org.jenkins-ci.plugins:github-oauth (>=647.v44f5236c308d, <=651.v135e939e8b_60) potentially affected by CVE-2026-57285 via org.jenkins-ci.plugins:github-branch-source (1810.v913311241fa_9)

org.jenkins-ci.plugins:github-branch-source MAVEN version 1810.v913311241fa9 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - org.jenkins-ci.plugins:github-oauth =647.v44f5236c308d,...

io.jenkins.blueocean:blueocean (>=1.0.0-rc1, <=1.0.1), io.jenkins.blueocean:blueocean-dashboard (>=1.0.0-rc1, <=1.0.1) +6 more potentially affected by CVE-2026-57285 via org.jenkins-ci.plugins:github-branch-source (2.0.4)

org.jenkins-ci.plugins:github-branch-source MAVEN version 2.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - io.jenkins.blueocean:blueocean =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1,...

io.jenkins.blueocean:blueocean (>=1.0-alpha-3, <=1.0.0-b21), io.jenkins.blueocean:blueocean-dashboard (>=1.0-alpha-3, <=1.0.0-b21) +6 more potentially affected by CVE-2026-57285 via org.jenkins-ci.plugins:github-branch-source (1.8.1)

org.jenkins-ci.plugins:github-branch-source MAVEN version 1.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - io.jenkins.blueocean:blueocean =1.0-alpha-3, =1.0-alpha-3, =1.0-alpha-3,...

org.jenkins-ci.plugins:github-autostatus (>=4.204.vf74143795d5f, <=4.259.ve0468d8b_e5f1) potentially affected by CVE-2026-57285 via org.jenkins-ci.plugins:github-branch-source (1967.vdea_d580c1a_b_a)

org.jenkins-ci.plugins:github-branch-source MAVEN version 1967.vdead580c1aba is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - org.jenkins-ci.plugins:github-autostatus =4.204.vf74143795d5...

org.jenkins-ci.plugins:coding-webhook (>=1.3.0-alpha.1, <=1.4.3), org.jenkins-ci.plugins:github-oauth (>=0.26, <=0.33) +1 more potentially affected by CVE-2026-57285 via org.jenkins-ci.plugins:github-branch-source (1.9)

org.jenkins-ci.plugins:github-branch-source MAVEN version 1.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - org.jenkins-ci.plugins:coding-webhook =1.3.0-alpha.1, =0.26, =0.33 -...

org.jenkins-ci.plugins:pipeline-github (2.8-191.cb_1a_07f10b_a_f) potentially affected by CVE-2026-57285 via org.jenkins-ci.plugins:github-branch-source (1910.v4ca_b_2c639cb_0)

org.jenkins-ci.plugins:github-branch-source MAVEN version 1910.v4cab2c639cb0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - org.jenkins-ci.plugins:pipeline-github 2.8-191.cb1a07f10baf...

org.jenkins-ci.plugins:pipeline-githubnotify-step (>=1.0.0, <=1.0.5) potentially affected by CVE-2026-57285 via org.jenkins-ci.plugins:github-branch-source (1.10.1)

org.jenkins-ci.plugins:github-branch-source MAVEN version 1.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - org.jenkins-ci.plugins:pipeline-githubnotify-step =1.0.0, =1.0.5 Source...

org.jenkins-ci.plugins:github-organization-folder (1.6-beta-2) potentially affected by CVE-2026-57285 via org.jenkins-ci.plugins:github-branch-source (2.0.0-beta-2)

org.jenkins-ci.plugins:github-branch-source MAVEN version 2.0.0-beta-2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - org.jenkins-ci.plugins:github-organization-folder 1.6-beta-2 Sourc...

io.jenkins.blueocean:blueocean (1.0.0-b19-beta-1), io.jenkins.blueocean:blueocean-dashboard (1.0.0-b19-beta-1) +5 more potentially affected by CVE-2026-57285 via org.jenkins-ci.plugins:github-branch-source (2.0.1-beta-2)

org.jenkins-ci.plugins:github-branch-source MAVEN version 2.0.1-beta-2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - io.jenkins.blueocean:blueocean 1.0.0-b19-beta-1 -...

io.jenkins.plugins:mergify (>=1.83.v5b_ff0e55cd2d, <=1.95.v8b_31e80441fb), org.jenkins-ci.plugins:github-oauth (>=683.v04a_a_b_e9d7e07, <=685.v53b_070455063) potentially affected by CVE-2026-57285 via org.jenkins-ci.plugins:github-branch-source (1824.v046257273408)

org.jenkins-ci.plugins:github-branch-source MAVEN version 1824.v046257273408 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - io.jenkins.plugins:mergify =1.83.v5bff0e55cd2d,...

