CVE-2026-92131

Jenkins Pipeline: Groovy Libraries Plugin 805.vafc79344957d and earlier does not restrict the library path provided to the library Pipeline step to a relative path inside the SCM checkout, and follows symbolic links to locations outside of the SCM checkout when retrieving the library, resulting i...

CVE-2026-92131

The Jenkins Pipeline: Groovy Libraries Plugin (version 805.va_fc79344957d and earlier) is vulnerable to a path traversal flaw. The plugin fails to restrict the library path provided to the library Pipeline step to a relative path within the SCM checkout and improperly follows symbolic links to lo...

CVE-2026-92131

Jenkins Pipeline: Groovy Libraries Plugin 805.vafc79344957d and earlier does not restrict the library path provided to the library Pipeline step to a relative path inside the SCM checkout, and follows symbolic links to locations outside of the SCM checkout when retrieving the library, resulting i...

EUVD-2026-80755

Jenkins Pipeline: Groovy Libraries Plugin 805.vafc79344957d and earlier does not restrict the library path provided to the library Pipeline step to a relative path inside the SCM checkout, and follows symbolic links to locations outside of the SCM checkout when retrieving the library, resulting i...

CVE-2026-92131

Jenkins Pipeline: Groovy Libraries Plugin 805.vafc79344957d and earlier does not restrict the library path provided to the library Pipeline step to a relative path inside the SCM checkout, and follows symbolic links to locations outside of the SCM checkout when retrieving the library, resulting i...

com.amadeus.jenkins.plugins:workflow-cps-global-lib-http (>=2.33.0, <=2.57.0), com.fuzzpro.jenkins-plugins:multibranch-job-tear-down (>=61.v68b_d7264b_643, <=73.ve2b_957fc2921) +26 more potentially affected by CVE-2026-92131 via io.jenkins.plugins:pipeline-groovy-lib (>=685.v8ee9ed91d574, <=805.va_fc79344957d)

io.jenkins.plugins:pipeline-groovy-lib MAVEN version =685.v8ee9ed91d574, =2.33.0, =61.v68bd7264b643, =57.vde5161ec7aba, =1.27.17, =1.27.17, =1.27.17, =1.27.17, =1.27.17, =1.27.17, =1.27.17, =1.83.v5bff0e55cd2d, =3.1391.vcbaab9779d75, =242.vb90abf42ca07, =365.vc5cf79113809, =5.v2bc0b458b8b2,...

CVE-2026-92131

Jenkins Pipeline: Groovy Libraries Plugin 805.vafc79344957d and earlier does not restrict the library path provided to the library Pipeline step to a relative path inside the SCM checkout, and follows symbolic links to locations outside of the SCM checkout when retrieving the library, resulting i...

PT-2026-93774

Name of the Vulnerable Software and Affected Versions Jenkins Pipeline: Groovy Libraries Plugin versions prior to 805.va fc79344957d Description An issue exists where the library path provided to the library Pipeline step is not restricted to a relative path within the SCM checkout. Additionally,...

Path traversal vulnerability in pipeline-groovy-lib

pipeline-groovy-lib provides the library step to retrieve a shared library from an SCM, using a library path to specify the directory containing the library inside the SCM checkout. pipeline-groovy-lib 805.vafc79344957d and earlier does not restrict that library path to a relative path inside the...

CVE-2026-84663

A cross-site request forgery CSRF vulnerability in Jenkins Pipeline: Groovy Libraries Plugin 798.v5cc688825312 and earlier allows attackers to delete shared library caches...

CVE-2026-84663

A cross-site request forgery CSRF vulnerability in Jenkins Pipeline: Groovy Libraries Plugin 798.v5cc688825312 and earlier allows attackers to delete shared library caches...

com.amadeus.jenkins.plugins:workflow-cps-global-lib-http (>=2.33.0, <=2.57.0), com.fuzzpro.jenkins-plugins:multibranch-job-tear-down (>=61.v68b_d7264b_643, <=69.vc3f564093641) +26 more potentially affected by CVE-2026-84663 via io.jenkins.plugins:pipeline-groovy-lib (>=685.v8ee9ed91d574, <=798.v5cc688825312)

io.jenkins.plugins:pipeline-groovy-lib MAVEN version =685.v8ee9ed91d574, =2.33.0, =61.v68bd7264b643, =57.vde5161ec7aba, =1.27.17, =1.27.17, =1.27.17, =1.27.17, =1.27.17, =1.27.17, =1.27.17, =1.83.v5bff0e55cd2d, =3.1391.vcbaab9779d75, =242.vb90abf42ca07, =365.vc5cf79113809, =5.v2bc0b458b8b2,...

