Lucene search
+L

1 matches found

OSV
OSV
added 2026/01/13 7:30 p.m.9 views

CVE-2025-68925 Jervis has a JWT Algorithm Confusion Vulnerability

Jervis is a library for Job DSL plugin scripts and shared Jenkins pipeline libraries. Prior to 2.2, the code doesn't validate that the JWT header specifies "alg":"RS256". This vulnerability is fixed in 2.2...

6.9CVSS7AI score
SaveExploits0References4
Rows per page
Query Builder