com.cloudbees.jenkins.plugins:additional-identities-plugin (1.1), com.suryagaddipati.jenkins:slave-utilization-plugin (>=1.1, <=1.8) +8 more potentially affected by CVE-2021-21605 via org.jenkins-ci.main:jenkins-core (1.488)

org.jenkins-ci.main:jenkins-core MAVEN version 1.488 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.cloudbees.jenkins.plugins:additional-identities-plugin 1.1 -...

org.jenkins-ci.main:jenkins-test-harness (1.458), org.jenkins-ci.main:jenkins-war (1.458) +7 more potentially affected by CVE-2021-21605 via org.jenkins-ci.main:jenkins-core (1.458)

org.jenkins-ci.main:jenkins-core MAVEN version 1.458 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.458 - org.jenkins-ci.main:jenkins-war 1.458 -...

org.jenkins-ci.main:jenkins-test-harness (1.493), org.jenkins-ci.main:jenkins-war (1.493) +3 more potentially affected by CVE-2021-21605 via org.jenkins-ci.main:jenkins-core (1.493)

org.jenkins-ci.main:jenkins-core MAVEN version 1.493 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.493 - org.jenkins-ci.main:jenkins-war 1.493 -...

com.brianfromoregon:caliper-ci (2.2), com.unitedinternet.jenkins.plugins.jobtemplates:jobtemplates (1.0) +13 more potentially affected by CVE-2021-21605 via org.jenkins-ci.main:jenkins-core (1.424.6)

org.jenkins-ci.main:jenkins-core MAVEN version 1.424.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.brianfromoregon:caliper-ci 2.2 -...

org.jenkins-ci.main:jenkins-test-harness (1.508), org.jenkins-ci.main:jenkins-war (1.508) +3 more potentially affected by CVE-2021-21605 via org.jenkins-ci.main:jenkins-core (1.508)

org.jenkins-ci.main:jenkins-core MAVEN version 1.508 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.508 - org.jenkins-ci.main:jenkins-war 1.508 -...

org.jenkins-ci.main:jenkins-test-harness (1.531), org.jenkins-ci.main:jenkins-war (1.531) +3 more potentially affected by CVE-2021-21605 via org.jenkins-ci.main:jenkins-core (1.531)

org.jenkins-ci.main:jenkins-core MAVEN version 1.531 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.531 - org.jenkins-ci.main:jenkins-war 1.531 -...

org.jenkins-ci.main:jenkins-test-harness (1.490), org.jenkins-ci.main:jenkins-war (1.490) +4 more potentially affected by CVE-2021-21605 via org.jenkins-ci.main:jenkins-core (1.490)

org.jenkins-ci.main:jenkins-core MAVEN version 1.490 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.490 - org.jenkins-ci.main:jenkins-war 1.490 -...

com.technicolor:eloyente (1.0), org.jenkins-ci.main:jenkins-test-harness (1.492) +5 more potentially affected by CVE-2021-21605 via org.jenkins-ci.main:jenkins-core (1.492)

org.jenkins-ci.main:jenkins-core MAVEN version 1.492 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.technicolor:eloyente 1.0 - org.jenkins-ci.main:jenkins-test-harness 1.492 -...

org.jenkins-ci.main:jenkins-test-harness (1.409.1), org.jenkins-ci.main:jenkins-war (1.409.1) +2 more potentially affected by CVE-2021-21605 via org.jenkins-ci.main:jenkins-core (1.409.1)

org.jenkins-ci.main:jenkins-core MAVEN version 1.409.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.409.1 - org.jenkins-ci.main:jenkins-war 1.409.1 -...

com.sonyericsson.hudson.plugins.multi-slave-config-plugin:multi-slave-config-plugin (1.0.0), com.thalesgroup.dtkit:dtkit-default-tusar-jenkins (0.19) +14 more potentially affected by CVE-2021-21605 via org.jenkins-ci.main:jenkins-core (1.404)

org.jenkins-ci.main:jenkins-core MAVEN version 1.404 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.sonyericsson.hudson.plugins.multi-slave-config-plugin:multi-slave-config-plugin 1.0.0 -...

