com.groupon.jenkins-ci.plugins:dotci (>=1.1.0, <=2.27.0), com.groupon.jenkins-ci.plugins:dotci-dockerpublish (>=1.0.0, <=1.0.3) +8 more potentially affected by CVE-2019-10392 via org.jenkins-ci.plugins:git-client (1.6.3)

org.jenkins-ci.plugins:git-client MAVEN version 1.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - com.groupon.jenkins-ci.plugins:dotci =1.1.0, =1.0.0, =1.0.1, =1.1.3, =1.7.2, =1.1.0, =1.0.0,...

com.sonyericsson.hudson.plugins.gerrit:gerrit-trigger (>=2.8.0, <=2.10.1), org.jenkins-ci.plugins:git (1.2.0) potentially affected by CVE-2019-10392 via org.jenkins-ci.plugins:git-client (1.0.2)

org.jenkins-ci.plugins:git-client MAVEN version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - com.sonyericsson.hudson.plugins.gerrit:gerrit-trigger =2.8.0, =2.10.1 -...

org.jenkins-ci.plugins:git (>=2.2.6, <=2.3-beta-3), org.jenkins-ci.plugins:git-tag-message (>=1.0, <=1.5) +1 more potentially affected by CVE-2019-10392 via org.jenkins-ci.plugins:git-client (1.10.2)

org.jenkins-ci.plugins:git-client MAVEN version 1.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - org.jenkins-ci.plugins:git =2.2.6, =1.0, =0.1-beta-3, =0.1-beta-8 Source cves: CVE-2019-1039...

com.amcbridge:build-configurator (>=1.0.5.0, <=1.0.6.1), com.btc.ep:btc-embeddedplatform (>=1.9.2-beta, <=2.5.9) +28 more potentially affected by CVE-2019-10392 via org.jenkins-ci.plugins:git-client (1.19.0)

org.jenkins-ci.plugins:git-client MAVEN version 1.19.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - com.amcbridge:build-configurator =1.0.5.0, =1.9.2-beta, =1.0.22, =1.0.0, =0.0.8, =1.0-alpha-...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.4.3), org.jenkins-ci.plugins.workflow:workflow-cps (1.4.3) +8 more potentially affected by CVE-2019-10392 via org.jenkins-ci.plugins:git-client (1.11.1)

org.jenkins-ci.plugins:git-client MAVEN version 1.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 1.4.3 -...

com.dabsquared:gitlab-plugin (1.0.5), org.jenkins-ci.plugins:flaky-test-handler (>=1.0.0, <=1.0.4) +5 more potentially affected by CVE-2019-10392 via org.jenkins-ci.plugins:git-client (1.8.0)

org.jenkins-ci.plugins:git-client MAVEN version 1.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - com.dabsquared:gitlab-plugin 1.0.5 - org.jenkins-ci.plugins:flaky-test-handler =1.0.0, =2.2.0...

com.barchart.jenkins:maven-release-cascade (>=1.1.0, <=1.3.2), org.jenkins-ci.plugins:git (1.3.0) potentially affected by CVE-2019-10392 via org.jenkins-ci.plugins:git-client (1.0.4)

org.jenkins-ci.plugins:git-client MAVEN version 1.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - com.barchart.jenkins:maven-release-cascade =1.1.0, =1.3.2 - org.jenkins-ci.plugins:git 1.3.0...

org.jenkins-ci.plugins.nodesharing:node-sharing-executor (>=2.0.0, <=2.0.3), org.jenkins-ci.plugins.nodesharing:node-sharing-lib (>=2.0.0, <=2.0.3) +3 more potentially affected by CVE-2019-10392 via org.jenkins-ci.plugins:git-client (1.17.1)

org.jenkins-ci.plugins:git-client MAVEN version 1.17.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - org.jenkins-ci.plugins.nodesharing:node-sharing-executor =2.0.0, =2.0.0, =2.0.0, =2.0.0,...

com.coravy.hudson.plugins.github:github (>=1.9, <=1.13.3), com.elasticbox.jenkins-ci.plugins:elasticbox (>=4.0.9, <=4.1.0) +5 more potentially affected by CVE-2019-10392 via org.jenkins-ci.plugins:git-client (1.4.4)

org.jenkins-ci.plugins:git-client MAVEN version 1.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - com.coravy.hudson.plugins.github:github =1.9, =4.0.9, =0.9.14, =1.8, =1.4.0, =1.4.2 Source...

org.jenkins-ci.plugins:git (>=2.2.11, <=2.3.4), org.jenkins-ci.plugins:github-pullrequest (>=0.0.1-beta7, <=0.0.1-beta12) +2 more potentially affected by CVE-2019-10392 via org.jenkins-ci.plugins:git-client (1.15.0)

org.jenkins-ci.plugins:git-client MAVEN version 1.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - org.jenkins-ci.plugins:git =2.2.11, =0.0.1-beta7, =0.4.0, =1.0, =1.3 Source cves:...

