CVE-2025-68701

CVE-2025-68701 affects Jervis (Job DSL/Jenkins shared libraries). Prior to version 2.2, Jervis derives the AES IV deterministically from a passphrase, enabling cryptographic weaknesses as described in multiple sources. The vulnerability is fixed in 2.2; remediation is to upgrade to Jervis 2.2 or ...