EUVD-2022-2638

Malicious code in bioql PyPI...

GHSA-5Q7J-8HPC-4848 Server-side request forgery vulnerability in Jenkins Mesos Plugin

An improper authorization vulnerability exists in Jenkins Mesos Plugin 0.17.1 and earlier in MesosCloud.java that allows attackers with Overall/Read access to initiate a test connection to an attacker-specified Mesos server with attacker-specified credentials IDs obtained through another method,...

Server-side request forgery vulnerability in Jenkins Mesos Plugin

An improper authorization vulnerability exists in Jenkins Mesos Plugin 0.17.1 and earlier in MesosCloud.java that allows attackers with Overall/Read access to initiate a test connection to an attacker-specified Mesos server with attacker-specified credentials IDs obtained through another method,...

GHSA-23XR-9XXR-VG3C Improper authorization vulnerability in Jenkins Mesos Plugin

An improper authorization vulnerability exists in Jenkins Mesos Plugin 0.17.1 and earlier in MesosCloud.java that allows attackers with Overall/Read access to obtain credentials IDs for credentials stored in Jenkins...

Improper authorization vulnerability in Jenkins Mesos Plugin

An improper authorization vulnerability exists in Jenkins Mesos Plugin 0.17.1 and earlier in MesosCloud.java that allows attackers with Overall/Read access to obtain credentials IDs for credentials stored in Jenkins...

org.jenkins-ci.plugins:mesos (>=0.8.0, <=0.10.1) potentially affected by CVE-2017-9790 via org.apache.mesos:mesos (0.22.1)

org.apache.mesos:mesos MAVEN version 0.22.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mesos:mesos and may be impacted: - org.jenkins-ci.plugins:mesos =0.8.0, =0.10.1 Source cves: CVE-2017-9790 Source advisory: OSV:GHSA-VPCV-78CP-WHR3...

org.jenkins-ci.plugins:mesos (0.5.0) potentially affected by CVE-2017-9790 via org.apache.mesos:mesos (0.20.0)

org.apache.mesos:mesos MAVEN version 0.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mesos:mesos and may be impacted: - org.jenkins-ci.plugins:mesos 0.5.0 Source cves: CVE-2017-9790 Source advisory: OSV:GHSA-VPCV-78CP-WHR3...

org.jenkins-ci.plugins:mesos (>=0.11.0, <=0.13.1) potentially affected by CVE-2017-9790 via org.apache.mesos:mesos (0.27.0)

org.apache.mesos:mesos MAVEN version 0.27.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mesos:mesos and may be impacted: - org.jenkins-ci.plugins:mesos =0.11.0, =0.13.1 Source cves: CVE-2017-9790 Source advisory: OSV:GHSA-VPCV-78CP-WHR3...

org.jenkins-ci.plugins:mesos (>=0.11.0, <=0.13.1) potentially affected by CVE-2017-7687 via org.apache.mesos:mesos (0.27.0)

org.apache.mesos:mesos MAVEN version 0.27.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mesos:mesos and may be impacted: - org.jenkins-ci.plugins:mesos =0.11.0, =0.13.1 Source cves: CVE-2017-7687 Source advisory: OSV:GHSA-X869-784M-JMJ2...

org.jenkins-ci.plugins:mesos (0.5.0) potentially affected by CVE-2017-7687 via org.apache.mesos:mesos (0.20.0)

org.apache.mesos:mesos MAVEN version 0.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mesos:mesos and may be impacted: - org.jenkins-ci.plugins:mesos 0.5.0 Source cves: CVE-2017-7687 Source advisory: OSV:GHSA-X869-784M-JMJ2...

org.jenkins-ci.plugins:mesos (0.4.0) potentially affected by CVE-2017-7687 via org.apache.mesos:mesos (0.19.0)

org.apache.mesos:mesos MAVEN version 0.19.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mesos:mesos and may be impacted: - org.jenkins-ci.plugins:mesos 0.4.0 Source cves: CVE-2017-7687 Source advisory: OSV:GHSA-X869-784M-JMJ2...

