-binding MAVEN version 657.v2b19db7d6e6d is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials-binding and may be impacted: - org.jenkins-ci.plugins:config-file-provider =973.vba80ecb9a4d0,...

au.com.versent.jenkins.plugins:ignore-committer-strategy (>=37.v0d3157c4a_ef8, <=63.v7e87d06b_a_30c), com.amazon.jenkins.fleet:ec2-fleet (>=4.1.0.506.v619d63b_ec9d8, <=4.2.1.515.v100267825939) +71 more potentially affected by CVE-2025-53650 via org.jenkins-ci.plugins:credentials-binding (687.v619cb_15e923f)

org.jenkins-ci.plugins:credentials-binding MAVEN version 687.v619cb15e923f is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials-binding and may be impacted: - au.com.versent.jenkins.plugins:ignore-committer-strategy...

org.jenkins-ci.plugins:ec2 (>=1822.v87175d209b_b_5, <=1856.vf40220e7a_75f) potentially affected by CVE-2025-53650 via org.jenkins-ci.plugins:credentials-binding (642.v737c34dea_6c2)

org.jenkins-ci.plugins:credentials-binding MAVEN version 642.v737c34dea6c2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials-binding and may be impacted: - org.jenkins-ci.plugins:ec2 =1822.v87175d209bb5,...

GHSA-9768-HPRV-CRJ5 Jenkins Credentials Binding Plugin vulnerability can expose sensitive information in logger messages

Jenkins Credentials Binding Plugin 687.v619cb15e923f and earlier does not properly mask i.e., replace with asterisks credentials present in exception error messages that are written to the build log. Credentials Binding Plugin 687.689.v1af775332fc9 rethrows exceptions that contain credentials,...

io.jenkins.blueocean:blueocean (>=1.1.0-beta-1, <=1.2.0-beta-1), io.jenkins.blueocean:blueocean-events (>=1.1.0-beta-1, <=1.2.0-beta-1) +16 more potentially affected by CVE-2025-53650 via org.jenkins-ci.plugins:credentials-binding (1.11)

org.jenkins-ci.plugins:credentials-binding MAVEN version 1.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials-binding and may be impacted: - io.jenkins.blueocean:blueocean =1.1.0-beta-1, =1.1.0-beta-1, =1.1.0-beta-1,...

CVE-2025-53650

Jenkins Credentials Binding Plugin 687.v619cb15e923f and earlier does not properly mask i.e., replace with asterisks credentials present in exception error messages that are written to the build log...

CVE-2025-53650

Jenkins Credentials Binding Plugin 687.v619cb15e923f and earlier does not properly mask i.e., replace with asterisks credentials present in exception error messages that are written to the build log...

CVE-2025-53650

The Jenkins Credentials Binding Plugin (version 687.v619cb_15e923f and earlier) contains a vulnerability where it fails to properly mask credentials (replacing them with asterisks) when they appear in exception error messages written to the build log . An attacker could potentially obtain sensiti...

CVE-2025-53650

Jenkins Credentials Binding Plugin 687.v619cb15e923f and earlier does not properly mask i.e., replace with asterisks credentials present in exception error messages that are written to the build log...

CVE-2025-53650

Jenkins Credentials Binding Plugin 687.v619cb15e923f and earlier does not properly mask i.e., replace with asterisks credentials present in exception error messages that are written to the build log...

au.com.versent.jenkins.plugins:ignore-committer-strategy (>=29.v7c3891a_434c3, <=63.v7e87d06b_a_30c), com.amazon.jenkins.fleet:ec2-fleet (>=1.0, <=4.2.1.515.v100267825939) +113 more potentially affected by CVE-2025-53650 via org.jenkins-ci.plugins:credentials-binding (>=1.7, <=687.v619cb_15e923f)

org.jenkins-ci.plugins:credentials-binding MAVEN version =1.7, =29.v7c3891a434c3, =1.0, =1.6, =1.4, =1.41.0, =377.vc87a13718939, =57.vde5161ec7aba, =0.17, =60.vce1b19770361, =1.0.43, =1.1.0.832.v96d61a7e3647 and more Source cves: CVE-2025-53650 Source advisory: MEND:CVE-2025-53650...