EUVD-2022-6761

Malicious code in bioql PyPI...

EUVD-2022-6974

Malicious code in bioql PyPI...

com.groupon.jenkins-ci.plugins:dotci (>=2.10.0, <=2.28.1), com.groupon.jenkins-ci.plugins:dotci-dockerpublish (>=1.0.0, <=1.0.3) +8 more potentially affected by CVE-2025-59475 via org.jenkins-ci.main:jenkins-core (1.618)

org.jenkins-ci.main:jenkins-core MAVEN version 1.618 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.groupon.jenkins-ci.plugins:dotci =2.10.0, =1.0.0, =1.1.3, =1.7.2, =1.3.0, =1.0.0, =1.0, =1....

com.groupon.jenkins-ci.plugins:dotci (>=2.10.0, <=2.28.1), com.groupon.jenkins-ci.plugins:dotci-dockerpublish (>=1.0.0, <=1.0.3) +8 more potentially affected by CVE-2025-59476 via org.jenkins-ci.main:jenkins-core (1.618)

org.jenkins-ci.main:jenkins-core MAVEN version 1.618 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.groupon.jenkins-ci.plugins:dotci =2.10.0, =1.0.0, =1.1.3, =1.7.2, =1.3.0, =1.0.0, =1.0, =1....

com.groupon.jenkins-ci.plugins:dotci (>=1.1.1, <=2.5.4), org.jenkins-ci.main:jenkins-test-harness (1.567) +4 more potentially affected by CVE-2025-59474 via org.jenkins-ci.main:jenkins-core (1.567)

org.jenkins-ci.main:jenkins-core MAVEN version 1.567 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.groupon.jenkins-ci.plugins:dotci =1.1.1, =1.3, =1.8, =1.8.1 Source cves: CVE-2025-59474...

com.groupon.jenkins-ci.plugins:dotci (>=2.30.2, <=2.36.2), org.jenkins-ci.main:jenkins-war (1.655) +1 more potentially affected by CVE-2025-59475 via org.jenkins-ci.main:jenkins-core (1.655)

org.jenkins-ci.main:jenkins-core MAVEN version 1.655 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.groupon.jenkins-ci.plugins:dotci =2.30.2, =2.36.2 - org.jenkins-ci.main:jenkins-war 1.655 -...

com.groupon.jenkins-ci.plugins:dotci-fig-template (>=1.0.1, <=1.0.2), com.groupon.jenkins.plugins:dotci-plugins-starter-pack (>=1.0.0, <=1.1.1) +6 more potentially affected by CVE-2025-59476 via org.jenkins-ci.main:jenkins-core (1.518)

org.jenkins-ci.main:jenkins-core MAVEN version 1.518 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.groupon.jenkins-ci.plugins:dotci-fig-template =1.0.1, =1.0.0, =1.1, =1.2 -...

com.groupon.jenkins-ci.plugins:dotci (>=1.1.1, <=2.5.4), org.jenkins-ci.main:jenkins-test-harness (1.567) +4 more potentially affected by CVE-2025-59475 via org.jenkins-ci.main:jenkins-core (1.567)

org.jenkins-ci.main:jenkins-core MAVEN version 1.567 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.groupon.jenkins-ci.plugins:dotci =1.1.1, =1.3, =1.8, =1.8.1 Source cves: CVE-2025-59475...

com.groupon.jenkins-ci.plugins:dotci (>=1.1.0, <=2.27.0), com.groupon.jenkins-ci.plugins:dotci-dockerpublish (>=1.0.0, <=1.0.3) +8 more potentially affected by CVE-2025-58458 via org.jenkins-ci.plugins:git-client (1.6.3)

org.jenkins-ci.plugins:git-client MAVEN version 1.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - com.groupon.jenkins-ci.plugins:dotci =1.1.0, =1.0.0, =1.0.1, =1.1.3, =1.7.2, =1.1.0, =1.0.0,...

CVE-2022-41238

A missing permission check in Jenkins DotCi Plugin 2.40.00 and earlier allows unauthenticated attackers to trigger builds of jobs corresponding to the attacker-specified repository for attacker-specified commits...

CVE-2022-41239

Jenkins DotCi Plugin 2.40.00 and earlier does not escape the GitHub user name parameter provided to commit notifications when displaying them in a build cause, resulting in a stored cross-site scripting XSS vulnerability...

