org.biouno:uno-choice (>=1.0, <=1.4), org.jenkins-ci.plugins:git (2.0.1) +4 more potentially affected by CVE-2022-36881 via org.jenkins-ci.plugins:git-client (1.6.0)

org.jenkins-ci.plugins:git-client MAVEN version 1.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - org.biouno:uno-choice =1.0, =1.4 - org.jenkins-ci.plugins:git 2.0.1 -...

io.fabric8.pipeline:kubernetes-pipeline-aggregator (1.3), io.fabric8.pipeline:kubernetes-pipeline-devops-steps (1.3) potentially affected by CVE-2022-36881 via org.jenkins-ci.plugins:git-client (1.19.2)

org.jenkins-ci.plugins:git-client MAVEN version 1.19.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - io.fabric8.pipeline:kubernetes-pipeline-aggregator 1.3 -...

org.jenkins-ci.plugins:git (2.5.0-beta1) potentially affected by CVE-2022-36881 via org.jenkins-ci.plugins:git-client (1.20.0-beta1)

org.jenkins-ci.plugins:git-client MAVEN version 1.20.0-beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - org.jenkins-ci.plugins:git 2.5.0-beta1 Source cves: CVE-2022-36881 Source advisory:...

io.fabric8.jenkins.plugins:openshift-sync (>=y, <=1.0.45), org.jenkins-ci.plugins:git (3.0.0) +3 more potentially affected by CVE-2022-36881 via org.jenkins-ci.plugins:git-client (2.0.0)

org.jenkins-ci.plugins:git-client MAVEN version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - io.fabric8.jenkins.plugins:openshift-sync =y, =0.25, =0.5, =0.6 Source cves: CVE-2022-36881...

org.jenkins-ci.plugins:pretested-integration (>=2.4.0, <=2.4.1) potentially affected by CVE-2022-36881 via org.jenkins-ci.plugins:git-client (1.19.1)

org.jenkins-ci.plugins:git-client MAVEN version 1.19.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - org.jenkins-ci.plugins:pretested-integration =2.4.0, =2.4.1 Source cves: CVE-2022-36881 Sour...

com.dabsquared:gitlab-plugin (1.0.5), org.jenkins-ci.plugins:flaky-test-handler (>=1.0.0, <=1.0.4) +5 more potentially affected by CVE-2022-36881 via org.jenkins-ci.plugins:git-client (1.8.0)

org.jenkins-ci.plugins:git-client MAVEN version 1.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - com.dabsquared:gitlab-plugin 1.0.5 - org.jenkins-ci.plugins:flaky-test-handler =1.0.0, =2.2.0...

org.jenkins-ci.plugins:git (>=2.5.0-beta2, <=2.5.0-beta3) potentially affected by CVE-2022-36881 via org.jenkins-ci.plugins:git-client (1.20.0-beta2)

org.jenkins-ci.plugins:git-client MAVEN version 1.20.0-beta2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - org.jenkins-ci.plugins:git =2.5.0-beta2, =2.5.0-beta3 Source cves: CVE-2022-36881 Sour...

io.jenkins.blueocean:blueocean (>=1.0.0-b25, <=1.0.1), io.jenkins.blueocean:blueocean-dashboard (>=1.0.0-b25, <=1.0.1) +9 more potentially affected by CVE-2022-36881 via org.jenkins-ci.plugins:git-client (2.3.0)

org.jenkins-ci.plugins:git-client MAVEN version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - io.jenkins.blueocean:blueocean =1.0.0-b25, =1.0.0-b25, =1.0.0-b25, =1.0.0-b25, =1.0.0-b25,...

org.jenkins-ci.plugins:stashnotifier (1.16), org.jenkins-ci.plugins:templating-engine (>=2.3, <=2.5.3) potentially affected by CVE-2022-36881 via org.jenkins-ci.plugins:git-client (>=3.0.0-rc, <=3.2.1)

org.jenkins-ci.plugins:git-client MAVEN version =3.0.0-rc, =2.3, =2.5.3 Source cves: CVE-2022-36881 Source advisory: OSV:GHSA-CM7J-P8HC-97VJ...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.4.3), org.jenkins-ci.plugins.workflow:workflow-cps (1.4.3) +8 more potentially affected by CVE-2022-36881 via org.jenkins-ci.plugins:git-client (1.11.1)

org.jenkins-ci.plugins:git-client MAVEN version 1.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 1.4.3 -...

