io.fabric8.jenkins.plugins:openshift-sync (>=0.0.8, <=0.0.14), org.jenkins-ci.plugins.workflow:workflow-aggregator (>=2.0, <=2.1) +4 more potentially affected by CVE-2022-30945 via org.jenkins-ci.plugins.workflow:workflow-cps (2.0)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - io.fabric8.jenkins.plugins:openshift-sync =0.0.8, =2.0, =2.1.0, =18.5.1.1...

com.logmein:pipeline-bamboo (>=0.0.1, <=0.0.2), de.taimos:pipeline-aws (>=1.0, <=1.13) +5 more potentially affected by CVE-2022-30945 via org.jenkins-ci.plugins.workflow:workflow-cps (2.21)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 2.21 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - com.logmein:pipeline-bamboo =0.0.1, =1.0, =y, =2.2.0, =1.0, =0.6, =0.6,...

com.coravy.hudson.plugins.github:github (>=1.28.0, <=1.29.4), io.fabric8.jenkins.plugins:openshift-sync (>=y, <=1.0.45) +22 more potentially affected by CVE-2017-1000242 via org.jenkins-ci.plugins:git-client (>=2.0.0-beta1, <=2.4.0)

org.jenkins-ci.plugins:git-client MAVEN version =2.0.0-beta1, =1.28.0, =y, =1.0.0-b19-beta-1, =1.0.0-b19-beta-1, =1.0.0-b19-beta-1, =1.0.0-b19-beta-1, =1.0.0-b19-beta-1, =1.0.0-b19-beta-1, =1.0.0-b19-beta-1, =0.1-preview-4, =2.8, =2.2.0-alpha-1, =1.0, =1.40.0, =3.0.0-beta1, =3.4.1 and more Source...