CVE-2026-84663: Cross-Site Request Forgery (CSRF)

A cross-site request forgery CSRF vulnerability in Jenkins Pipeline: Groovy Libraries Plugin 798.v5cc688825312 and earlier allows attackers to delete shared library caches...

CSRF vulnerability in pipeline-groovy-lib

pipeline-groovy-lib 798.v5cc688825312 and earlier does not require POST requests for an HTTP endpoint, resulting in a cross-site request forgery CSRF vulnerability. This vulnerability allows attackers to delete shared library caches. pipeline-groovy-lib 805.vafc79344957d requires POST requests fo...

CVE-2026-57283

A flaw was found in Jenkins Pipeline: Groovy Plugin. This cross-site request forgery CSRF vulnerability allows attackers to instantiate types related to job or system configuration. This could enable unauthorized modifications to the Jenkins environment...

GHSA-72C8-3WWG-R59W Jenkins Pipeline: Groovy Plugin has a CSRF vulnerability

Jenkins Pipeline: Groovy Plugin 4331.v9d06ed4658ff and earlier does not restrict the types that can be instantiated through the Pipeline Snippet Generator, instantiating any type with a constructor annotated with @DataBoundConstructor in response to a request. This allows attackers to have...

com.amadeus.jenkins.plugins:workflow-cps-global-lib-http (>=2.34.0, <=2.57.0) potentially affected by CVE-2026-57284 via io.jenkins.plugins:pipeline-groovy-lib (689.veec561a_dee13)

io.jenkins.plugins:pipeline-groovy-lib MAVEN version 689.veec561adee13 is affected by a known vulnerability. The following packages have a transitive dependency on io.jenkins.plugins:pipeline-groovy-lib and may be impacted: - com.amadeus.jenkins.plugins:workflow-cps-global-lib-http =2.34.0, =2.57...

com.amadeus.jenkins.plugins:workflow-cps-global-lib-http (2.33.0) potentially affected by CVE-2026-57284 via io.jenkins.plugins:pipeline-groovy-lib (685.v8ee9ed91d574)

io.jenkins.plugins:pipeline-groovy-lib MAVEN version 685.v8ee9ed91d574 is affected by a known vulnerability. The following packages have a transitive dependency on io.jenkins.plugins:pipeline-groovy-lib and may be impacted: - com.amadeus.jenkins.plugins:workflow-cps-global-lib-http 2.33.0 Source...

io.jenkins.plugins:shared-library-version-override (>=17.v786074c9fce7, <=24.v102d8d8fd0cc) potentially affected by CVE-2026-57284 via io.jenkins.plugins:pipeline-groovy-lib (730.ve57b_34648c63)

io.jenkins.plugins:pipeline-groovy-lib MAVEN version 730.ve57b34648c63 is affected by a known vulnerability. The following packages have a transitive dependency on io.jenkins.plugins:pipeline-groovy-lib and may be impacted: - io.jenkins.plugins:shared-library-version-override =17.v786074c9fce7,...

com.fuzzpro.jenkins-plugins:multibranch-job-tear-down (73.ve2b_957fc2921) potentially affected by CVE-2026-57284 via io.jenkins.plugins:pipeline-groovy-lib (805.va_fc79344957d)

io.jenkins.plugins:pipeline-groovy-lib MAVEN version 805.vafc79344957d is affected by a known vulnerability. The following packages have a transitive dependency on io.jenkins.plugins:pipeline-groovy-lib and may be impacted: - com.fuzzpro.jenkins-plugins:multibranch-job-tear-down 73.ve2b957fc2921...