de.wellnerbou.jenkins:git-changelog (>=3.0, <=3.31), org.jenkins-ci.plugins:bitbucket (>=1.1.2, <=1.1.13) +4 more potentially affected by CVE-2022-36881 via org.jenkins-ci.plugins:git-client (1.16.1)

org.jenkins-ci.plugins:git-client MAVEN version 1.16.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - de.wellnerbou.jenkins:git-changelog =3.0, =1.1.2, =1.3, =0.1, =1.0.0, =2.5 Source cves:...

io.jenkins.blueocean:blueocean-git-pipeline (>=1.2.0-beta-5, <=1.2.4), org.jenkins-ci.plugins:bitbucket-approval-filter (1.0.0) +16 more potentially affected by CVE-2022-36881 via org.jenkins-ci.plugins:git-client (2.5.0)

org.jenkins-ci.plugins:git-client MAVEN version 2.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - io.jenkins.blueocean:blueocean-git-pipeline =1.2.0-beta-5, =2.2.3, =0.1.1, =3.5.0, =1.0.1,...

org.jenkins-ci.plugins:git (2.0-beta-2) potentially affected by CVE-2022-36881 via org.jenkins-ci.plugins:git-client (1.3.0)

org.jenkins-ci.plugins:git-client MAVEN version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - org.jenkins-ci.plugins:git 2.0-beta-2 Source cves: CVE-2022-36881 Source advisory:...

org.jenkins-ci.plugins:git (2.0-beta-3) potentially affected by CVE-2022-36881 via org.jenkins-ci.plugins:git-client (1.4.0)

org.jenkins-ci.plugins:git-client MAVEN version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - org.jenkins-ci.plugins:git 2.0-beta-3 Source cves: CVE-2022-36881 Source advisory:...

org.jenkins-ci.plugins:git (>=2.2.6, <=2.3-beta-3), org.jenkins-ci.plugins:git-tag-message (>=1.0, <=1.5) +1 more potentially affected by CVE-2022-36881 via org.jenkins-ci.plugins:git-client (1.10.2)

org.jenkins-ci.plugins:git-client MAVEN version 1.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - org.jenkins-ci.plugins:git =2.2.6, =1.0, =0.1-beta-3, =0.1-beta-8 Source cves: CVE-2022-3688...

org.jenkins-ci.plugins:assembla-merge-request-builder (>=1.1.1, <=1.1.13), org.jenkins-ci.plugins:bitbucket-pullrequest-builder (>=1.4.6, <=1.4.28) +5 more potentially affected by CVE-2022-36881 via org.jenkins-ci.plugins:git-client (1.10.1)

org.jenkins-ci.plugins:git-client MAVEN version 1.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - org.jenkins-ci.plugins:assembla-merge-request-builder =1.1.1, =1.4.6, =1.13-1, =2.2.3, =1.0....

org.waveywaves.jenkins.plugins:tekton-client (1.1.0) potentially affected by CVE-2022-36881 via org.jenkins-ci.plugins:git-client (2.7.3)

org.jenkins-ci.plugins:git-client MAVEN version 2.7.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - org.waveywaves.jenkins.plugins:tekton-client 1.1.0 Source cves: CVE-2022-36881 Source advisor...

com.qasymphony.ci.jenkins:qtest (>=1.3.0, <=1.4.6), org.biouno:uno-choice (>=1.5-alpha-1, <=1.5.3) +16 more potentially affected by CVE-2022-36881 via org.jenkins-ci.plugins:git-client (1.11.0)

org.jenkins-ci.plugins:git-client MAVEN version 1.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - com.qasymphony.ci.jenkins:qtest =1.3.0, =1.5-alpha-1, =1.0-alpha-1, =1.0-alpha-1,...

org.jenkins-ci.plugins:azure-app-service (>=0.1, <=0.4.2), org.jenkins-ci.plugins:azure-function (>=0.1.0, <=0.3.0) potentially affected by CVE-2022-36881 via org.jenkins-ci.plugins:git-client (2.4.6)

org.jenkins-ci.plugins:git-client MAVEN version 2.4.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - org.jenkins-ci.plugins:azure-app-service =0.1, =0.1.0, =0.3.0 Source cves: CVE-2022-36881...

GHSA-CM7J-P8HC-97VJ Jenkins Git client plugin 3.11.0 does not perform SSH host key verification

Jenkins Git client plugin 3.11.0 and earlier does not perform SSH host key verification when connecting to Git repositories via SSH, enabling man-in-the-middle attacks. Git client Plugin 3.11.1 provides strategies for performing host key verification for administrators to select the one that meet...