jenkinsci__workflow-multibranch-plugin_CVE-2022-25175_706-vd43c65dec013

Pipeline: Multibranch Introduction Enhances Pipeline plugin to handle branches better by automatically grouping builds from different branches. Automatically creates a new Jenkins job whenever a new branch is pushed to a source code repository. Other plugins can define various branch types, e.g. ...

CVE-2026-92130

Jenkins Pipeline: Multibranch Plugin 841.vec5b9e1806ec and earlier does not set the appropriate context for credentials lookup in the resolveScm Pipeline step, allowing attackers with Item/Configure permission to access and capture credentials they are not entitled to...

EUVD-2026-80754

Jenkins Pipeline: Multibranch Plugin 841.vec5b9e1806ec and earlier does not set the appropriate context for credentials lookup in the resolveScm Pipeline step, allowing attackers with Item/Configure permission to access and capture credentials they are not entitled to...

CVE-2026-92130

The Jenkins Pipeline: Multibranch Plugin (workflow-multibranch) versions 841.vec5b_9e1806ec and earlier contains a vulnerability where it fails to set the appropriate context for credentials lookup during the resolveScm Pipeline step. This flaw allows attackers with Item/Configure permissions to ...

CVE-2026-92130

Jenkins Pipeline: Multibranch Plugin 841.vec5b9e1806ec and earlier does not set the appropriate context for credentials lookup in the resolveScm Pipeline step, allowing attackers with Item/Configure permission to access and capture credentials they are not entitled to...

CVE-2026-92130

Jenkins Pipeline: Multibranch Plugin 841.vec5b9e1806ec and earlier does not set the appropriate context for credentials lookup in the resolveScm Pipeline step, allowing attackers with Item/Configure permission to access and capture credentials they are not entitled to...

CVE-2026-92130

Jenkins Pipeline: Multibranch Plugin 841.vec5b9e1806ec and earlier does not set the appropriate context for credentials lookup in the resolveScm Pipeline step, allowing attackers with Item/Configure permission to access and capture credentials they are not entitled to...

au.com.versent.jenkins.plugins:ignore-committer-strategy (>=29.v7c3891a_434c3, <=63.v7e87d06b_a_30c), com.fuzzpro.jenkins-plugins:multibranch-job-tear-down (>=61.v68b_d7264b_643, <=73.ve2b_957fc2921) +64 more potentially affected by CVE-2026-92130 via org.jenkins-ci.plugins.workflow:workflow-multibranch (>=1.13, <=841.vec5b_9e1806ec)

org.jenkins-ci.plugins.workflow:workflow-multibranch MAVEN version =1.13, =29.v7c3891a434c3, =61.v68bd7264b643, =57.vde5161ec7aba, =0.9.1, =1.0-alpha-1, =1.27.17, =1.0-alpha-1, =1.0-alpha-1, =1.0.0-b15, =1.0.0-b15, =1.0-alpha-8, =1.0-alpha-4, =0.1-preview-1, =1.1.0-beta-4, =1.27.26 and more Sourc...

CVE-2026-92130: Incorrect Authorization

Jenkins Pipeline: Multibranch Plugin 841.vec5b9e1806ec and earlier does not set the appropriate context for credentials lookup in the resolveScm Pipeline step, allowing attackers with Item/Configure permission to access and capture credentials they are not entitled to...

Exposure of System-scoped credentials in workflow-multibranch

workflow-multibranch 841.vec5b9e1806ec and earlier does not set the appropriate context for credentials lookup in the resolveScm Pipeline step, allowing the use of System-scoped credentials otherwise reserved for the global configuration. This allows attackers with Item/Configure permission to...

PT-2026-93773

Name of the Vulnerable Software and Affected Versions Jenkins Pipeline: Multibranch Plugin versions prior to 841.vec5b 9e1806ec Description An issue exists in the resolveScm Pipeline step where the appropriate context for credentials lookup is not set. This allows users with Item/Configure...

io.jenkins.blueocean:blueocean (>=1.0.0-b18, <=1.0.0-b21), io.jenkins.blueocean:blueocean-dashboard (>=1.0.0-b18, <=1.0.0-b21) +13 more potentially affected by CVE-2026-57281 via org.jenkins-ci.plugins:script-security (1.23)

org.jenkins-ci.plugins:script-security MAVEN version 1.23 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - io.jenkins.blueocean:blueocean =1.0.0-b18, =1.0.0-b18, =1.0.0-b18, =1.0.0-b18,...

