com.cloudbees.plugins:build-flow-plugin (>=0.10, <=0.11.1), org.jenkins-ci.plugins:build-flow-extensions-plugin (0.1.1) potentially affected by CVE-2026-48927 via org.jenkins-ci.plugins:buildgraph-view (1.0)

org.jenkins-ci.plugins:buildgraph-view MAVEN version 1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:buildgraph-view and may be impacted: - com.cloudbees.plugins:build-flow-plugin =0.10, =0.11.1 -...

CVE-2026-48927

The Jenkins buildgraph-view Plugin (version 1.8 and earlier ) is vulnerable to a stored cross-site scripting (XSS) vulnerability due to a failure to escape the build URL . Attackers capable of configuring jobs or views can exploit this to execute malicious scripts in the context of other users. A...