EUVD-2026-78794

Flowise versions before 3.1.4 contain a script injection vulnerability in Docker image build workflows where workflowdispatch inputs are directly interpolated into shell run blocks. Attackers with repository write access can inject shell metacharacters through inputs like tagversion and nodeversi...

io.fabric8.pipeline:kubernetes-pipeline-aggregator (1.3), io.fabric8.pipeline:kubernetes-pipeline-core (1.3) +6 more potentially affected by CVE-2026-57281 via org.jenkins-ci.plugins:script-security (1.14)

org.jenkins-ci.plugins:script-security MAVEN version 1.14 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - io.fabric8.pipeline:kubernetes-pipeline-aggregator 1.3 -...

io.fabric8.pipeline:kubernetes-pipeline-aggregator (1.3), io.fabric8.pipeline:kubernetes-pipeline-core (1.3) +6 more potentially affected by CVE-2026-42519 via org.jenkins-ci.plugins:script-security (1.14)

org.jenkins-ci.plugins:script-security MAVEN version 1.14 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - io.fabric8.pipeline:kubernetes-pipeline-aggregator 1.3 -...

io.jenkins.plugins:docker-slaves (259.v43582a_63e8b_9), org.jenkins-ci.plugins:azure-keyvault (359.v675a_5ee82d51) +3 more potentially affected by CVE-2026-42520 via org.jenkins-ci.plugins:credentials-binding (717.v951d49b_5f3a_a)

org.jenkins-ci.plugins:credentials-binding MAVEN version 717.v951d49b5f3aa is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials-binding and may be impacted: - io.jenkins.plugins:docker-slaves 259.v43582a63e8b9 -...

EUVD-2024-42300

Malicious code in bioql PyPI...

acme.sh 安全漏洞

acme.sh is a scripting tool in the acme.sh open source. A security vulnerability exists in versions of acme.sh prior to 40b6db6, which stems from a missing persist-credentials: false configuration in the github/workflows/dockerhub.yml file on which the Docker image is based...

org.jenkins-ci.plugins:docker-workflow (>=1.7, <=1.9.1) potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (2.7)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 2.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins:docker-workflow =1.7, =1.9.1 Source cves:...

io.fabric8.pipeline:kubernetes-pipeline-aggregator (1.3), io.fabric8.pipeline:kubernetes-pipeline-devops-steps (1.3) +4 more potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (1.7-alpha-1)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.7-alpha-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - io.fabric8.pipeline:kubernetes-pipeline-aggregator 1.3 -...

io.jenkins.blueocean:blueocean (>=1.0.0-b22, <=1.0.0-b24), io.jenkins.blueocean:blueocean-dashboard (>=1.0.0-b22, <=1.0.0-b24) +9 more potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (2.25)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 2.25 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - io.jenkins.blueocean:blueocean =1.0.0-b22, =1.0.0-b22, =1.0.0-b22,...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.7), org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.7) +2 more potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (1.7)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 1.7 -...

io.fabric8.pipeline:kubernetes-pipeline-aggregator (1.3), io.fabric8.pipeline:kubernetes-pipeline-core (1.3) +6 more potentially affected by CVE-2024-34144 via org.jenkins-ci.plugins:script-security (1.14)

org.jenkins-ci.plugins:script-security MAVEN version 1.14 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - io.fabric8.pipeline:kubernetes-pipeline-aggregator 1.3 -...

io.fabric8.pipeline:kubernetes-pipeline-aggregator (1.3), io.fabric8.pipeline:kubernetes-pipeline-devops-steps (1.3) +4 more potentially affected by CVE-2022-43402 via org.jenkins-ci.plugins.workflow:workflow-cps (1.7-alpha-1)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.7-alpha-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - io.fabric8.pipeline:kubernetes-pipeline-aggregator 1.3 -...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.7), org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.7) +2 more potentially affected by CVE-2022-43401 via org.jenkins-ci.plugins.workflow:workflow-cps (1.7)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 1.7 -...

org.jenkins-ci.plugins:docker-workflow (>=1.7, <=1.9.1) potentially affected by CVE-2022-43404 via org.jenkins-ci.plugins.workflow:workflow-cps (2.7)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 2.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins:docker-workflow =1.7, =1.9.1 Source cves:...

org.biouno:uno-choice (1.5-alpha-1), org.jenkins-ci.plugins:ansible-tower (>=0.5.0, <=0.12.0) +7 more potentially affected by CVE-2022-43401 via org.jenkins-ci.plugins:script-security (1.17)

org.jenkins-ci.plugins:script-security MAVEN version 1.17 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.biouno:uno-choice 1.5-alpha-1 - org.jenkins-ci.plugins:ansible-tower =0.5.0, =1....

org.jenkins-ci.plugins:docker-workflow (>=1.7, <=1.9.1) potentially affected by CVE-2022-43402 via org.jenkins-ci.plugins.workflow:workflow-cps (2.7)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 2.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins:docker-workflow =1.7, =1.9.1 Source cves:...

org.jenkins-ci.plugins:docker-workflow (>=1.7, <=1.9.1) potentially affected by CVE-2022-43401 via org.jenkins-ci.plugins.workflow:workflow-cps (2.7)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 2.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins:docker-workflow =1.7, =1.9.1 Source cves:...

io.jenkins.blueocean:blueocean (>=1.0.0-b22, <=1.0.0-b24), io.jenkins.blueocean:blueocean-dashboard (>=1.0.0-b22, <=1.0.0-b24) +9 more potentially affected by CVE-2022-43404 via org.jenkins-ci.plugins.workflow:workflow-cps (2.25)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 2.25 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - io.jenkins.blueocean:blueocean =1.0.0-b22, =1.0.0-b22, =1.0.0-b22,...

com.btc.ep:btc-embeddedplatform (>=1.9.2-beta, <=2.5.9), org.jenkins-ci.plugins.workflow:workflow-aggregator (1.13) +8 more potentially affected by CVE-2022-43402 via org.jenkins-ci.plugins.workflow:workflow-cps (1.13)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.13 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - com.btc.ep:btc-embeddedplatform =1.9.2-beta, =2.0, =1.4, =1.12.1, =2.2,...

io.fabric8.pipeline:kubernetes-pipeline-aggregator (1.3), io.fabric8.pipeline:kubernetes-pipeline-devops-steps (1.3) +4 more potentially affected by CVE-2020-2109 via org.jenkins-ci.plugins.workflow:workflow-cps (1.7-alpha-1)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.7-alpha-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - io.fabric8.pipeline:kubernetes-pipeline-aggregator 1.3 -...