org.jenkins-ci.plugins.workflow:workflow-aggregator (1.10), org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.10) +2 more potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (1.10)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 1.10 -...

org.jenkinsci.plugins:pipeline-model-definition (>=1.1.5, <=1.2-beta-3), org.jenkinsci.plugins:pipeline-model-extensions (>=1.1.5, <=1.2-beta-3) potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (2.33)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 2.33 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkinsci.plugins:pipeline-model-definition =1.1.5, =1.1.5,...

org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (>=2.3, <=2.4), org.jenkins-ci.plugins:github-organization-folder (>=1.5, <=1.6) +1 more potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (2.14)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 2.14 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-cps-global-lib =2.3, =1.5, =1.6...

org.jenkins-ci.plugins.pipeline-stage-view:parent-pom (>=1.0-alpha-1, <=1.0-alpha-2), org.jenkins-ci.plugins.pipeline-stage-view:pipeline-rest-api (>=1.0-alpha-1, <=1.0-alpha-2) +4 more potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (1.14-beta-1)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.14-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.pipeline-stage-view:parent-pom =1.0-alpha-...

io.jenkins.plugins:pipeline-agent-build-history (34.v570d1a_452f30), io.jenkins.plugins:pipeline-groovy-lib (>=727.ve832a_9244dfa, <=745.vdf6077913de0) +2 more potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (3889.v937e0b_3412d3)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 3889.v937e0b3412d3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - io.jenkins.plugins:pipeline-agent-build-history...

Restarting a run with revoked script approval allowed by Jenkins Pipeline: Declarative Plugin

Jenkins Pipeline: Declarative Plugin 2.2214.vbb34b2ea9b83 and earlier does not check whether the main Jenkinsfile script used to restart a build from a specific stage is approved, allowing attackers with Item/Build permission to restart a previous build whose Jenkinsfile script is no longer...

org.jenkins-ci.plugins:pipeline-utility-steps (>=1.4.0, <=1.5.1) potentially affected by CVE-2024-52549 via org.jenkins-ci.plugins:script-security (1.29.1)

org.jenkins-ci.plugins:script-security MAVEN version 1.29.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins:pipeline-utility-steps =1.4.0, =1.5.1 Source cves:...

io.fabric8.pipeline:kubernetes-pipeline-aggregator (1.3), io.fabric8.pipeline:kubernetes-pipeline-devops-steps (1.3) +4 more potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (1.7-alpha-1)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.7-alpha-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - io.fabric8.pipeline:kubernetes-pipeline-aggregator 1.3 -...

io.jenkins.plugins:pipeline-agent-build-history (>=20.v2cb_6cc0a_7d81, <=22.v0372f41a_2ea_9), io.jenkins.plugins:warnings-ng (>=11.1.0, <=11.2.0) potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (3867.v535458ce43fd)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 3867.v535458ce43fd is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - io.jenkins.plugins:pipeline-agent-build-history...

hudson.plugins.octopusdeploy:octopusdeploy (4.0.2), org.jenkins-ci.plugins:badge (>=1.0, <=1.1) +2 more potentially affected by CVE-2024-52549 via org.jenkins-ci.plugins:script-security (1.39)

org.jenkins-ci.plugins:script-security MAVEN version 1.39 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - hudson.plugins.octopusdeploy:octopusdeploy 4.0.2 - org.jenkins-ci.plugins:badge =1.0...

io.jenkins.plugins:opentelemetry (>=3.1419.v3b_27ca_911066, <=3.1423.v0d1a_2fcd2429), io.jenkins.plugins:pipeline-as-yaml (242.vb_90a_b_f42ca_07) +2 more potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (3969.vdc9d3a_efcc6a)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 3969.vdc9d3aefcc6a is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - io.jenkins.plugins:opentelemetry =3.1419.v3b27ca911066,...

org.jenkins-ci.plugins:pipeline-graph-analysis (>=1.5, <=1.6) potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (2.37)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 2.37 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins:pipeline-graph-analysis =1.5, =1.6 Source cves:...

io.jenkins.plugins:opentelemetry (3.1391.vcb_a_a_b_9779d75), org.jenkinsci.plugins:pipeline-model-definition (2.2214.vb_b_34b_2ea_9b_83) +1 more potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (3953.v19f11da_8d2fa)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 3953.v19f11da8d2fa is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - io.jenkins.plugins:opentelemetry 3.1391.vcbaab9779d75 -...

io.jenkins.plugins:pipeline-agent-build-history (28.vc1153328e666) potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (3883.vb_3ff2a_e3eea_f)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 3883.vb3ff2ae3eeaf is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - io.jenkins.plugins:pipeline-agent-build-history...

org.jenkins-ci.plugins.pipeline-stage-view:pipeline-rest-api (>=2.32, <=2.34), org.jenkins-ci.plugins.pipeline-stage-view:pipeline-stage-view (>=2.32, <=2.34) +2 more potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (2660.vb_c0412dc4e6d)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 2660.vbc0412dc4e6d is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.pipeline-stage-view:pipeline-rest-a...

org.jenkins-ci.plugins:extreme-notification (>=1.5, <=1.6), org.jenkins-ci.plugins:junit-realtime-test-reporter (>=0.5, <=0.6) +1 more potentially affected by CVE-2024-52549 via org.jenkins-ci.plugins:script-security (1.33)

org.jenkins-ci.plugins:script-security MAVEN version 1.33 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins:extreme-notification =1.5, =0.5, =3.4.0-beta-1, =3.5.12 Sourc...

io.jenkins.blueocean:blueocean (1.2.0-beta-1), io.jenkins.blueocean:blueocean-events (1.2.0-beta-1) +5 more potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (2.36)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 2.36 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - io.jenkins.blueocean:blueocean 1.2.0-beta-1 -...

io.fabric8.pipeline:kubernetes-pipeline-aggregator (1.3), io.fabric8.pipeline:kubernetes-pipeline-core (1.3) +6 more potentially affected by CVE-2024-52549 via org.jenkins-ci.plugins:script-security (1.14)

org.jenkins-ci.plugins:script-security MAVEN version 1.14 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - io.fabric8.pipeline:kubernetes-pipeline-aggregator 1.3 -...

io.jenkins.blueocean:blueocean-pipeline-scm-api (>=1.27.12, <=1.27.16), io.jenkins.plugins:coverage (>=1.11.0, <=1.16.1) +6 more potentially affected by CVE-2024-52549 via org.jenkins-ci.plugins:script-security (1305.v487433146192)

org.jenkins-ci.plugins:script-security MAVEN version 1305.v487433146192 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - io.jenkins.blueocean:blueocean-pipeline-scm-api =1.27.12, =1.11.0,...

io.jenkins.blueocean:blueocean-pipeline-scm-api (>=1.27.12, <=1.27.16), io.jenkins.plugins:coverage (>=1.11.0, <=1.16.1) +4 more potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (3832.vc43e04d6d68c)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 3832.vc43e04d6d68c is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - io.jenkins.blueocean:blueocean-pipeline-scm-api =1.27.12,...