org.jenkins-ci.plugins:github-organization-folder (1.6-beta-1), org.jenkins-ci.plugins:pipeline-github-lib (1.0-beta-1) potentially affected by CVE-2026-57285 via org.jenkins-ci.plugins:github-branch-source (2.0.0-beta-1)

org.jenkins-ci.plugins:github-branch-source MAVEN version 2.0.0-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - org.jenkins-ci.plugins:github-organization-folder 1.6-beta-1 -...

org.jenkins-ci.plugins:github-autostatus (>=1.0, <=2.0) potentially affected by CVE-2026-57285 via org.jenkins-ci.plugins:github-branch-source (2.2.3)

org.jenkins-ci.plugins:github-branch-source MAVEN version 2.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - org.jenkins-ci.plugins:github-autostatus =1.0, =2.0 Source cves:...

org.jenkins-ci.plugins:github-organization-folder (1.6) potentially affected by CVE-2026-57285 via org.jenkins-ci.plugins:github-branch-source (2.0.0)

org.jenkins-ci.plugins:github-branch-source MAVEN version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - org.jenkins-ci.plugins:github-organization-folder 1.6 Source cves:...

io.jenkins.blueocean:blueocean (>=1.0.0-rc1, <=1.0.1), io.jenkins.blueocean:blueocean-dashboard (>=1.0.0-rc1, <=1.0.1) +6 more potentially affected by CVE-2026-57285 via org.jenkins-ci.plugins:github-branch-source (2.0.4)

org.jenkins-ci.plugins:github-branch-source MAVEN version 2.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - io.jenkins.blueocean:blueocean =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1,...

io.jenkins.blueocean:blueocean (>=1.27.17, <=1.27.18), io.jenkins.blueocean:blueocean-bitbucket-pipeline (>=1.27.17, <=1.27.18) +5 more potentially affected by CVE-2026-57285 via org.jenkins-ci.plugins:github-branch-source (1807.v50351eb_7dd13)

org.jenkins-ci.plugins:github-branch-source MAVEN version 1807.v50351eb7dd13 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - io.jenkins.blueocean:blueocean =1.27.17, =1.27.17, =1.27.17,...

io.jenkins.plugins:github-checks (>=676.v48c732b_52951, <=679.v74133da_b_435a) potentially affected by CVE-2026-57285 via org.jenkins-ci.plugins:github-branch-source (1917.v9ee8a_39b_3d0d)

org.jenkins-ci.plugins:github-branch-source MAVEN version 1917.v9ee8a39b3d0d is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - io.jenkins.plugins:github-checks =676.v48c732b52951,...

org.jenkins-ci.plugins:github-autostatus (>=4.204.vf74143795d5f, <=4.259.ve0468d8b_e5f1) potentially affected by CVE-2026-57285 via org.jenkins-ci.plugins:github-branch-source (1967.vdea_d580c1a_b_a)

org.jenkins-ci.plugins:github-branch-source MAVEN version 1967.vdead580c1aba is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - org.jenkins-ci.plugins:github-autostatus =4.204.vf74143795d5...

io.jenkins.blueocean:blueocean (>=1.0.0-b22, <=1.0.0-b24), io.jenkins.blueocean:blueocean-dashboard (>=1.0.0-b22, <=1.0.0-b24) +6 more potentially affected by CVE-2026-57285 via org.jenkins-ci.plugins:github-branch-source (2.0.1)

org.jenkins-ci.plugins:github-branch-source MAVEN version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - io.jenkins.blueocean:blueocean =1.0.0-b22, =1.0.0-b22, =1.0.0-b22,...

org.jenkins-ci.plugins:github-autostatus (>=4.204.vf74143795d5f, <=4.259.ve0468d8b_e5f1) potentially affected by CVE-2026-57285 via org.jenkins-ci.plugins:github-branch-source (1967.vdea_d580c1a_b_a)

org.jenkins-ci.plugins:github-branch-source MAVEN version 1967.vdead580c1aba is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - org.jenkins-ci.plugins:github-autostatus =4.204.vf74143795d5...

