org.jenkins-ci.plugins:pipeline-github-lib (1.0) potentially affected by CVE-2022-36883 via org.jenkins-ci.plugins:git (3.0.2)

org.jenkins-ci.plugins:git MAVEN version 3.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:pipeline-github-lib 1.0 Source cves: CVE-2022-36883 Source advisory:...

org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source (2.0.2), org.jenkins-ci.plugins:github-branch-source (>=2.0.1, <=2.0.8) +2 more potentially affected by CVE-2022-36884 via org.jenkins-ci.plugins:git (2.6.4)

org.jenkins-ci.plugins:git MAVEN version 2.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source 2.0.2 - org.jenkins-ci.plugins:github-branch-sourc...

org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source (2.0.2), org.jenkins-ci.plugins:github-branch-source (>=2.0.1, <=2.0.8) +2 more potentially affected by CVE-2022-36883 via org.jenkins-ci.plugins:git (2.6.4)

org.jenkins-ci.plugins:git MAVEN version 2.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source 2.0.2 - org.jenkins-ci.plugins:github-branch-sourc...

org.jenkins-ci.plugins:github-branch-source (2.0.0-beta-1), org.jenkins-ci.plugins:github-organization-folder (1.6-beta-1) +1 more potentially affected by CVE-2022-36883 via org.jenkins-ci.plugins:git (2.6.2-beta-1)

org.jenkins-ci.plugins:git MAVEN version 2.6.2-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:github-branch-source 2.0.0-beta-1 -...

org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source (2.0.2), org.jenkins-ci.plugins:github-branch-source (>=2.0.1, <=2.0.8) +2 more potentially affected by CVE-2022-36882 via org.jenkins-ci.plugins:git (2.6.4)

org.jenkins-ci.plugins:git MAVEN version 2.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source 2.0.2 - org.jenkins-ci.plugins:github-branch-sourc...

org.jenkins-ci.plugins:github-branch-source (2.0.0-beta-1), org.jenkins-ci.plugins:github-organization-folder (1.6-beta-1) +1 more potentially affected by CVE-2022-36882 via org.jenkins-ci.plugins:git (2.6.2-beta-1)

org.jenkins-ci.plugins:git MAVEN version 2.6.2-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:github-branch-source 2.0.0-beta-1 -...

org.jenkins-ci.plugins:github-branch-source (2.0.0-beta-1), org.jenkins-ci.plugins:github-organization-folder (1.6-beta-1) +1 more potentially affected by CVE-2022-36884 via org.jenkins-ci.plugins:git (2.6.2-beta-1)

org.jenkins-ci.plugins:git MAVEN version 2.6.2-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:github-branch-source 2.0.0-beta-1 -...

org.jenkins-ci.plugins:pipeline-github-lib (1.0) potentially affected by CVE-2021-21684 via org.jenkins-ci.plugins:git (3.0.2)

org.jenkins-ci.plugins:git MAVEN version 3.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:pipeline-github-lib 1.0 Source cves: CVE-2021-21684 Source advisory:...

org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source (2.0.2), org.jenkins-ci.plugins:github-branch-source (>=2.0.1, <=2.0.8) +2 more potentially affected by CVE-2021-21684 via org.jenkins-ci.plugins:git (2.6.4)

org.jenkins-ci.plugins:git MAVEN version 2.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source 2.0.2 - org.jenkins-ci.plugins:github-branch-sourc...

org.jenkins-ci.plugins:pipeline-github-lib (1.0) potentially affected by CVE-2020-2136 via org.jenkins-ci.plugins:git (3.0.2)

org.jenkins-ci.plugins:git MAVEN version 3.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:pipeline-github-lib 1.0 Source cves: CVE-2020-2136 Source advisory:...

org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source (2.0.2), org.jenkins-ci.plugins:github-branch-source (>=2.0.1, <=2.0.8) +2 more potentially affected by CVE-2020-2136 via org.jenkins-ci.plugins:git (2.6.4)

org.jenkins-ci.plugins:git MAVEN version 2.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source 2.0.2 - org.jenkins-ci.plugins:github-branch-sourc...

Users with Overall/Read access can enumerate credential IDs in Pipeline GitHub Notify Step Plugin

Pipeline GitHub Notify Step Plugin 1.0.4 and earlier provides a list of applicable credential IDs to allow users configuring the plugin to select the one to use. This functionality does not correctly check permissions, allowing any user with Overall/Read permission to get a list of valid...

GHSA-8P4M-62GP-33J4 Users with Overall/Read access can enumerate credential IDs in Pipeline GitHub Notify Step Plugin

Pipeline GitHub Notify Step Plugin 1.0.4 and earlier provides a list of applicable credential IDs to allow users configuring the plugin to select the one to use. This functionality does not correctly check permissions, allowing any user with Overall/Read permission to get a list of valid...

org.jenkins-ci.plugins:pipeline-github-lib (1.0) potentially affected by CVE-2022-30949 via org.jenkins-ci.plugins:git (3.0.2)

org.jenkins-ci.plugins:git MAVEN version 3.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:pipeline-github-lib 1.0 Source cves: CVE-2022-30949 Source advisory:...

org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source (2.0.2), org.jenkins-ci.plugins:github-branch-source (>=2.0.1, <=2.0.8) +2 more potentially affected by CVE-2022-30949 via org.jenkins-ci.plugins:git (2.6.4)

org.jenkins-ci.plugins:git MAVEN version 2.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source 2.0.2 - org.jenkins-ci.plugins:github-branch-sourc...

org.jenkins-ci.plugins:pipeline-github-lib (1.0) potentially affected by CVE-2022-30947 via org.jenkins-ci.plugins:git (3.0.2)

org.jenkins-ci.plugins:git MAVEN version 3.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:pipeline-github-lib 1.0 Source cves: CVE-2022-30947 Source advisory:...

org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (>=2.3, <=2.4), org.jenkins-ci.plugins:github-organization-folder (>=1.5, <=1.6) +1 more potentially affected by CVE-2022-30945 via org.jenkins-ci.plugins.workflow:workflow-cps (2.14)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 2.14 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-cps-global-lib =2.3, =1.5, =1.6...

org.jenkins-ci.plugins:github-branch-source (2.0.0-beta-1), org.jenkins-ci.plugins:github-organization-folder (1.6-beta-1) +1 more potentially affected by CVE-2017-1000092 via org.jenkins-ci.plugins:git (2.6.2-beta-1)

org.jenkins-ci.plugins:git MAVEN version 2.6.2-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:github-branch-source 2.0.0-beta-1 -...

org.jenkins-ci.plugins:pipeline-githubnotify-step (>=1.0.0, <=1.0.5) potentially affected by CVE-2017-1000091 via org.jenkins-ci.plugins:github-branch-source (1.10.1)

org.jenkins-ci.plugins:github-branch-source MAVEN version 1.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - org.jenkins-ci.plugins:pipeline-githubnotify-step =1.0.0, =1.0.5 Source...

org.jenkins-ci.plugins:github-branch-source (2.0.0-beta-1), org.jenkins-ci.plugins:github-organization-folder (1.6-beta-1) +1 more potentially affected by CVE-2018-1000182 via org.jenkins-ci.plugins:git (2.6.2-beta-1)

org.jenkins-ci.plugins:git MAVEN version 2.6.2-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:github-branch-source 2.0.0-beta-1 -...