org.jenkins-ci.plugins:github-autostatus (>=4.204.vf74143795d5f, <=4.259.ve0468d8b_e5f1) potentially affected by CVE-2026-42522 via org.jenkins-ci.plugins:github-branch-source (1967.vdea_d580c1a_b_a)

org.jenkins-ci.plugins:github-branch-source MAVEN version 1967.vdead580c1aba is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - org.jenkins-ci.plugins:github-autostatus =4.204.vf74143795d5...

GHSA-GH4J-GQV2-49F6 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, opensearch-dashboards, saf, prism, renovate, langfuse, tileserver-gl...

CVE-2026-44425

creationtimestamp| type| source ---|---|--- 2026-04-29 23:48:30+00:00| published-proof-of-concept| https://github.com/shellhub-io/shellhub/security/advisories/GHSA-47r2-v3x6-wff9...

MAL-2026-3193 Malicious code in rblx-http (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b0078ee9b9f6221ab242c9f2442f86670e320a5058c306590b5e5b458066e414 During installation package downloads and runs a malicious executable. Likely continuation of 2026-03-rowrap. The campaign is built over a malicious Roblox API...

SAP-Related npm Packages Compromised in Credential-Stealing Supply Chain Attack

Cybersecurity researchers are sounding the alarm about a new supply chain attack campaign targeting SAP-related npm Packages with credential-stealing malware. According to reports from Aikido Security, Onapsis, OX Security, SafeDep, Socket, StepSecurity, and Google-owned Wiz, the campaign – calli...

com.barchart.jenkins:maven-release-cascade (>=1.0.0, <=1.0.2), com.base2services.jenkins:github-sqs-plugin (>=1.0, <=1.5) +30 more potentially affected by CVE-2026-42523 via com.coravy.hudson.plugins.github:github (>=1.2, <=1.45.0)

com.coravy.hudson.plugins.github:github MAVEN version =1.2, =1.0.0, =1.0, =4.0.9, =1.0-alpha-1, =1.27.17, =1.0-alpha-1, =1.0-alpha-1, =1.0.0-b15, =1.0.0-b15, =1.0-alpha-8, =1.0-alpha-4, =0.1-preview-4, =1.0-alpha-1, =634.v371dc6d978a3, =15.vf18c6a886ca4, =18.vfb2ea4ece82b and more Source cves:...

com.barchart.jenkins:maven-release-cascade (>=1.0.0, <=1.0.2), com.base2services.jenkins:github-sqs-plugin (>=1.0, <=1.5) +30 more potentially affected by CVE-2026-42523 via com.coravy.hudson.plugins.github:github (>=1.2, <=1.45.0)

com.coravy.hudson.plugins.github:github MAVEN version =1.2, =1.0.0, =1.0, =4.0.9, =1.0-alpha-1, =1.27.17, =1.0-alpha-1, =1.0-alpha-1, =1.0.0-b15, =1.0.0-b15, =1.0-alpha-8, =1.0-alpha-4, =0.1-preview-4, =1.0-alpha-1, =634.v371dc6d978a3, =15.vf18c6a886ca4, =18.vfb2ea4ece82b and more Source cves:...

Jenkins GitHub Branch Source Plugin: Missing permissions check allows attackers to perform a connection test

Jenkins GitHub Branch Source Plugin versions 1967.vdead580c1aba and earlier do not perform a permission check in a method implementing form validation. This allows attackers with Overall/Read permission to connect to an attacker-specified URL with attacker-specified GitHub App credentials. GitHub...

org.jenkins-ci.plugins:github-organization-folder (>=1.0-beta-1, <=1.2) potentially affected by CVE-2026-42522 via org.jenkins-ci.plugins:github-branch-source (1.3)

org.jenkins-ci.plugins:github-branch-source MAVEN version 1.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - org.jenkins-ci.plugins:github-organization-folder =1.0-beta-1, =1.2 Source...

org.jenkins-ci.plugins:github-organization-folder (>=1.3, <=1.4) potentially affected by CVE-2026-42522 via org.jenkins-ci.plugins:github-branch-source (1.5)

org.jenkins-ci.plugins:github-branch-source MAVEN version 1.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - org.jenkins-ci.plugins:github-organization-folder =1.3, =1.4 Source cves:...

