org.jenkins-ci.plugins:git (2.3.1), org.jenkins-ci.plugins:gitlab-plugin (>=1.1.6, <=1.1.28) +2 more potentially affected by CVE-2026-57282 via org.jenkins-ci.plugins:git-client (1.12.0)

org.jenkins-ci.plugins:git-client MAVEN version 1.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - org.jenkins-ci.plugins:git 2.3.1 - org.jenkins-ci.plugins:gitlab-plugin =1.1.6, =2.2.0,...

com.coravy.hudson.plugins.github:github (>=1.14.0-alpha-1, <=1.27.0), com.elasticbox.jenkins-ci.plugins:elasticbox (>=4.1.1, <=4.1.6) +12 more potentially affected by CVE-2026-57282 via org.jenkins-ci.plugins:git-client (1.18.0)

org.jenkins-ci.plugins:git-client MAVEN version 1.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - com.coravy.hudson.plugins.github:github =1.14.0-alpha-1, =4.1.1, =1.0, =1.1.0, =1.33.2, =1.0...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.4.3), org.jenkins-ci.plugins.workflow:workflow-cps (1.4.3) +8 more potentially affected by CVE-2026-57282 via org.jenkins-ci.plugins:git-client (1.11.1)

org.jenkins-ci.plugins:git-client MAVEN version 1.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 1.4.3 -...

com.qasymphony.ci.jenkins:qtest (>=1.3.0, <=1.4.6), org.biouno:uno-choice (>=1.5-alpha-1, <=1.5.3) +16 more potentially affected by CVE-2026-57282 via org.jenkins-ci.plugins:git-client (1.11.0)

org.jenkins-ci.plugins:git-client MAVEN version 1.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - com.qasymphony.ci.jenkins:qtest =1.3.0, =1.5-alpha-1, =1.0-alpha-1, =1.0-alpha-1,...

org.jenkins-ci.plugins:azure-app-service (>=0.1, <=0.4.2), org.jenkins-ci.plugins:azure-function (>=0.1.0, <=0.3.0) potentially affected by CVE-2026-57282 via org.jenkins-ci.plugins:git-client (2.4.6)

org.jenkins-ci.plugins:git-client MAVEN version 2.4.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - org.jenkins-ci.plugins:azure-app-service =0.1, =0.1.0, =0.3.0 Source cves: CVE-2026-57282...

io.fabric8.jenkins.plugins:openshift-sync (>=y, <=1.0.45), org.jenkins-ci.plugins:git (3.0.0) +3 more potentially affected by CVE-2026-57282 via org.jenkins-ci.plugins:git-client (2.0.0)

org.jenkins-ci.plugins:git-client MAVEN version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - io.fabric8.jenkins.plugins:openshift-sync =y, =0.25, =0.5, =0.6 Source cves: CVE-2026-57282...

org.jenkins-ci.plugins:git (>=3.0.0-beta1, <=3.0.0-beta2) potentially affected by CVE-2026-57282 via org.jenkins-ci.plugins:git-client (2.0.0-beta1)

org.jenkins-ci.plugins:git-client MAVEN version 2.0.0-beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - org.jenkins-ci.plugins:git =3.0.0-beta1, =3.0.0-beta2 Source cves: CVE-2026-57282 Sourc...

org.jenkins-ci.plugins:git (>=2.5.0-beta2, <=2.5.0-beta3) potentially affected by CVE-2026-57282 via org.jenkins-ci.plugins:git-client (1.20.0-beta2)

org.jenkins-ci.plugins:git-client MAVEN version 1.20.0-beta2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - org.jenkins-ci.plugins:git =2.5.0-beta2, =2.5.0-beta3 Source cves: CVE-2026-57282 Sour...

com.testinium.jenkins:testinium (1.0), net.praqma:memory-map (>=2.2.0, <=2.2.1) +13 more potentially affected by CVE-2026-57282 via org.jenkins-ci.plugins:git-client (1.19.7)

org.jenkins-ci.plugins:git-client MAVEN version 1.19.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - com.testinium.jenkins:testinium 1.0 - net.praqma:memory-map =2.2.0, =2.4, =2.3, =2.0.5, =1.5...

io.jenkins.blueocean:blueocean-git-pipeline (>=1.2.0-beta-5, <=1.2.4), org.jenkins-ci.plugins:bitbucket-approval-filter (1.0.0) +16 more potentially affected by CVE-2026-57282 via org.jenkins-ci.plugins:git-client (2.5.0)

org.jenkins-ci.plugins:git-client MAVEN version 2.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - io.jenkins.blueocean:blueocean-git-pipeline =1.2.0-beta-5, =2.2.3, =0.1.1, =3.5.0, =1.0.1,...

de.wellnerbou.jenkins:git-changelog (>=3.0, <=3.31), org.jenkins-ci.plugins:bitbucket (>=1.1.2, <=1.1.13) +4 more potentially affected by CVE-2026-57282 via org.jenkins-ci.plugins:git-client (1.16.1)

org.jenkins-ci.plugins:git-client MAVEN version 1.16.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - de.wellnerbou.jenkins:git-changelog =3.0, =1.1.2, =1.3, =0.1, =1.0.0, =2.5 Source cves:...

