io.jenkins.blueocean:blueocean-git-pipeline (>=1.2.0-beta-5, <=1.2.4), org.jenkins-ci.plugins:gerrit-code-review (>=0.1.1, <=0.7.0) +3 more potentially affected by CVE-2020-2136 via org.jenkins-ci.plugins:git (3.5.1)

org.jenkins-ci.plugins:git MAVEN version 3.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - io.jenkins.blueocean:blueocean-git-pipeline =1.2.0-beta-5, =0.1.1, =1.0, =3.0.0-beta.2, =3.1.2 Source cves:...

io.jenkins.plugins:sonarqube-generic-coverage (1.0), org.jenkins-ci.plugins:github-autostatus (>=4.204.vf74143795d5f, <=4.270.v17dcca_3c8209) potentially affected by CVE-2020-2106 via io.jenkins.plugins:code-coverage-api (>=1.0.11, <=1.1.0)

io.jenkins.plugins:code-coverage-api MAVEN version =1.0.11, =4.204.vf74143795d5f, =4.270.v17dcca3c8209 Source cves: CVE-2020-2106 Source advisory: GHSA-XG77-XQHQ-CRPR...

io.jenkins.plugins:sonarqube-generic-coverage (1.0), org.jenkins-ci.plugins:github-autostatus (>=4.204.vf74143795d5f, <=4.270.v17dcca_3c8209) potentially affected by CVE-2020-2106 via io.jenkins.plugins:code-coverage-api (>=1.0.11, <=1.1.0)

io.jenkins.plugins:code-coverage-api MAVEN version =1.0.11, =4.204.vf74143795d5f, =4.270.v17dcca3c8209 Source cves: CVE-2020-2106 Source advisory: OSV:GHSA-XG77-XQHQ-CRPR...

io.jenkins.blueocean:blueocean-git-pipeline (>=1.2.0-beta-5, <=1.2.4), org.jenkins-ci.plugins:gerrit-code-review (>=0.1.1, <=0.7.0) +3 more potentially affected by CVE-2022-30947 via org.jenkins-ci.plugins:git (3.5.1)

org.jenkins-ci.plugins:git MAVEN version 3.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - io.jenkins.blueocean:blueocean-git-pipeline =1.2.0-beta-5, =0.1.1, =1.0, =3.0.0-beta.2, =3.1.2 Source cves:...

com.testinium.jenkins:testinium (1.0), io.jenkins.blueocean:blueocean (>=1.0.0-b22, <=1.2.0-beta-1) +19 more potentially affected by CVE-2019-1003002 via org.jenkinsci.plugins:pipeline-model-definition (>=1.0, <=1.3.2)

org.jenkinsci.plugins:pipeline-model-definition MAVEN version =1.0, =1.0.0-b22, =1.0.0-b22, =1.0.0-b22, =1.0.0-b22, =1.0.0-b22, =1.0.0-b22, =1.0.0-b22, =0.1-preview-1, =2.0.7, =1.0, =1.1.0, =1.0.0, =1.5.5 and more Source cves: CVE-2019-1003002 Source advisory: OSV:GHSA-X6JX-CXG3-MGGH...

com.testinium.jenkins:testinium (1.0), io.jenkins.blueocean:blueocean (>=1.0.0-b15, <=1.2.0-beta-1) +25 more potentially affected by CVE-2022-25174 via org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (>=2.0, <=2.17)

org.jenkins-ci.plugins.workflow:workflow-cps-global-lib MAVEN version =2.0, =1.0.0-b15, =1.0.0-rc2, =1.0.0-rc2, =1.0.0-rc2, =1.0.0-b15, =1.0.0-rc2, =1.0.0-rc2, =2.2.0, =2.0, =2.0.5, =1.0, =1.5, =1.0.0, =2.0.5 and more Source cves: CVE-2022-25174 Source advisory: OSV:GHSA-G9FX-6J5C-GRMW...

com.testinium.jenkins:testinium (1.0), io.jenkins.blueocean:blueocean (>=1.0.0-b15, <=1.2.0-beta-1) +25 more potentially affected by CVE-2022-25178 via org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (>=2.0, <=2.17)

org.jenkins-ci.plugins.workflow:workflow-cps-global-lib MAVEN version =2.0, =1.0.0-b15, =1.0.0-rc2, =1.0.0-rc2, =1.0.0-rc2, =1.0.0-b15, =1.0.0-rc2, =1.0.0-rc2, =2.2.0, =2.0, =2.0.5, =1.0, =1.5, =1.0.0, =2.0.5 and more Source cves: CVE-2022-25178 Source advisory: GHSA-5HFV-MG5X-MV32...

org.jenkins-ci.plugins:github-autostatus (>=1.0, <=2.0), org.jenkins-ci.plugins:xcode-plugin (>=2.0.13, <=2.0.15) +2 more potentially affected by CVE-2022-25180 via org.jenkins-ci.plugins.workflow:workflow-cps (2.36.1)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 2.36.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins:github-autostatus =1.0, =2.0.13, =1.2-beta-4,...

io.jenkins.blueocean:blueocean (>=1.0.0-rc2, <=1.2.0-beta-1), io.jenkins.blueocean:blueocean-dashboard (>=1.0.0-rc2, <=1.0.0) +8 more potentially affected by CVE-2022-25183 via org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (2.7)

org.jenkins-ci.plugins.workflow:workflow-cps-global-lib MAVEN version 2.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps-global-lib and may be impacted: - io.jenkins.blueocean:blueocean =1.0.0-rc2,...

io.jenkins.plugins:sonarqube-generic-coverage (1.0), org.jenkins-ci.plugins:github-autostatus (>=4.204.vf74143795d5f, <=4.270.v17dcca_3c8209) potentially affected by CVE-2021-21677 via io.jenkins.plugins:code-coverage-api (>=1.0.11, <=1.1.0)

io.jenkins.plugins:code-coverage-api MAVEN version =1.0.11, =4.204.vf74143795d5f, =4.270.v17dcca3c8209 Source cves: CVE-2021-21677 Source advisory: MEND:CVE-2021-21677...

io.jenkins.plugins:sonarqube-generic-coverage (1.0), org.jenkins-ci.plugins:github-autostatus (>=4.204.vf74143795d5f, <=4.270.v17dcca_3c8209) potentially affected by CVE-2020-2172 via io.jenkins.plugins:code-coverage-api (>=1.0.11, <=1.1.0)

io.jenkins.plugins:code-coverage-api MAVEN version =1.0.11, =4.204.vf74143795d5f, =4.270.v17dcca3c8209 Source cves: CVE-2020-2172 Source advisory: MEND:CVE-2020-2172...

io.jenkins.plugins:sonarqube-generic-coverage (1.0), org.jenkins-ci.plugins:github-autostatus (>=4.204.vf74143795d5f, <=4.270.v17dcca_3c8209) potentially affected by CVE-2020-2106 via io.jenkins.plugins:code-coverage-api (>=1.0.11, <=1.1.0)

io.jenkins.plugins:code-coverage-api MAVEN version =1.0.11, =4.204.vf74143795d5f, =4.270.v17dcca3c8209 Source cves: CVE-2020-2106 Source advisory: MEND:CVE-2020-2106...