CVE-2026-56852 affecting package jx for versions less than 3.10.182-5

CVE-2026-56852 affecting package jx for versions less than 3.10.182-5. A patched version of the package is available...

AZL-93207 CVE-2026-56852 affecting package jx for versions less than 3.10.182-5

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...

CVE-2026-39821 affecting package jx for versions less than 3.10.182-4

CVE-2026-39821 affecting package jx for versions less than 3.10.182-4. A patched version of the package is available...

AZL-87834 CVE-2026-39821 affecting package jx for versions less than 3.10.182-4

The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode"xn--example-.com" incorrectly returns the name "example.com" rather than an error. This behavior can lead to privilege escalation in programs using the idna...

MINI-5V42-4JX4-QC75

Bulletin has no description...

CVE-2025-30204 affecting package jx for versions less than 3.2.236-25

CVE-2025-30204 affecting package jx for versions less than 3.2.236-25. A patched version of the package is available...

CVE-2025-65637 affecting package jx for versions less than 3.2.236-24

CVE-2025-65637 affecting package jx for versions less than 3.2.236-24. A patched version of the package is available...

CVE-2025-58058 affecting package jx for versions less than 3.10.182-3

CVE-2025-58058 affecting package jx for versions less than 3.10.182-3. A patched version of the package is available...

CVE-2025-58058 affecting package jx for versions less than 3.2.236-23

CVE-2025-58058 affecting package jx for versions less than 3.2.236-23. A patched version of the package is available...

EUVD-2007-2084

Malware in sbrugna...

AZL-66735 CVE-2025-58058 affecting package jx for versions less than 3.2.236-23

xz is a pure golang package for reading and writing xz-compressed files. Prior to version 0.5.14, it is possible to put data in front of an LZMA-encoded byte stream without detecting the situation while reading the header. This can lead to increased memory consumption because the current...

AZL-66753 CVE-2025-58058 affecting package jx for versions less than 3.10.182-3

xz is a pure golang package for reading and writing xz-compressed files. Prior to version 0.5.14, it is possible to put data in front of an LZMA-encoded byte stream without detecting the situation while reading the header. This can lead to increased memory consumption because the current...

CVE-2019-10339

A missing permission check in Jenkins JX Resources Plugin 1.0.36 and earlier in GlobalPluginConfigurationdoValidateClient allowed users with Overall/Read access to have Jenkins connect to an attacker-specified Kubernetes server, potentially leaking credentials...

CVE-2024-51744 affecting package jx for versions less than 3.2.236-21

CVE-2024-51744 affecting package jx for versions less than 3.2.236-21. A patched version of the package is available...

AZL-77511 CVE-2025-30204 affecting package jx for versions less than 3.2.236-25

golang-jwt is a Go implementation of JSON Web Tokens. Starting in version 3.2.0 and prior to versions 5.2.2 and 4.5.2, the function parse.ParseUnverified splits via a call to strings.Split its argument which is untrusted data on periods. As a result, in the face of a malicious request whose...

CVE-2023-44487 affecting package jx for versions less than 3.2.236-13

CVE-2023-44487 affecting package jx for versions less than 3.2.236-13. A patched version of the package is available...

CVE-2024-51744 affecting package jx for versions less than 3.10.182-1

CVE-2024-51744 affecting package jx for versions less than 3.10.182-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-39325 affecting package jx for versions less than 3.10.182-1

CVE-2023-39325 affecting package jx for versions less than 3.10.182-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-45288 affecting package jx for versions less than 3.10.116-2

CVE-2023-45288 affecting package jx for versions less than 3.10.116-2. A patched version of the package is available...

AZL-38233 CVE-2023-45288 affecting package jx for versions less than 3.10.116-2

An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. Maintaining HPACK state requires parsing and processing all HEADERS and CONTINUATION frames on a connection. When a request's headers exceed MaxHeaderBytes, no...