Jenkins Git Parameter Plugin has a missing permission check that allows listing SCM branch and tag names

Jenkins Git Parameter Plugin 462.vdcf3df2ed2ca and earlier does not perform a permission check in an HTTP endpoint that populates the list of values for Git parameters by querying the SCM configured on a job, using the SCM credentials configured in Jenkins. This allows attackers with Item/Read...

com.barchart.jenkins:maven-release-cascade (>=1.1.0, <=1.3.2), org.jenkins-ci.plugins:git (1.3.0) potentially affected by CVE-2026-57282 via org.jenkins-ci.plugins:git-client (1.0.4)

org.jenkins-ci.plugins:git-client MAVEN version 1.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - com.barchart.jenkins:maven-release-cascade =1.1.0, =1.3.2 - org.jenkins-ci.plugins:git 1.3.0...

org.jenkins-ci.plugins:git (1.6.0-beta-1) potentially affected by CVE-2026-57282 via org.jenkins-ci.plugins:git-client (1.2.0)

org.jenkins-ci.plugins:git-client MAVEN version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - org.jenkins-ci.plugins:git 1.6.0-beta-1 Source cves: CVE-2026-57282 Source advisory:...

io.jenkins.blueocean:blueocean (>=1.27.17, <=1.27.18), io.jenkins.blueocean:blueocean-bitbucket-pipeline (>=1.27.17, <=1.27.18) +5 more potentially affected by CVE-2026-57285 via org.jenkins-ci.plugins:github-branch-source (1807.v50351eb_7dd13)

org.jenkins-ci.plugins:github-branch-source MAVEN version 1807.v50351eb7dd13 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - io.jenkins.blueocean:blueocean =1.27.17, =1.27.17, =1.27.17,...

io.jenkins.blueocean:blueocean (1.0.0-b25), io.jenkins.blueocean:blueocean-dashboard (1.0.0-b25) +5 more potentially affected by CVE-2026-57285 via org.jenkins-ci.plugins:github-branch-source (2.0.3)

org.jenkins-ci.plugins:github-branch-source MAVEN version 2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - io.jenkins.blueocean:blueocean 1.0.0-b25 -...

io.jenkins.blueocean:blueocean (1.0.0-b19-beta-1), io.jenkins.blueocean:blueocean-dashboard (1.0.0-b19-beta-1) +5 more potentially affected by CVE-2026-57285 via org.jenkins-ci.plugins:github-branch-source (2.0.1-beta-2)

org.jenkins-ci.plugins:github-branch-source MAVEN version 2.0.1-beta-2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - io.jenkins.blueocean:blueocean 1.0.0-b19-beta-1 -...

io.jenkins.blueocean:blueocean (>=1.0.0-b20-beta-1, <=1.0.0-b21-beta-1), io.jenkins.blueocean:blueocean-dashboard (>=1.0.0-b20-beta-1, <=1.0.0-b21-beta-1) +5 more potentially affected by CVE-2026-57285 via org.jenkins-ci.plugins:github-branch-source (2.0.1-beta-4)

org.jenkins-ci.plugins:github-branch-source MAVEN version 2.0.1-beta-4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - io.jenkins.blueocean:blueocean =1.0.0-b20-beta-1, =1.0.0-b20-beta-...

com.groupon.jenkins-ci.plugins:dotci (>=1.1.0, <=2.27.0), com.groupon.jenkins-ci.plugins:dotci-dockerpublish (>=1.0.0, <=1.0.3) +8 more potentially affected by CVE-2026-57282 via org.jenkins-ci.plugins:git-client (1.6.3)

org.jenkins-ci.plugins:git-client MAVEN version 1.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - com.groupon.jenkins-ci.plugins:dotci =1.1.0, =1.0.0, =1.0.1, =1.1.3, =1.7.2, =1.1.0, =1.0.0,...

Jenkins Git client Plugin has an OS command injection vulnerability on agents

Jenkins Git client Plugin 6.6.0 and earlier does not correctly escape the workspace directory name when it is embedded into the SSH wrapper script generated by the "Manually provided keys" Git Host Key Verification strategy on Unix agents. This allows attackers able to control the name of a build...