com.coravy.hudson.plugins.github:github (>=1.28.0, <=1.29.4), io.jenkins.blueocean:blueocean (>=1.1.0-beta-1, <=1.2.0-beta-1) +12 more potentially affected by CVE-2025-67640 via org.jenkins-ci.plugins:git-client (2.4.0)

org.jenkins-ci.plugins:git-client MAVEN version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - com.coravy.hudson.plugins.github:github =1.28.0, =1.1.0-beta-1, =1.1.0-beta-1, =1.1.0-beta-1,...

org.jenkins-ci.plugins:bitbucket-approve (>=1.0.1, <=1.0.3), org.jenkins-ci.plugins:git (>=2.2.10, <=2.3.2) potentially affected by CVE-2025-67640 via org.jenkins-ci.plugins:git-client (1.13.0)

org.jenkins-ci.plugins:git-client MAVEN version 1.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - org.jenkins-ci.plugins:bitbucket-approve =1.0.1, =2.2.10, =2.3.2 Source cves: CVE-2025-67640...

com.groupon.jenkins-ci.plugins:dotci (>=1.1.0, <=2.27.0), com.groupon.jenkins-ci.plugins:dotci-dockerpublish (>=1.0.0, <=1.0.3) +8 more potentially affected by CVE-2025-67640 via org.jenkins-ci.plugins:git-client (1.6.3)

org.jenkins-ci.plugins:git-client MAVEN version 1.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - com.groupon.jenkins-ci.plugins:dotci =1.1.0, =1.0.0, =1.0.1, =1.1.3, =1.7.2, =1.1.0, =1.0.0,...

io.jenkins.blueocean:blueocean-git-pipeline (>=1.2.0-beta-5, <=1.2.4), org.jenkins-ci.plugins:bitbucket-approval-filter (1.0.0) +16 more potentially affected by CVE-2025-67640 via org.jenkins-ci.plugins:git-client (2.5.0)

org.jenkins-ci.plugins:git-client MAVEN version 2.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - io.jenkins.blueocean:blueocean-git-pipeline =1.2.0-beta-5, =2.2.3, =0.1.1, =3.5.0, =1.0.1,...

org.jenkins-ci.plugins:stashnotifier (1.16) potentially affected by CVE-2025-67640 via org.jenkins-ci.plugins:git-client (3.0.0-rc)

org.jenkins-ci.plugins:git-client MAVEN version 3.0.0-rc is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - org.jenkins-ci.plugins:stashnotifier 1.16 Source cves: CVE-2025-67640 Source advisory:...

org.jenkins-ci.plugins:git (2.5.0-beta1) potentially affected by CVE-2025-67640 via org.jenkins-ci.plugins:git-client (1.20.0-beta1)

org.jenkins-ci.plugins:git-client MAVEN version 1.20.0-beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - org.jenkins-ci.plugins:git 2.5.0-beta1 Source cves: CVE-2025-67640 Source advisory:...

au.com.versent.jenkins.plugins:ignore-committer-strategy (>=37.v0d3157c4a_ef8, <=63.v7e87d06b_a_30c), com.coravy.hudson.plugins.github:github (>=1.41.0, <=1.47.0) +40 more potentially affected by CVE-2025-67640 via org.jenkins-ci.plugins:git-client (>=6.1.0, <=6.4.0)

org.jenkins-ci.plugins:git-client MAVEN version =6.1.0, =37.v0d3157c4aef8, =1.41.0, =61.vf6d8f6f5ed02, =1.1.0.825.v30618768da42, =1.27.17, =1.27.17, =1.27.17, =1.27.17, =1.27.17, =1.27.17, =1.27.17, =1.0.0, =3.2083.vd36f32376929, =530.v38d502df428f, =634.v371dc6d978a3, =679.v74133dab435a and more...

org.waveywaves.jenkins.plugins:tekton-client (1.1.0) potentially affected by CVE-2025-67640 via org.jenkins-ci.plugins:git-client (2.7.3)

org.jenkins-ci.plugins:git-client MAVEN version 2.7.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - org.waveywaves.jenkins.plugins:tekton-client 1.1.0 Source cves: CVE-2025-67640 Source advisor...

org.jenkins-ci.plugins:git (1.6.0-beta-1) potentially affected by CVE-2025-67640 via org.jenkins-ci.plugins:git-client (1.2.0)

org.jenkins-ci.plugins:git-client MAVEN version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - org.jenkins-ci.plugins:git 1.6.0-beta-1 Source cves: CVE-2025-67640 Source advisory:...

org.jenkins-ci.plugins:git (>=3.0.0-beta1, <=3.0.0-beta2) potentially affected by CVE-2025-67640 via org.jenkins-ci.plugins:git-client (2.0.0-beta1)

org.jenkins-ci.plugins:git-client MAVEN version 2.0.0-beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - org.jenkins-ci.plugins:git =3.0.0-beta1, =3.0.0-beta2 Source cves: CVE-2025-67640 Sourc...