com.testinium.jenkins:testinium (1.0), net.praqma:memory-map (>=2.2.0, <=2.2.1) +13 more potentially affected by CVE-2019-10392 via org.jenkins-ci.plugins:git-client (1.19.7)

org.jenkins-ci.plugins:git-client MAVEN version 1.19.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - com.testinium.jenkins:testinium 1.0 - net.praqma:memory-map =2.2.0, =2.4, =2.3, =2.0.5, =1.5...

org.jenkins-ci.plugins:git (2.5.0-beta1) potentially affected by CVE-2019-10392 via org.jenkins-ci.plugins:git-client (1.20.0-beta1)

org.jenkins-ci.plugins:git-client MAVEN version 1.20.0-beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - org.jenkins-ci.plugins:git 2.5.0-beta1 Source cves: CVE-2019-10392 Source advisory:...

io.fabric8.pipeline:kubernetes-pipeline-aggregator (1.3), io.fabric8.pipeline:kubernetes-pipeline-devops-steps (1.3) potentially affected by CVE-2019-10392 via org.jenkins-ci.plugins:git-client (1.19.2)

org.jenkins-ci.plugins:git-client MAVEN version 1.19.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - io.fabric8.pipeline:kubernetes-pipeline-aggregator 1.3 -...

com.coravy.hudson.plugins.github:github (>=1.28.0, <=1.29.4), io.fabric8.jenkins.plugins:openshift-sync (>=y, <=1.0.45) +39 more potentially affected by CVE-2019-10392 via org.jenkins-ci.plugins:git-client (>=2.0.0-beta1, <=2.7.7)

org.jenkins-ci.plugins:git-client MAVEN version =2.0.0-beta1, =1.28.0, =y, =1.0.0-b19-beta-1, =1.0.0-b19-beta-1, =1.0.0-b19-beta-1, =1.0.0-b19-beta-1, =1.0.0-b19-beta-1, =1.0.0-b19-beta-1, =1.0.0-b19-beta-1, =0.1-preview-4, =2.8, =0.1, =0.1.0, =0.3.0 -...

de.wellnerbou.jenkins:git-changelog (>=3.0, <=3.31), org.jenkins-ci.plugins:bitbucket (>=1.1.2, <=1.1.13) +4 more potentially affected by CVE-2019-10392 via org.jenkins-ci.plugins:git-client (1.16.1)

org.jenkins-ci.plugins:git-client MAVEN version 1.16.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - de.wellnerbou.jenkins:git-changelog =3.0, =1.1.2, =1.3, =0.1, =1.0.0, =2.5 Source cves:...

org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source (>=2.0.0-beta-1, <=2.1.2), org.jenkins-ci.plugins:git (>=2.6.0, <=2.6.5) +5 more potentially affected by CVE-2019-10392 via org.jenkins-ci.plugins:git-client (1.21.0)

org.jenkins-ci.plugins:git-client MAVEN version 1.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source =2.0.0-beta-1, =2.6.0, =1.0,...

org.jenkins-ci.plugins:git (2.3.1), org.jenkins-ci.plugins:gitlab-plugin (>=1.1.6, <=1.1.28) +2 more potentially affected by CVE-2019-10392 via org.jenkins-ci.plugins:git-client (1.12.0)

org.jenkins-ci.plugins:git-client MAVEN version 1.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - org.jenkins-ci.plugins:git 2.3.1 - org.jenkins-ci.plugins:gitlab-plugin =1.1.6, =2.2.0,...

GHSA-HW6X-2QWV-RXR7 Improper Neutralization of Special Elements used in an OS Command in Jenkins Git Client Plugin

Jenkins Git Client Plugin 2.8.4 and earlier did not properly restrict values passed as URL argument to an invocation of 'git ls-remote', resulting in OS command injection...

org.jenkins-ci.plugins:git-client (>=1.1.2, <=1.4.5), org.jenkins-ci.plugins:job-dsl (>=1.18, <=1.19) +4 more potentially affected by CVE-2019-10320 via org.jenkins-ci.plugins:credentials (1.6)

org.jenkins-ci.plugins:credentials MAVEN version 1.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials and may be impacted: - org.jenkins-ci.plugins:git-client =1.1.2, =1.18, =1.2, =1.0, =1.0, =1.2 -...

com.coravy.hudson.plugins.github:github (>=1.28.0, <=1.29.4), io.fabric8.jenkins.plugins:openshift-sync (>=y, <=1.0.45) +22 more potentially affected by CVE-2017-1000242 via org.jenkins-ci.plugins:git-client (>=2.0.0-beta1, <=2.4.0)

org.jenkins-ci.plugins:git-client MAVEN version =2.0.0-beta1, =1.28.0, =y, =1.0.0-b19-beta-1, =1.0.0-b19-beta-1, =1.0.0-b19-beta-1, =1.0.0-b19-beta-1, =1.0.0-b19-beta-1, =1.0.0-b19-beta-1, =1.0.0-b19-beta-1, =0.1-preview-4, =2.8, =2.2.0-alpha-1, =1.0, =1.40.0, =3.0.0-beta1, =3.4.1 and more Source...