org.jenkins-ci.plugins:github-pr-comment-build (>=1.0, <=1.1) potentially affected by CVE-2026-57285 via org.jenkins-ci.plugins:github-branch-source (1.10)

org.jenkins-ci.plugins:github-branch-source MAVEN version 1.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - org.jenkins-ci.plugins:github-pr-comment-build =1.0, =1.1 Source cves:...

io.jenkins.blueocean:blueocean (1.0.0-b25), io.jenkins.blueocean:blueocean-dashboard (1.0.0-b25) +5 more potentially affected by CVE-2026-57285 via org.jenkins-ci.plugins:github-branch-source (2.0.3)

org.jenkins-ci.plugins:github-branch-source MAVEN version 2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - io.jenkins.blueocean:blueocean 1.0.0-b25 -...

org.jenkins-ci.plugins:coding-webhook (>=1.3.0-alpha.1, <=1.4.3), org.jenkins-ci.plugins:github-oauth (>=0.26, <=0.33) +1 more potentially affected by CVE-2026-57285 via org.jenkins-ci.plugins:github-branch-source (1.9)

org.jenkins-ci.plugins:github-branch-source MAVEN version 1.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - org.jenkins-ci.plugins:coding-webhook =1.3.0-alpha.1, =0.26, =0.33 -...

io.jenkins.plugins:mergify (>=1.83.v5b_ff0e55cd2d, <=1.95.v8b_31e80441fb), org.jenkins-ci.plugins:github-oauth (>=683.v04a_a_b_e9d7e07, <=685.v53b_070455063) potentially affected by CVE-2026-57285 via org.jenkins-ci.plugins:github-branch-source (1824.v046257273408)

org.jenkins-ci.plugins:github-branch-source MAVEN version 1824.v046257273408 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - io.jenkins.plugins:mergify =1.83.v5bff0e55cd2d,...

org.jenkins-ci.plugins:github-oauth (611.v70d151e60ec4) potentially affected by CVE-2026-57285 via org.jenkins-ci.plugins:github-branch-source (1793.v1831e9c68d77)

org.jenkins-ci.plugins:github-branch-source MAVEN version 1793.v1831e9c68d77 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - org.jenkins-ci.plugins:github-oauth 611.v70d151e60ec4 Source...

org.jenkins-ci.plugins:github-oauth (>=647.v44f5236c308d, <=651.v135e939e8b_60) potentially affected by CVE-2026-57285 via org.jenkins-ci.plugins:github-branch-source (1810.v913311241fa_9)

org.jenkins-ci.plugins:github-branch-source MAVEN version 1810.v913311241fa9 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - org.jenkins-ci.plugins:github-oauth =647.v44f5236c308d,...

org.jenkins-ci.plugins:github-oauth (621.v33b_4394dda_4d) potentially affected by CVE-2026-57285 via org.jenkins-ci.plugins:github-branch-source (1797.v86fdb_4d57d43)

org.jenkins-ci.plugins:github-branch-source MAVEN version 1797.v86fdb4d57d43 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - org.jenkins-ci.plugins:github-oauth 621.v33b4394dda4d Source...

CVE-2026-57285

A missing permission check in Jenkins GitHub Branch Source Plugin 1967.1969.v205fd594c821 and earlier allows attackers with Overall/Read permission to obtain the URLs of GitHub Enterprise servers configured in the global plugin configuration...

CVE-2026-57285

A missing permission check in Jenkins GitHub Branch Source Plugin 1967.1969.v205fd594c821 and earlier allows attackers with Overall/Read permission to obtain the URLs of GitHub Enterprise servers configured in the global plugin configuration...

CVE-2026-57285

A missing permission check in Jenkins GitHub Branch Source Plugin 1967.1969.v205fd594c821 and earlier allows attackers with Overall/Read permission to obtain the URLs of GitHub Enterprise servers configured in the global plugin configuration...

CVE-2026-57285

The Jenkins GitHub Branch Source Plugin (versions 1967.1969.v205fd594c821 and earlier) contains a missing permission check in an HTTP endpoint that lists GitHub API endpoints. This allows attackers with Overall/Read permission to enumerate and obtain the URLs of GitHub Enterprise servers configur...