org.jenkins-ci.main:jenkins-test-harness (1.487), org.jenkins-ci.main:jenkins-war (1.487) +3 more potentially affected by CVE-2019-10383 via org.jenkins-ci.main:jenkins-core (1.487)

org.jenkins-ci.main:jenkins-core MAVEN version 1.487 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.487 - org.jenkins-ci.main:jenkins-war 1.487 -...

org.jenkins-ci.main:jenkins-test-harness (1.637), org.jenkins-ci.main:jenkins-war (1.637) +1 more potentially affected by CVE-2019-10383 via org.jenkins-ci.main:jenkins-core (1.637)

org.jenkins-ci.main:jenkins-core MAVEN version 1.637 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.637 - org.jenkins-ci.main:jenkins-war 1.637 -...

com.github.bogdanlivadariu:bootstraped-multi-test-results-report (>=1.0.0, <=1.3.4), org.jenkins-ci.main:jenkins-test-harness (1.616) +2 more potentially affected by CVE-2019-10383 via org.jenkins-ci.main:jenkins-core (1.616)

org.jenkins-ci.main:jenkins-core MAVEN version 1.616 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.github.bogdanlivadariu:bootstraped-multi-test-results-report =1.0.0, =1.3.4 -...

org.jenkins-ci.plugins:git (2.3.1), org.jenkins-ci.plugins:gitlab-plugin (>=1.1.6, <=1.1.28) +2 more potentially affected by CVE-2017-1000242 via org.jenkins-ci.plugins:git-client (1.12.0)

org.jenkins-ci.plugins:git-client MAVEN version 1.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - org.jenkins-ci.plugins:git 2.3.1 - org.jenkins-ci.plugins:gitlab-plugin =1.1.6, =2.2.0,...

com.groupon.jenkins-ci.plugins:dotci (>=1.1.0, <=2.27.0), com.groupon.jenkins-ci.plugins:dotci-dockerpublish (>=1.0.0, <=1.0.3) +8 more potentially affected by CVE-2017-1000242 via org.jenkins-ci.plugins:git-client (1.6.3)

org.jenkins-ci.plugins:git-client MAVEN version 1.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - com.groupon.jenkins-ci.plugins:dotci =1.1.0, =1.0.0, =1.0.1, =1.1.3, =1.7.2, =1.1.0, =1.0.0,...

Multiple SCM plugins can check out from the controller file system

SCMs support a number of different URL schemes, including local file system paths e.g. using file: URLs. Historically in Jenkins, only agents checked out from SCM, and if multiple projects share the same agent, there is no expected isolation between builds besides using different workspaces unles...

org.jenkins-ci.main:jenkins-test-harness (1.441), org.jenkins-ci.main:jenkins-war (1.441) +3 more potentially affected by CVE-2018-1000406 via org.jenkins-ci.main:jenkins-core (1.441)

org.jenkins-ci.main:jenkins-core MAVEN version 1.441 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.441 - org.jenkins-ci.main:jenkins-war 1.441 -...

io.jenkins.plugins:aws-lambda-cloud (>=0.3, <=0.4), org.jenkins-ci.main:jenkins-test-harness (1.635) +2 more potentially affected by CVE-2018-1000406 via org.jenkins-ci.main:jenkins-core (1.635)

org.jenkins-ci.main:jenkins-core MAVEN version 1.635 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - io.jenkins.plugins:aws-lambda-cloud =0.3, =0.4 - org.jenkins-ci.main:jenkins-test-harness 1.635...

com.joelj.jenkins:ez-templates (1.0.5), org.jenkins-ci.main:jenkins-test-harness (1.574) +6 more potentially affected by CVE-2018-1000406 via org.jenkins-ci.main:jenkins-core (1.574)

org.jenkins-ci.main:jenkins-core MAVEN version 1.574 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.joelj.jenkins:ez-templates 1.0.5 - org.jenkins-ci.main:jenkins-test-harness 1.574 -...

org.jenkins-ci.main:jenkins-test-harness (1.552), org.jenkins-ci.main:jenkins-war (1.552) +1 more potentially affected by CVE-2018-1000406 via org.jenkins-ci.main:jenkins-core (1.552)

org.jenkins-ci.main:jenkins-core MAVEN version 1.552 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.552 - org.jenkins-ci.main:jenkins-war 1.552 -...

