org.jenkins-ci.plugins.nodesharing:node-sharing-executor (>=2.0.0, <=2.0.3), org.jenkins-ci.plugins.nodesharing:node-sharing-lib (>=2.0.0, <=2.0.3) +3 more potentially affected by CVE-2026-57282 via org.jenkins-ci.plugins:git-client (1.17.1)

org.jenkins-ci.plugins:git-client MAVEN version 1.17.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - org.jenkins-ci.plugins.nodesharing:node-sharing-executor =2.0.0, =2.0.0, =2.0.0, =2.0.0,...

org.jenkins-ci.plugins.workflow:workflow-aggregator (>=0.1-beta-1, <=0.1-beta-4), org.jenkins-ci.plugins.workflow:workflow-scm-step (>=0.1-beta-1, <=0.1-beta-4) +2 more potentially affected by CVE-2026-57282 via org.jenkins-ci.plugins:git-client (1.9.0)

org.jenkins-ci.plugins:git-client MAVEN version 1.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator =0.1-beta-1, =0.1-beta-1, =1.6.1, =1.6.7...

org.jenkins-ci.plugins.workflow:workflow-aggregator (>=0.1-beta-1, <=0.1-beta-4), org.jenkins-ci.plugins.workflow:workflow-scm-step (>=0.1-beta-1, <=0.1-beta-4) +2 more potentially affected by CVE-2025-58458 via org.jenkins-ci.plugins:git-client (1.9.0)

org.jenkins-ci.plugins:git-client MAVEN version 1.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator =0.1-beta-1, =0.1-beta-1, =1.6.1, =1.6.7...

org.jenkins-ci.plugins.nodesharing:node-sharing-executor (>=2.0.0, <=2.0.3), org.jenkins-ci.plugins.nodesharing:node-sharing-lib (>=2.0.0, <=2.0.3) +3 more potentially affected by CVE-2025-58458 via org.jenkins-ci.plugins:git-client (1.17.1)

org.jenkins-ci.plugins:git-client MAVEN version 1.17.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - org.jenkins-ci.plugins.nodesharing:node-sharing-executor =2.0.0, =2.0.0, =2.0.0, =2.0.0,...

org.jenkins-ci.plugins:credentials-binding (>=1.3, <=1.5), org.jenkins-ci.plugins:git (>=2.2.11, <=2.3.4) +2 more potentially affected by CVE-2024-47805 via org.jenkins-ci.plugins:credentials (1.20)

org.jenkins-ci.plugins:credentials MAVEN version 1.20 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials and may be impacted: - org.jenkins-ci.plugins:credentials-binding =1.3, =2.2.11, =0.0.1-beta7, =0.0.1-beta12 -...

ru.yandex.jenkins.plugins.debuilder:debian-package-builder (>=1.6.1, <=1.6.6) potentially affected by CVE-2022-38663 via org.jenkins-ci.plugins:git (2.0.4)

org.jenkins-ci.plugins:git MAVEN version 2.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - ru.yandex.jenkins.plugins.debuilder:debian-package-builder =1.6.1, =1.6.6 Source cves: CVE-2022-38663 Sourc...

ru.yandex.jenkins.plugins.debuilder:debian-package-builder (>=1.6.1, <=1.6.6) potentially affected by CVE-2022-36882 via org.jenkins-ci.plugins:git (2.0.4)

org.jenkins-ci.plugins:git MAVEN version 2.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - ru.yandex.jenkins.plugins.debuilder:debian-package-builder =1.6.1, =1.6.6 Source cves: CVE-2022-36882 Sourc...

org.jenkins-ci.tools:git-parameter (>=0.4.0, <=0.6.2), org.jenkinsci.plugins.spoonscript:spoonscript (>=1.0, <=1.3) +1 more potentially affected by CVE-2022-36883 via org.jenkins-ci.plugins:git (2.3.4)

org.jenkins-ci.plugins:git MAVEN version 2.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.tools:git-parameter =0.4.0, =1.0, =1.3 -...

ru.yandex.jenkins.plugins.debuilder:debian-package-builder (>=1.6.1, <=1.6.6) potentially affected by CVE-2022-36883 via org.jenkins-ci.plugins:git (2.0.4)

org.jenkins-ci.plugins:git MAVEN version 2.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - ru.yandex.jenkins.plugins.debuilder:debian-package-builder =1.6.1, =1.6.6 Source cves: CVE-2022-36883 Sourc...