org.jenkins-ci.plugins:git (2.1.0) potentially affected by CVE-2025-67640 via org.jenkins-ci.plugins:git-client (1.7.0)

org.jenkins-ci.plugins:git-client MAVEN version 1.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - org.jenkins-ci.plugins:git 2.1.0 Source cves: CVE-2025-67640 Source advisory:...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.4.3), org.jenkins-ci.plugins.workflow:workflow-cps (1.4.3) +8 more potentially affected by CVE-2025-67640 via org.jenkins-ci.plugins:git-client (1.11.1)

org.jenkins-ci.plugins:git-client MAVEN version 1.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 1.4.3 -...

org.jenkins-ci.plugins:git (>=2.5.0-beta2, <=2.5.0-beta3) potentially affected by CVE-2025-67640 via org.jenkins-ci.plugins:git-client (1.20.0-beta2)

org.jenkins-ci.plugins:git-client MAVEN version 1.20.0-beta2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - org.jenkins-ci.plugins:git =2.5.0-beta2, =2.5.0-beta3 Source cves: CVE-2025-67640 Sour...

io.jenkins.blueocean:blueocean (>=1.0.0-b25, <=1.0.1), io.jenkins.blueocean:blueocean-dashboard (>=1.0.0-b25, <=1.0.1) +9 more potentially affected by CVE-2025-67640 via org.jenkins-ci.plugins:git-client (2.3.0)

org.jenkins-ci.plugins:git-client MAVEN version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - io.jenkins.blueocean:blueocean =1.0.0-b25, =1.0.0-b25, =1.0.0-b25, =1.0.0-b25, =1.0.0-b25,...

com.coravy.hudson.plugins.github:github (>=1.9, <=1.13.3), com.elasticbox.jenkins-ci.plugins:elasticbox (>=4.0.9, <=4.1.0) +5 more potentially affected by CVE-2025-67640 via org.jenkins-ci.plugins:git-client (1.4.4)

org.jenkins-ci.plugins:git-client MAVEN version 1.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - com.coravy.hudson.plugins.github:github =1.9, =4.0.9, =0.9.14, =1.8, =1.4.0, =1.4.2 Source...

org.jenkins-ci.plugins:assembla-merge-request-builder (>=1.1.1, <=1.1.13), org.jenkins-ci.plugins:bitbucket-pullrequest-builder (>=1.4.6, <=1.4.28) +5 more potentially affected by CVE-2025-67640 via org.jenkins-ci.plugins:git-client (1.10.1)

org.jenkins-ci.plugins:git-client MAVEN version 1.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - org.jenkins-ci.plugins:assembla-merge-request-builder =1.1.1, =1.4.6, =1.13-1, =2.2.3, =1.0....

au.com.versent.jenkins.plugins:ignore-committer-strategy (>=37.v0d3157c4a_ef8, <=63.v7e87d06b_a_30c), com.coravy.hudson.plugins.github:github (>=1.41.0, <=1.47.0) +40 more potentially affected by CVE-2025-67640 via org.jenkins-ci.plugins:git-client (>=6.1.0, <=6.4.0)

org.jenkins-ci.plugins:git-client MAVEN version =6.1.0, =37.v0d3157c4aef8, =1.41.0, =61.vf6d8f6f5ed02, =1.1.0.825.v30618768da42, =1.27.17, =1.27.17, =1.27.17, =1.27.17, =1.27.17, =1.27.17, =1.27.17, =1.0.0, =3.2083.vd36f32376929, =530.v38d502df428f, =634.v371dc6d978a3, =679.v74133dab435a and more...

io.jenkins.plugins:hugo (0.1.3), org.jenkins-ci.plugins:git (>=3.7.0, <=3.9.3) +3 more potentially affected by CVE-2025-67640 via org.jenkins-ci.plugins:git-client (2.7.0)

org.jenkins-ci.plugins:git-client MAVEN version 2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - io.jenkins.plugins:hugo 0.1.3 - org.jenkins-ci.plugins:git =3.7.0, =0.0.7, =1.6, =0.9.7,...

org.jenkins-ci.plugins:gerrit-code-review (>=0.3.7, <=0.7.0) potentially affected by CVE-2025-67640 via org.jenkins-ci.plugins:git-client (2.7.1)

org.jenkins-ci.plugins:git-client MAVEN version 2.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - org.jenkins-ci.plugins:gerrit-code-review =0.3.7, =0.7.0 Source cves: CVE-2025-67640 Source...

org.jenkins-ci.plugins:templating-engine (>=2.3, <=2.5.3) potentially affected by CVE-2025-67640 via org.jenkins-ci.plugins:git-client (3.2.1)

org.jenkins-ci.plugins:git-client MAVEN version 3.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - org.jenkins-ci.plugins:templating-engine =2.3, =2.5.3 Source cves: CVE-2025-67640 Source...