com.synopsys.arc.jenkinsci.plugins:cygwin-process-killer (0.1), org.jenkins-ci.main:jenkins-test-harness (1.528) +6 more potentially affected by CVE-2018-1000192 via org.jenkins-ci.main:jenkins-core (1.528)

org.jenkins-ci.main:jenkins-core MAVEN version 1.528 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.synopsys.arc.jenkinsci.plugins:cygwin-process-killer 0.1 -...

CVE-2018-1000198

A XML external entity processing vulnerability exists in Jenkins Black Duck Hub Plugin 3.1.0 and older in PostBuildScanDescriptor.java that allows attackers with Overall/Read permission to make Jenkins process XML eternal entities in an XML document...