org.jenkins-ci.plugins:disable-github-multibranch-status (>=1.0, <=1.2) potentially affected by CVE-2026-57285 via org.jenkins-ci.plugins:github-branch-source (2.2.0)

org.jenkins-ci.plugins:github-branch-source MAVEN version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - org.jenkins-ci.plugins:disable-github-multibranch-status =1.0, =1.2 Sourc...

com.openshift.jenkins.plugins:openshift-client (1.1.0.424.v829cb_ccf8798), io.jenkins.plugins:openshift-k8s-credentials (>=168.v79a_983191991, <=276.v708b_2cd34a_9e) +7 more potentially affected by CVE-2026-57280 via org.jenkins-ci.plugins:script-security (1313.v7a_6067dc7087)

org.jenkins-ci.plugins:script-security MAVEN version 1313.v7a6067dc7087 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - com.openshift.jenkins.plugins:openshift-client 1.1.0.424.v829cbccf8798...

com.openshift.jenkins.plugins:openshift-client (1.1.0.424.v829cb_ccf8798), io.jenkins.plugins:openshift-k8s-credentials (>=168.v79a_983191991, <=276.v708b_2cd34a_9e) +7 more potentially affected by CVE-2026-57281 via org.jenkins-ci.plugins:script-security (1313.v7a_6067dc7087)

org.jenkins-ci.plugins:script-security MAVEN version 1313.v7a6067dc7087 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - com.openshift.jenkins.plugins:openshift-client 1.1.0.424.v829cbccf8798...

com.fuzzpro.jenkins-plugins:multibranch-job-tear-down (>=61.v68b_d7264b_643, <=69.vc3f564093641), io.jenkins.plugins:pipeline-lib-oras (105.v0413172a_ec91) potentially affected by CVE-2026-57284 via io.jenkins.plugins:pipeline-groovy-lib (798.v5cc688825312)

io.jenkins.plugins:pipeline-groovy-lib MAVEN version 798.v5cc688825312 is affected by a known vulnerability. The following packages have a transitive dependency on io.jenkins.plugins:pipeline-groovy-lib and may be impacted: - com.fuzzpro.jenkins-plugins:multibranch-job-tear-down =61.v68bd7264b643...

com.fuzzpro.jenkins-plugins:multibranch-job-tear-down (>=61.v68b_d7264b_643, <=69.vc3f564093641), io.jenkins.plugins:pipeline-lib-oras (105.v0413172a_ec91) potentially affected by CVE-2026-57283 via io.jenkins.plugins:pipeline-groovy-lib (798.v5cc688825312)

io.jenkins.plugins:pipeline-groovy-lib MAVEN version 798.v5cc688825312 is affected by a known vulnerability. The following packages have a transitive dependency on io.jenkins.plugins:pipeline-groovy-lib and may be impacted: - com.fuzzpro.jenkins-plugins:multibranch-job-tear-down =61.v68bd7264b643...

com.fuzzpro.jenkins-plugins:multibranch-job-tear-down (73.ve2b_957fc2921) potentially affected by CVE-2026-57284 via io.jenkins.plugins:pipeline-groovy-lib (805.va_fc79344957d)

io.jenkins.plugins:pipeline-groovy-lib MAVEN version 805.vafc79344957d is affected by a known vulnerability. The following packages have a transitive dependency on io.jenkins.plugins:pipeline-groovy-lib and may be impacted: - com.fuzzpro.jenkins-plugins:multibranch-job-tear-down 73.ve2b957fc2921...

com.fuzzpro.jenkins-plugins:multibranch-job-tear-down (74.v7c8402698506) potentially affected by CVE-2026-57284 via io.jenkins.plugins:pipeline-groovy-lib (806.v408277b_33d1d)

io.jenkins.plugins:pipeline-groovy-lib MAVEN version 806.v408277b33d1d is affected by a known vulnerability. The following packages have a transitive dependency on io.jenkins.plugins:pipeline-groovy-lib and may be impacted: - com.fuzzpro.jenkins-plugins:multibranch-job-tear-down 74.v7c8402698506...

com.fuzzpro.jenkins-plugins:multibranch-job-tear-down (74.v7c8402698506) potentially affected by CVE-2026-57283 via io.jenkins.plugins:pipeline-groovy-lib (806.v408277b_33d1d)

io.jenkins.plugins:pipeline-groovy-lib MAVEN version 806.v408277b33d1d is affected by a known vulnerability. The following packages have a transitive dependency on io.jenkins.plugins:pipeline-groovy-lib and may be impacted: - com.fuzzpro.jenkins-plugins:multibranch-job-tear-down 74.v7c8402698506...