org.jenkins-ci.plugins:coding-webhook (>=1.3.0-alpha.1, <=1.4.3), org.jenkins-ci.plugins:github-oauth (>=0.26, <=0.33) +1 more potentially affected by CVE-2026-42522 via org.jenkins-ci.plugins:github-branch-source (1.9)

org.jenkins-ci.plugins:github-branch-source MAVEN version 1.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - org.jenkins-ci.plugins:coding-webhook =1.3.0-alpha.1, =0.26, =0.33 -...

org.jenkins-ci.plugins:github-organization-folder (1.6-beta-2) potentially affected by CVE-2026-42522 via org.jenkins-ci.plugins:github-branch-source (2.0.0-beta-2)

org.jenkins-ci.plugins:github-branch-source MAVEN version 2.0.0-beta-2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - org.jenkins-ci.plugins:github-organization-folder 1.6-beta-2 Sourc...

org.jenkins-ci.plugins:github-organization-folder (1.6) potentially affected by CVE-2026-42522 via org.jenkins-ci.plugins:github-branch-source (2.0.0)

org.jenkins-ci.plugins:github-branch-source MAVEN version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - org.jenkins-ci.plugins:github-organization-folder 1.6 Source cves:...

io.jenkins.blueocean:blueocean (>=1.0.0-b22, <=1.0.0-b24), io.jenkins.blueocean:blueocean-dashboard (>=1.0.0-b22, <=1.0.0-b24) +6 more potentially affected by CVE-2026-42522 via org.jenkins-ci.plugins:github-branch-source (2.0.1)

org.jenkins-ci.plugins:github-branch-source MAVEN version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - io.jenkins.blueocean:blueocean =1.0.0-b22, =1.0.0-b22, =1.0.0-b22,...

io.jenkins.blueocean:blueocean (1.0.0-b25), io.jenkins.blueocean:blueocean-dashboard (1.0.0-b25) +5 more potentially affected by CVE-2026-42522 via org.jenkins-ci.plugins:github-branch-source (2.0.3)

org.jenkins-ci.plugins:github-branch-source MAVEN version 2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - io.jenkins.blueocean:blueocean 1.0.0-b25 -...

io.jenkins.blueocean:blueocean (>=1.1.0-beta-1, <=1.1.7), io.jenkins.blueocean:blueocean-events (>=1.1.0-beta-1, <=1.1.7) +5 more potentially affected by CVE-2026-42522 via org.jenkins-ci.plugins:github-branch-source (2.0.5)

org.jenkins-ci.plugins:github-branch-source MAVEN version 2.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - io.jenkins.blueocean:blueocean =1.1.0-beta-1, =1.1.0-beta-1, =1.1.0-beta-...

org.jenkins-ci.plugins:disable-github-multibranch-status (>=1.0, <=1.2) potentially affected by CVE-2026-42522 via org.jenkins-ci.plugins:github-branch-source (2.2.0)

org.jenkins-ci.plugins:github-branch-source MAVEN version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - org.jenkins-ci.plugins:disable-github-multibranch-status =1.0, =1.2 Sourc...

org.jenkins-ci.plugins:github-autostatus (>=1.0, <=2.0) potentially affected by CVE-2026-42522 via org.jenkins-ci.plugins:github-branch-source (2.2.3)

org.jenkins-ci.plugins:github-branch-source MAVEN version 2.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - org.jenkins-ci.plugins:github-autostatus =1.0, =2.0 Source cves:...

org.jenkins-ci.plugins:github-pr-comment-build (2.1) potentially affected by CVE-2026-42522 via org.jenkins-ci.plugins:github-branch-source (2.3.0)

org.jenkins-ci.plugins:github-branch-source MAVEN version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - org.jenkins-ci.plugins:github-pr-comment-build 2.1 Source cves:...

org.jenkins-ci.plugins:templating-engine (>=1.6, <=2.2.1.1) potentially affected by CVE-2026-42522 via org.jenkins-ci.plugins:github-branch-source (2.5.1)

org.jenkins-ci.plugins:github-branch-source MAVEN version 2.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - org.jenkins-ci.plugins:templating-engine =1.6, =2.2.1.1 Source cves:...