de.wellnerbou.jenkins:git-changelog (>=3.0, <=3.31) potentially affected by CVE-2026-57281 via org.jenkins-ci.plugins:script-security (1.46)

org.jenkins-ci.plugins:script-security MAVEN version 1.46 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - de.wellnerbou.jenkins:git-changelog =3.0, =3.31 Source cves: CVE-2026-57281 Source...

de.wellnerbou.jenkins:git-changelog (>=3.0, <=3.31) potentially affected by CVE-2026-42519 via org.jenkins-ci.plugins:script-security (1.46)

org.jenkins-ci.plugins:script-security MAVEN version 1.46 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - de.wellnerbou.jenkins:git-changelog =3.0, =3.31 Source cves: CVE-2026-42519 Source...

EUVD-2022-4330

Malicious code in bioql PyPI...

EUVD-2022-4043

Malicious code in bioql PyPI...

de.wellnerbou.jenkins:git-changelog (>=3.0, <=3.31), org.jenkins-ci.plugins:bitbucket (>=1.1.2, <=1.1.13) +4 more potentially affected by CVE-2025-58458 via org.jenkins-ci.plugins:git-client (1.16.1)

org.jenkins-ci.plugins:git-client MAVEN version 1.16.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - de.wellnerbou.jenkins:git-changelog =3.0, =1.1.2, =1.3, =0.1, =1.0.0, =2.5 Source cves:...

CVE-2019-10414

Jenkins Git Changelog Plugin 2.17 and earlier stored credentials unencrypted in job config.xml files on the Jenkins master where they could be viewed by users with Extended Read permission, or access to the master file system...

de.wellnerbou.jenkins:git-changelog (>=3.0, <=3.31) potentially affected by CVE-2024-52549 via org.jenkins-ci.plugins:script-security (1.46)

org.jenkins-ci.plugins:script-security MAVEN version 1.46 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - de.wellnerbou.jenkins:git-changelog =3.0, =3.31 Source cves: CVE-2024-52549 Source...

de.wellnerbou.jenkins:git-changelog (>=3.0, <=3.31), org.jenkins-ci.plugins.workflow:puppet-enterprise-pipeline (>=1.2.1, <=1.3.1) +5 more potentially affected by CVE-2024-39459 via org.jenkins-ci.plugins:plain-credentials (1.2)

org.jenkins-ci.plugins:plain-credentials MAVEN version 1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:plain-credentials and may be impacted: - de.wellnerbou.jenkins:git-changelog =3.0, =1.2.1, =1.0.0, =1.58, =1.18, =1.0,...

de.wellnerbou.jenkins:git-changelog (>=3.0, <=3.31) potentially affected by CVE-2024-34145 via org.jenkins-ci.plugins:script-security (1.46)

org.jenkins-ci.plugins:script-security MAVEN version 1.46 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - de.wellnerbou.jenkins:git-changelog =3.0, =3.31 Source cves: CVE-2024-34145 Source...

de.wellnerbou.jenkins:git-changelog (>=3.0, <=3.31) potentially affected by CVE-2024-34144 via org.jenkins-ci.plugins:script-security (1.46)

org.jenkins-ci.plugins:script-security MAVEN version 1.46 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - de.wellnerbou.jenkins:git-changelog =3.0, =3.31 Source cves: CVE-2024-34144 Source...

de.wellnerbou.jenkins:git-changelog (>=3.0, <=3.31) potentially affected by CVE-2023-24422 via org.jenkins-ci.plugins:script-security (1.46)

org.jenkins-ci.plugins:script-security MAVEN version 1.46 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - de.wellnerbou.jenkins:git-changelog =3.0, =3.31 Source cves: CVE-2023-24422 Source...

de.wellnerbou.jenkins:git-changelog (>=3.0, <=3.31) potentially affected by CVE-2022-43404 via org.jenkins-ci.plugins:script-security (1.46)

org.jenkins-ci.plugins:script-security MAVEN version 1.46 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - de.wellnerbou.jenkins:git-changelog =3.0, =3.31 Source cves: CVE-2022-43404 Source...

de.wellnerbou.jenkins:git-changelog (>=3.0, <=3.31) potentially affected by CVE-2022-43403 via org.jenkins-ci.plugins:script-security (1.46)

org.jenkins-ci.plugins:script-security MAVEN version 1.46 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - de.wellnerbou.jenkins:git-changelog =3.0, =3.31 Source cves: CVE-2022-43403 Source...

GHSA-H27G-72MH-9M33 Jenkins Git Changelog Plugin has Insufficiently Protected Credentials

Git Changelog Plugin stored MediaWiki and Jira passwords unencrypted in job config.xml files on the Jenkins controller. These passwords could be viewed by users with Extended Read permission, or access to the Jenkins controller file system. Git Changelog Plugin now stores these passwords encrypte...

Jenkins Git Changelog Plugin has Insufficiently Protected Credentials

Git Changelog Plugin stored MediaWiki and Jira passwords unencrypted in job config.xml files on the Jenkins controller. These passwords could be viewed by users with Extended Read permission, or access to the Jenkins controller file system. Git Changelog Plugin now stores these passwords encrypte...

de.wellnerbou.jenkins:git-changelog (>=3.0, <=3.31), org.jenkins-ci.plugins:bitbucket (>=1.1.2, <=1.1.13) +4 more potentially affected by CVE-2022-30949 via org.jenkins-ci.plugins:git (2.3.5)

org.jenkins-ci.plugins:git MAVEN version 2.3.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - de.wellnerbou.jenkins:git-changelog =3.0, =1.1.2, =1.3, =0.1, =1.0.0, =1.6.8, =1.6.11 Source cves:...

de.wellnerbou.jenkins:git-changelog (>=3.0, <=3.31), org.jenkins-ci.plugins:bitbucket (>=1.1.2, <=1.1.13) +4 more potentially affected by CVE-2022-30947 via org.jenkins-ci.plugins:git (2.3.5)

org.jenkins-ci.plugins:git MAVEN version 2.3.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - de.wellnerbou.jenkins:git-changelog =3.0, =1.1.2, =1.3, =0.1, =1.0.0, =1.6.8, =1.6.11 Source cves:...

de.wellnerbou.jenkins:git-changelog (>=3.0, <=3.31) potentially affected by CVE-2022-30946 via org.jenkins-ci.plugins:script-security (1.46)

org.jenkins-ci.plugins:script-security MAVEN version 1.46 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - de.wellnerbou.jenkins:git-changelog =3.0, =3.31 Source cves: CVE-2022-30946 Source...

GHSA-JCMG-9RW5-9RM2 Stored XSS vulnerability in Jenkins Git Changelog Plugin

A cross-site scripting vulnerability exists in Jenkins Git Changelog Plugin 2.6 and earlier in GitChangelogSummaryDecorator/summary.jelly, GitChangelogLeftsideBuildDecorator/badge.jelly, GitLogJiraFilterPostPublisher/config.jelly, GitLogBasicChangelogPostPublisher/config.jelly that allows attacke...

Stored XSS vulnerability in Jenkins Git Changelog Plugin

A cross-site scripting vulnerability exists in Jenkins Git Changelog Plugin 2.6 and earlier in GitChangelogSummaryDecorator/summary.jelly, GitChangelogLeftsideBuildDecorator/badge.jelly, GitLogJiraFilterPostPublisher/config.jelly, GitLogBasicChangelogPostPublisher/config.jelly that allows attacke...