io.jenkins.blueocean:blueocean (>=1.0.0-b20-beta-1, <=1.0.0-b21-beta-1), io.jenkins.blueocean:blueocean-dashboard (>=1.0.0-b20-beta-1, <=1.0.0-b21-beta-1) +5 more potentially affected by CVE-2026-57285 via org.jenkins-ci.plugins:github-branch-source (2.0.1-beta-4)

org.jenkins-ci.plugins:github-branch-source MAVEN version 2.0.1-beta-4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - io.jenkins.blueocean:blueocean =1.0.0-b20-beta-1, =1.0.0-b20-beta-...

org.jenkins-ci.plugins:github-oauth (621.v33b_4394dda_4d) potentially affected by CVE-2026-57285 via org.jenkins-ci.plugins:github-branch-source (1797.v86fdb_4d57d43)

org.jenkins-ci.plugins:github-branch-source MAVEN version 1797.v86fdb4d57d43 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - org.jenkins-ci.plugins:github-oauth 621.v33b4394dda4d Source...

org.jenkins-ci.plugins:github-pr-comment-build (>=1.0, <=1.1) potentially affected by CVE-2026-57285 via org.jenkins-ci.plugins:github-branch-source (1.10)

org.jenkins-ci.plugins:github-branch-source MAVEN version 1.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - org.jenkins-ci.plugins:github-pr-comment-build =1.0, =1.1 Source cves:...

io.jenkins.blueocean:blueocean (>=1.1.0-beta-1, <=1.1.7), io.jenkins.blueocean:blueocean-events (>=1.1.0-beta-1, <=1.1.7) +5 more potentially affected by CVE-2026-57285 via org.jenkins-ci.plugins:github-branch-source (2.0.5)

org.jenkins-ci.plugins:github-branch-source MAVEN version 2.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - io.jenkins.blueocean:blueocean =1.1.0-beta-1, =1.1.0-beta-1, =1.1.0-beta-...

org.jenkins-ci.plugins:github-autostatus (>=1.0, <=2.0) potentially affected by CVE-2026-57285 via org.jenkins-ci.plugins:github-branch-source (2.2.3)

org.jenkins-ci.plugins:github-branch-source MAVEN version 2.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - org.jenkins-ci.plugins:github-autostatus =1.0, =2.0 Source cves:...

Jenkins GitHub Branch Source Plugin has missing permission check that allows enumerating GitHub Enterprise server URLs

Jenkins GitHub Branch Source Plugin 1967.1969.v205fd594c821 and earlier does not perform a permission check in an HTTP endpoint that lists the GitHub API endpoints configured in the global plugin configuration. This allows attackers with Overall/Read permission to obtain the URLs of GitHub...

CVE-2026-57285

A missing permission check in Jenkins GitHub Branch Source Plugin 1967.1969.v205fd594c821 and earlier allows attackers with Overall/Read permission to obtain the URLs of GitHub Enterprise servers configured in the global plugin configuration...

CVE-2026-57285

A missing permission check in Jenkins GitHub Branch Source Plugin 1967.1969.v205fd594c821 and earlier allows attackers with Overall/Read permission to obtain the URLs of GitHub Enterprise servers configured in the global plugin configuration...

io.jenkins.blueocean:blueocean (>=1.0-alpha-1, <=1.27.26), io.jenkins.blueocean:blueocean-bitbucket-pipeline (>=1.27.17, <=1.27.26) +20 more potentially affected by CVE-2026-57285 via org.jenkins-ci.plugins:github-branch-source (>=1.3, <=1967.vdea_d580c1a_b_a)

org.jenkins-ci.plugins:github-branch-source MAVEN version =1.3, =1.0-alpha-1, =1.27.17, =1.0-alpha-1, =1.0-alpha-1, =1.0.0-b15, =1.0.0-b15, =1.0-alpha-8, =1.0-alpha-4, =0.1-preview-4, =1.0-alpha-1, =634.v371dc6d978a3, =1.83.v5bff0e55cd2d, =1.3.0-alpha.1, =1.0, =1.0, =4.259.ve0468d8be5f1 and more...

CVE-2026-57285

A missing permission check in Jenkins GitHub Branch Source Plugin 1967.1969.v205fd594c821 and earlier allows attackers with Overall/Read permission to obtain the URLs of GitHub Enterprise servers configured in the global plugin configuration...