org.jenkins-ci.plugins.workflow:workflow-aggregator (>=0.1-beta-1, <=0.1-beta-4), org.jenkins-ci.plugins.workflow:workflow-scm-step (>=0.1-beta-1, <=0.1-beta-4) +2 more potentially affected by CVE-2022-36881 via org.jenkins-ci.plugins:git-client (1.9.0)

org.jenkins-ci.plugins:git-client MAVEN version 1.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator =0.1-beta-1, =0.1-beta-1, =1.6.1, =1.6.7...

org.jenkins-ci.tools:git-parameter (>=0.4.0, <=0.6.2), org.jenkinsci.plugins.spoonscript:spoonscript (>=1.0, <=1.3) +1 more potentially affected by CVE-2022-36882 via org.jenkins-ci.plugins:git (2.3.4)

org.jenkins-ci.plugins:git MAVEN version 2.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.tools:git-parameter =0.4.0, =1.0, =1.3 -...

org.jenkins-ci.plugins.nodesharing:node-sharing-executor (>=2.0.0, <=2.0.3), org.jenkins-ci.plugins.nodesharing:node-sharing-lib (>=2.0.0, <=2.0.3) +3 more potentially affected by CVE-2022-36881 via org.jenkins-ci.plugins:git-client (1.17.1)

org.jenkins-ci.plugins:git-client MAVEN version 1.17.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - org.jenkins-ci.plugins.nodesharing:node-sharing-executor =2.0.0, =2.0.0, =2.0.0, =2.0.0,...

ru.yandex.jenkins.plugins.debuilder:debian-package-builder (>=1.2, <=1.6.8) potentially affected by CVE-2021-21698 via org.jenkins-ci.plugins:subversion (1.42)

org.jenkins-ci.plugins:subversion MAVEN version 1.42 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:subversion and may be impacted: - ru.yandex.jenkins.plugins.debuilder:debian-package-builder =1.2, =1.6.8 Source cves:...

ru.yandex.jenkins.plugins.debuilder:debian-package-builder (>=1.6.1, <=1.6.6) potentially affected by CVE-2021-21684 via org.jenkins-ci.plugins:git (2.0.4)

org.jenkins-ci.plugins:git MAVEN version 2.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - ru.yandex.jenkins.plugins.debuilder:debian-package-builder =1.6.1, =1.6.6 Source cves: CVE-2021-21684 Sourc...

org.jenkins-ci.tools:git-parameter (>=0.4.0, <=0.6.2), org.jenkinsci.plugins.spoonscript:spoonscript (>=1.0, <=1.3) +1 more potentially affected by CVE-2021-21684 via org.jenkins-ci.plugins:git (2.3.4)

org.jenkins-ci.plugins:git MAVEN version 2.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.tools:git-parameter =0.4.0, =1.0, =1.3 -...

ru.yandex.jenkins.plugins.debuilder:debian-package-builder (>=1.6.1, <=1.6.6) potentially affected by CVE-2020-2136 via org.jenkins-ci.plugins:git (2.0.4)

org.jenkins-ci.plugins:git MAVEN version 2.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - ru.yandex.jenkins.plugins.debuilder:debian-package-builder =1.6.1, =1.6.6 Source cves: CVE-2020-2136 Source...

Credentials stored in plain text by debian-package-builder Plugin

debian-package-builder Plugin 1.6.11 and earlier stores a GPG passphrase unencrypted in its global configuration file ru.yandex.jenkins.plugins.debuilder.DebianPackageBuilder.xml on the Jenkins controller. This credential can be viewed by users with access to the Jenkins controller file system...

GHSA-64JR-GGW8-H9JC Credentials stored in plain text by debian-package-builder Plugin

debian-package-builder Plugin 1.6.11 and earlier stores a GPG passphrase unencrypted in its global configuration file ru.yandex.jenkins.plugins.debuilder.DebianPackageBuilder.xml on the Jenkins controller. This credential can be viewed by users with access to the Jenkins controller file system...

ru.yandex.jenkins.plugins.debuilder:debian-package-builder (>=1.2, <=1.6.8) potentially affected by CVE-2020-2111 via org.jenkins-ci.plugins:subversion (1.42)

org.jenkins-ci.plugins:subversion MAVEN version 1.42 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:subversion and may be impacted: - ru.yandex.jenkins.plugins.debuilder:debian-package-builder =1.2, =1.6.8 Source cves:...

org.jenkins-ci.plugins.workflow:workflow-aggregator (>=0.1-beta-1, <=0.1-beta-4), org.jenkins-ci.plugins.workflow:workflow-scm-step (>=0.1-beta-1, <=0.1-beta-4) +2 more potentially affected by CVE-2019-10392 via org.jenkins-ci.plugins:git-client (1.9.0)

org.jenkins-ci.plugins:git-client MAVEN version 1.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator =0.1-beta-1, =0.1-beta-1, =1.6.1, =1.6.7...