org.jenkins-ci.plugins:github-organization-folder (>=1.1, <=1.2) potentially affected by CVE-2022-25179 via org.jenkins-ci.plugins.workflow:workflow-multibranch (1.15)

org.jenkins-ci.plugins.workflow:workflow-multibranch MAVEN version 1.15 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-multibranch and may be impacted: - org.jenkins-ci.plugins:github-organization-folder =1.1,...

io.jenkins.plugins:synopsys-sigma (>=2021.12.0, <=2022.1.0) potentially affected by CVE-2022-25179 via org.jenkins-ci.plugins.workflow:workflow-multibranch (2.24)

org.jenkins-ci.plugins.workflow:workflow-multibranch MAVEN version 2.24 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-multibranch and may be impacted: - io.jenkins.plugins:synopsys-sigma =2021.12.0, =2022.1.0...

org.jenkins-ci.plugins:github-organization-folder (>=1.0-beta-1, <=1.0) potentially affected by CVE-2022-25179 via org.jenkins-ci.plugins.workflow:workflow-multibranch (1.15-beta-1)

org.jenkins-ci.plugins.workflow:workflow-multibranch MAVEN version 1.15-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-multibranch and may be impacted: - org.jenkins-ci.plugins:github-organization-folder...

io.jenkins.plugins:synopsys-sigma (>=2021.12.0, <=2022.1.0) potentially affected by CVE-2022-25179 via org.jenkins-ci.plugins.workflow:workflow-multibranch (2.24)

org.jenkins-ci.plugins.workflow:workflow-multibranch MAVEN version 2.24 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-multibranch and may be impacted: - io.jenkins.plugins:synopsys-sigma =2021.12.0, =2022.1.0...

org.jenkins-ci.plugins:simple-travis-runner (>=1.0-alpha-1, <=1.0) potentially affected by CVE-2022-25179 via org.jenkins-ci.plugins.workflow:workflow-multibranch (1.13)

org.jenkins-ci.plugins.workflow:workflow-multibranch MAVEN version 1.13 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-multibranch and may be impacted: - org.jenkins-ci.plugins:simple-travis-runner =1.0-alpha-1...

Link Following in Jenkins Pipeline Multibranch Plugin

Jenkins Pipeline: Multibranch Plugin prior to 2.23.1, 2.26.1, 696.698.v9b4218eea50f, and 707.v71c3f0a6ccdb follows symbolic links to locations outside of the checkout directory for the configured SCM when reading files using the readTrusted step, allowing attackers able to configure Pipelines...

GHSA-2M9W-9XH2-WXC3 Link Following in Jenkins Pipeline Multibranch Plugin

Jenkins Pipeline: Multibranch Plugin prior to 2.23.1, 2.26.1, 696.698.v9b4218eea50f, and 707.v71c3f0a6ccdb follows symbolic links to locations outside of the checkout directory for the configured SCM when reading files using the readTrusted step, allowing attackers able to configure Pipelines...

com.testinium.jenkins:testinium (1.0), io.fabric8.jenkins.plugins:openshift-sync (>=0.9.1, <=1.0.45) +33 more potentially affected by CVE-2022-25179 via org.jenkins-ci.plugins.workflow:workflow-multibranch (>=2.0, <=2.20)

org.jenkins-ci.plugins.workflow:workflow-multibranch MAVEN version =2.0, =0.9.1, =1.0-alpha-1, =1.0-alpha-1, =1.0-alpha-1, =1.0.0-b15, =1.0.0-b15, =1.0-alpha-8, =1.0-alpha-4, =0.1-preview-1, =1.1.0-beta-4, =1.0-alpha-1, =2.2.0, =2.0, =2.0, =2.6 and more Source cves: CVE-2022-25179 Source advisory...

com.testinium.jenkins:testinium (1.0), io.fabric8.jenkins.plugins:openshift-sync (>=0.9.1, <=1.0.45) +33 more potentially affected by CVE-2022-25179 via org.jenkins-ci.plugins.workflow:workflow-multibranch (>=2.0, <=2.20)

org.jenkins-ci.plugins.workflow:workflow-multibranch MAVEN version =2.0, =0.9.1, =1.0-alpha-1, =1.0-alpha-1, =1.0-alpha-1, =1.0.0-b15, =1.0.0-b15, =1.0-alpha-8, =1.0-alpha-4, =0.1-preview-1, =1.1.0-beta-4, =1.0-alpha-1, =2.2.0, =2.0, =2.0, =2.6 and more Source cves: CVE-2022-25179 Source advisory...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.9), org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.9) +1 more potentially affected by CVE-2022-25180 via org.jenkins-ci.plugins.workflow:workflow-cps (1.9)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 1.9 -...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.9-beta-1), org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.9-beta-1) +1 more potentially affected by CVE-2022-25180 via org.jenkins-ci.plugins.workflow:workflow-cps (1.9-beta-1)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.9-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 1.9-beta-1 -...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.12-beta-2), org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.12-beta-2) +1 more potentially affected by CVE-2022-25180 via org.jenkins-ci.plugins.workflow:workflow-cps (1.12-beta-2)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.12-beta-2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 1.12-beta-2 -...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.14.1-beta-1), org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.14.1-beta-1) +1 more potentially affected by CVE-2022-25180 via org.jenkins-ci.plugins.workflow:workflow-cps (1.14.1-beta-1)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.14.1-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 1.14.1-beta...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.14.2), org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.14.2) +3 more potentially affected by CVE-2022-25180 via org.jenkins-ci.plugins.workflow:workflow-cps (1.14.2)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.14.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 1.14.2 -...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.15-beta-1), org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.15-beta-1) +2 more potentially affected by CVE-2022-25180 via org.jenkins-ci.plugins.workflow:workflow-cps (1.15-beta-1)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.15-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 1.15-beta-1 -...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.11-beta-1), org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.11-beta-1) +1 more potentially affected by CVE-2022-25180 via org.jenkins-ci.plugins.workflow:workflow-cps (1.11-beta-1)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.11-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 1.11-beta-1 -...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.11-beta-3), org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.11-beta-3) +1 more potentially affected by CVE-2022-25180 via org.jenkins-ci.plugins.workflow:workflow-cps (1.11-beta-3)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.11-beta-3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 1.11-beta-3 -...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.12), org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.12) +1 more potentially affected by CVE-2022-25180 via org.jenkins-ci.plugins.workflow:workflow-cps (1.12)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 1.12 -...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.14.1), org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.14.1) +1 more potentially affected by CVE-2022-25180 via org.jenkins-ci.plugins.workflow:workflow-cps (1.14.1)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.14.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 1.14.1 -...

io.jenkins.blueocean:blueocean (>=1.0.0-b18, <=1.0.0-b21), io.jenkins.blueocean:blueocean-dashboard (>=1.0.0-b18, <=1.0.0-b21) +7 more potentially affected by CVE-2022-25180 via org.jenkins-ci.plugins.workflow:workflow-cps (2.19)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 2.19 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - io.jenkins.blueocean:blueocean =1.0.0-b18, =1.0.0-b18, =1.0.0-b18,...