org.jenkins-ci.plugins:mesos (>=0.8.0, <=0.10.1) potentially affected by CVE-2017-7687 via org.apache.mesos:mesos (0.22.1)

org.apache.mesos:mesos MAVEN version 0.22.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mesos:mesos and may be impacted: - org.jenkins-ci.plugins:mesos =0.8.0, =0.10.1 Source cves: CVE-2017-7687 Source advisory: OSV:GHSA-X869-784M-JMJ2...

org.jenkins-ci.plugins:mesos (0.4.0) potentially affected by CVE-2019-0204 via org.apache.mesos:mesos (0.19.0)

org.apache.mesos:mesos MAVEN version 0.19.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mesos:mesos and may be impacted: - org.jenkins-ci.plugins:mesos 0.4.0 Source cves: CVE-2019-0204 Source advisory: OSV:GHSA-32W9-2QPC-5F9V...

org.jenkins-ci.plugins:mesos (>=0.8.0, <=0.10.1) potentially affected by CVE-2019-0204 via org.apache.mesos:mesos (0.22.1)

org.apache.mesos:mesos MAVEN version 0.22.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mesos:mesos and may be impacted: - org.jenkins-ci.plugins:mesos =0.8.0, =0.10.1 Source cves: CVE-2019-0204 Source advisory: OSV:GHSA-32W9-2QPC-5F9V...

org.jenkins-ci.plugins:mesos (>=0.11.0, <=0.13.1) potentially affected by CVE-2019-0204 via org.apache.mesos:mesos (0.27.0)

org.apache.mesos:mesos MAVEN version 0.27.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mesos:mesos and may be impacted: - org.jenkins-ci.plugins:mesos =0.11.0, =0.13.1 Source cves: CVE-2019-0204 Source advisory: OSV:GHSA-32W9-2QPC-5F9V...

org.jenkins-ci.plugins:mesos (0.4.0) potentially affected by CVE-2018-11793 via org.apache.mesos:mesos (0.19.0)

org.apache.mesos:mesos MAVEN version 0.19.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mesos:mesos and may be impacted: - org.jenkins-ci.plugins:mesos 0.4.0 Source cves: CVE-2018-11793 Source advisory: OSV:GHSA-P2XQ-VCM7-XJJ6...

org.jenkins-ci.plugins:mesos (0.5.0) potentially affected by CVE-2018-11793 via org.apache.mesos:mesos (0.20.0)

org.apache.mesos:mesos MAVEN version 0.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mesos:mesos and may be impacted: - org.jenkins-ci.plugins:mesos 0.5.0 Source cves: CVE-2018-11793 Source advisory: OSV:GHSA-P2XQ-VCM7-XJJ6...

org.jenkins-ci.plugins:mesos (>=0.11.0, <=0.13.1) potentially affected by CVE-2018-11793 via org.apache.mesos:mesos (0.27.0)

org.apache.mesos:mesos MAVEN version 0.27.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mesos:mesos and may be impacted: - org.jenkins-ci.plugins:mesos =0.11.0, =0.13.1 Source cves: CVE-2018-11793 Source advisory: OSV:GHSA-P2XQ-VCM7-XJJ6...

com.hubspot:singularitybase (>=0.3.0, <=0.3.2), com.hubspot:singularityclient (>=0.3.0, <=0.3.2) +2 more potentially affected by CVE-2018-11793 via org.apache.mesos:mesos (0.17.0)

org.apache.mesos:mesos MAVEN version 0.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mesos:mesos and may be impacted: - com.hubspot:singularitybase =0.3.0, =0.3.0, =0.3.0, =0.3.2 - org.jenkins-ci.plugins:mesos 0.2.0 Source cves:...

org.jenkins-ci.plugins:mesos (>=0.8.0, <=0.10.1) potentially affected by CVE-2018-11793 via org.apache.mesos:mesos (0.22.1)

org.apache.mesos:mesos MAVEN version 0.22.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mesos:mesos and may be impacted: - org.jenkins-ci.plugins:mesos =0.8.0, =0.10.1 Source cves: CVE-2018-11793 Source advisory: OSV:GHSA-P2XQ-VCM7-XJJ6...