com.amazonaws:codedeploy (>=1.17, <=1.23), hudson.plugins.octopusdeploy:octopusdeploy (>=1.3.0, <=1.4.0) +6 more potentially affected by CVE-2018-1000406 via org.jenkins-ci.main:jenkins-core (1.612)

org.jenkins-ci.main:jenkins-core MAVEN version 1.612 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.amazonaws:codedeploy =1.17, =1.3.0, =2.7.0, =1.0, =1.4 -...

com.cloudcoreo.plugins:cloudcoreo-deploytime (>=0.1.0, <=0.2.3), com.spcow.plugins:winrm-client (1.0) +50 more potentially affected by CVE-2018-1000406 via org.jenkins-ci.main:jenkins-core (1.651.3)

org.jenkins-ci.main:jenkins-core MAVEN version 1.651.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.cloudcoreo.plugins:cloudcoreo-deploytime =0.1.0, =0.10.0, =1.2, =1.4.2, =1.5.0, =1.0, =1....

com.piketec.jenkins.plugins:piketec-tpt (6.3), org.datadog.jenkins.plugins:datadog (>=1.1.2, <=1.2.0) +4 more potentially affected by CVE-2018-1000406 via org.jenkins-ci.main:jenkins-core (1.632)

org.jenkins-ci.main:jenkins-core MAVEN version 1.632 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.piketec.jenkins.plugins:piketec-tpt 6.3 - org.datadog.jenkins.plugins:datadog =1.1.2, =1.0,...

org.bravo5.jenkins.plugins:vertx (>=1.0.0, <=1.0.1), org.jenkins-ci.main:jenkins-test-harness (1.482) +4 more potentially affected by CVE-2018-1000406 via org.jenkins-ci.main:jenkins-core (1.482)

org.jenkins-ci.main:jenkins-core MAVEN version 1.482 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.bravo5.jenkins.plugins:vertx =1.0.0, =1.0.1 - org.jenkins-ci.main:jenkins-test-harness 1.48...

com.amazonaws:aws-codepipeline (>=0.9, <=0.45), com.tinfoilsecurity.plugins:tinfoil-scan (1.4) +5 more potentially affected by CVE-2018-1000406 via org.jenkins-ci.main:jenkins-core (1.479)

org.jenkins-ci.main:jenkins-core MAVEN version 1.479 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.amazonaws:aws-codepipeline =0.9, =0.45 - com.tinfoilsecurity.plugins:tinfoil-scan 1.4 -...

com.antelink.reporter.jenkins.plugin:antepediareporter-ci-plugin (>=1.7, <=1.8), org.jenkins-ci.main:jenkins-test-harness (1.536) +3 more potentially affected by CVE-2018-1000406 via org.jenkins-ci.main:jenkins-core (1.536)

org.jenkins-ci.main:jenkins-core MAVEN version 1.536 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.antelink.reporter.jenkins.plugin:antepediareporter-ci-plugin =1.7, =1.1, =1.2 Source cves:...

com.thalesgroup.jenkins-ci.plugins:cppcheck (0.15), com.thalesgroup.jenkins-ci.plugins:xunit (1.16) +46 more potentially affected by CVE-2017-2613 via org.jenkins-ci.main:jenkins-core (1.398)

org.jenkins-ci.main:jenkins-core MAVEN version 1.398 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.thalesgroup.jenkins-ci.plugins:cppcheck 0.15 - com.thalesgroup.jenkins-ci.plugins:xunit 1.1...

com.amazonaws:codedeploy (>=1.17, <=1.23), hudson.plugins.octopusdeploy:octopusdeploy (>=1.3.0, <=1.4.0) +6 more potentially affected by CVE-2017-2613 via org.jenkins-ci.main:jenkins-core (1.612)

org.jenkins-ci.main:jenkins-core MAVEN version 1.612 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.amazonaws:codedeploy =1.17, =1.3.0, =2.7.0, =1.0, =1.4 -...

org.jenkins-ci.main:jenkins-test-harness (1.591), org.jenkins-ci.main:jenkins-war (1.591) +1 more potentially affected by CVE-2017-2613 via org.jenkins-ci.main:jenkins-core (1.591)

org.jenkins-ci.main:jenkins-core MAVEN version 1.591 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.591 - org.jenkins-ci.main:jenkins-war 1.591 -...

org.jenkins-ci.main:jenkins-test-harness (1.594), org.jenkins-ci.main:jenkins-war (1.594) +2 more potentially affected by CVE-2017-2613 via org.jenkins-ci.main:jenkins-core (1.594)

org.jenkins-ci.main:jenkins-core MAVEN version 1.594 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.594 - org.jenkins-ci.main:jenkins-war 1.594 -...