CVE-2026-42521

The Jenkins Matrix Authorization Strategy Plugin versions 2.0-beta-1 through 3.2.9 (both inclusive) are vulnerable to unsafe deserialization. When deserializing inheritance strategies, the plugin invokes parameterless constructors of classes specified in the configuration without restricting whic...