org.jenkins-ci.main:jenkins-test-harness (1.438), org.jenkins-ci.main:jenkins-war (1.438) +6 more potentially affected by CVE-2021-21605 via org.jenkins-ci.main:jenkins-core (1.438)

org.jenkins-ci.main:jenkins-core MAVEN version 1.438 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.438 - org.jenkins-ci.main:jenkins-war 1.438 -...

fabric8-maven-plugin: insecure way to construct Yaml Object leading to remote code execution

A flaw was found in the fabric8-maven-plugin 4.0.0 and later. When using a wildfly-swarm or thorntail custom configuration, a malicious YAML configuration file on the local machine executing the maven plug-in could allow for deserialization of untrusted data resulting in arbitrary code execution...

GHSA-W7GJ-H6F2-X4C6 fabric8-maven-plugin: insecure way to construct Yaml Object leading to remote code execution

A flaw was found in the fabric8-maven-plugin 4.0.0 and later. When using a wildfly-swarm or thorntail custom configuration, a malicious YAML configuration file on the local machine executing the maven plug-in could allow for deserialization of untrusted data resulting in arbitrary code execution...

javagh.jenkins:mashup-portlets-plugin (>=0.9, <=1.0.3), org.jenkins-ci.main:jenkins-test-harness (1.526) +10 more potentially affected by CVE-2020-2222 via org.jenkins-ci.main:jenkins-core (1.526)

org.jenkins-ci.main:jenkins-core MAVEN version 1.526 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - javagh.jenkins:mashup-portlets-plugin =0.9, =4.2.2, =1.0.1, =1.12, =1.526, =0.5, =1.4, =1.9.1...

org.jenkins-ci.main:jenkins-test-harness (1.530), org.jenkins-ci.main:jenkins-war (1.530) +3 more potentially affected by CVE-2020-2222 via org.jenkins-ci.main:jenkins-core (1.530)

org.jenkins-ci.main:jenkins-core MAVEN version 1.530 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.530 - org.jenkins-ci.main:jenkins-war 1.530 -...

org.jenkins-ci.main:jenkins-test-harness (1.496), org.jenkins-ci.main:jenkins-war (1.496) +3 more potentially affected by CVE-2020-2222 via org.jenkins-ci.main:jenkins-core (1.496)

org.jenkins-ci.main:jenkins-core MAVEN version 1.496 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.496 - org.jenkins-ci.main:jenkins-war 1.496 -...

com.nirima.jenkins.repository:jenkins-maven-plugin (1.0), com.nirima.jenkins.repository:pom (1.0) +10 more potentially affected by CVE-2020-2222 via org.jenkins-ci.main:jenkins-core (1.499)

org.jenkins-ci.main:jenkins-core MAVEN version 1.499 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.nirima.jenkins.repository:jenkins-maven-plugin 1.0 - com.nirima.jenkins.repository:pom 1.0 ...

org.jenkins-ci.main:jenkins-test-harness (1.414), org.jenkins-ci.main:jenkins-war (1.414) +5 more potentially affected by CVE-2020-2222 via org.jenkins-ci.main:jenkins-core (1.414)

org.jenkins-ci.main:jenkins-core MAVEN version 1.414 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.414 - org.jenkins-ci.main:jenkins-war 1.414 -...

org.jenkins-ci.main:jenkins-test-harness (1.416), org.jenkins-ci.main:jenkins-war (1.416) +2 more potentially affected by CVE-2020-2222 via org.jenkins-ci.main:jenkins-core (1.416)

org.jenkins-ci.main:jenkins-core MAVEN version 1.416 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.416 - org.jenkins-ci.main:jenkins-war 1.416 -...

org.jenkins-ci.main:jenkins-test-harness (1.424.5), org.jenkins-ci.main:jenkins-war (1.424.5) +3 more potentially affected by CVE-2020-2222 via org.jenkins-ci.main:jenkins-core (1.424.5)

org.jenkins-ci.main:jenkins-core MAVEN version 1.424.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.424.5 - org.jenkins-ci.main:jenkins-war 1.424.5 -...