CVE-2022-41237

Jenkins DotCi Plugin 2.40.00 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability...

com.groupon.jenkins-ci.plugins:dotci (>=1.0.0, <=1.1.0), org.jenkins-ci.main:jenkins-test-harness (1.502) +5 more potentially affected by CVE-2025-27624 via org.jenkins-ci.main:jenkins-core (1.502)

org.jenkins-ci.main:jenkins-core MAVEN version 1.502 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.groupon.jenkins-ci.plugins:dotci =1.0.0, =0.0.1, =0.0.7 - org.jenkins-ci.plugins:plugin 1.5...

com.groupon.jenkins-ci.plugins:dotci (>=2.10.0, <=2.28.1), com.groupon.jenkins-ci.plugins:dotci-dockerpublish (>=1.0.0, <=1.0.3) +8 more potentially affected by CVE-2025-27622 via org.jenkins-ci.main:jenkins-core (1.618)

org.jenkins-ci.main:jenkins-core MAVEN version 1.618 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.groupon.jenkins-ci.plugins:dotci =2.10.0, =1.0.0, =1.1.3, =1.7.2, =1.3.0, =1.0.0, =1.0, =1....

com.groupon.jenkins-ci.plugins:dotci (>=1.1.1, <=2.5.4), org.jenkins-ci.main:jenkins-test-harness (1.567) +4 more potentially affected by CVE-2025-27624 via org.jenkins-ci.main:jenkins-core (1.567)

org.jenkins-ci.main:jenkins-core MAVEN version 1.567 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.groupon.jenkins-ci.plugins:dotci =1.1.1, =1.3, =1.8, =1.8.1 Source cves: CVE-2025-27624...

com.groupon.jenkins-ci.plugins:dotci (>=2.10.0, <=2.28.1), com.groupon.jenkins-ci.plugins:dotci-dockerpublish (>=1.0.0, <=1.0.3) +8 more potentially affected by CVE-2024-47804 via org.jenkins-ci.main:jenkins-core (1.618)

org.jenkins-ci.main:jenkins-core MAVEN version 1.618 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.groupon.jenkins-ci.plugins:dotci =2.10.0, =1.0.0, =1.1.3, =1.7.2, =1.3.0, =1.0.0, =1.0, =1....

com.groupon.jenkins-ci.plugins:dotci (>=1.1.1, <=2.5.4), org.jenkins-ci.main:jenkins-test-harness (1.567) +4 more potentially affected by CVE-2024-47804 via org.jenkins-ci.main:jenkins-core (1.567)

org.jenkins-ci.main:jenkins-core MAVEN version 1.567 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.groupon.jenkins-ci.plugins:dotci =1.1.1, =1.3, =1.8, =1.8.1 Source cves: CVE-2024-47804...

com.groupon.jenkins-ci.plugins:dotci (>=2.30.2, <=2.36.2), org.jenkins-ci.main:jenkins-war (1.655) +1 more potentially affected by CVE-2024-47804 via org.jenkins-ci.main:jenkins-core (1.655)

org.jenkins-ci.main:jenkins-core MAVEN version 1.655 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.groupon.jenkins-ci.plugins:dotci =2.30.2, =2.36.2 - org.jenkins-ci.main:jenkins-war 1.655 -...

com.groupon.jenkins-ci.plugins:dotci (>=2.30.2, <=2.36.2), org.jenkins-ci.main:jenkins-war (1.655) +1 more potentially affected by CVE-2024-47803 via org.jenkins-ci.main:jenkins-core (1.655)

org.jenkins-ci.main:jenkins-core MAVEN version 1.655 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.groupon.jenkins-ci.plugins:dotci =2.30.2, =2.36.2 - org.jenkins-ci.main:jenkins-war 1.655 -...

com.groupon.jenkins-ci.plugins:dotci (>=1.0.0, <=1.1.0), org.jenkins-ci.main:jenkins-test-harness (1.502) +5 more potentially affected by CVE-2024-47804 via org.jenkins-ci.main:jenkins-core (1.502)

org.jenkins-ci.main:jenkins-core MAVEN version 1.502 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.groupon.jenkins-ci.plugins:dotci =1.0.0, =0.0.1, =0.0.7 - org.jenkins-ci.plugins:plugin 1.5...