org.jenkins-ci.plugins:config-file-provider (>=973.vb_a_80ecb_9a_4d0, <=980.v88956a_a_5d6a_d), org.jenkins-ci.plugins:nodejs (>=1.6.2, <=1.6.4) +2 more potentially affected by CVE-2026-42520 via org.jenkins-ci.plugins:credentials-binding (657.v2b_19db_7d6e6d)

org.jenkins-ci.plugins:credentials-binding MAVEN version 657.v2b19db7d6e6d is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials-binding and may be impacted: - org.jenkins-ci.plugins:config-file-provider =973.vba80ecb9a4d0,...

org.jenkins-ci.plugins:config-file-provider (>=973.vb_a_80ecb_9a_4d0, <=980.v88956a_a_5d6a_d), org.jenkins-ci.plugins:nodejs (>=1.6.2, <=1.6.4) +2 more potentially affected by CVE-2025-53650 via org.jenkins-ci.plugins:credentials-binding (657.v2b_19db_7d6e6d)

org.jenkins-ci.plugins:credentials-binding MAVEN version 657.v2b19db7d6e6d is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials-binding and may be impacted: - org.jenkins-ci.plugins:config-file-provider =973.vba80ecb9a4d0,...

org.jenkins-ci.plugins:pipeline-maven (>=0.5, <=2.2.1), org.jenkins-ci.plugins:pipeline-multibranch-defaults (1.1) +1 more potentially affected by CVE-2023-40339 via org.jenkins-ci.plugins:config-file-provider (2.15.1)

org.jenkins-ci.plugins:config-file-provider MAVEN version 2.15.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:config-file-provider and may be impacted: - org.jenkins-ci.plugins:pipeline-maven =0.5, =0.9.0, =0.9.1 Source cves:...

Malicious Package

Overview pipeline-npm-artifactory is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

org.jenkins-ci.plugins:pipeline-maven (>=0.5, <=2.2.1), org.jenkins-ci.plugins:pipeline-multibranch-defaults (1.1) +1 more potentially affected by CVE-2021-21645 via org.jenkins-ci.plugins:config-file-provider (2.15.1)

org.jenkins-ci.plugins:config-file-provider MAVEN version 2.15.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:config-file-provider and may be impacted: - org.jenkins-ci.plugins:pipeline-maven =0.5, =0.9.0, =0.9.1 Source cves:...

org.jenkins-ci.plugins:nodejs (>=1.2.2, <=1.2.4), org.jenkins-ci.plugins:pipeline-maven (>=3.0.0-beta-1, <=3.5.12) +1 more potentially affected by CVE-2021-21643 via org.jenkins-ci.plugins:config-file-provider (2.16.0)

org.jenkins-ci.plugins:config-file-provider MAVEN version 2.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:config-file-provider and may be impacted: - org.jenkins-ci.plugins:nodejs =1.2.2, =3.0.0-beta-1, =3.5.12 -...

org.jenkins-ci.plugins:nodejs (>=1.2.2, <=1.2.4), org.jenkins-ci.plugins:pipeline-maven (>=3.0.0-beta-1, <=3.5.12) +1 more potentially affected by CVE-2019-1003014 via org.jenkins-ci.plugins:config-file-provider (2.16.0)

org.jenkins-ci.plugins:config-file-provider MAVEN version 2.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:config-file-provider and may be impacted: - org.jenkins-ci.plugins:nodejs =1.2.2, =3.0.0-beta-1, =3.5.12 -...

org.jenkins-ci.plugins:pipeline-maven (>=0.5, <=2.2.1), org.jenkins-ci.plugins:pipeline-multibranch-defaults (1.1) +1 more potentially affected by CVE-2019-1003014 via org.jenkins-ci.plugins:config-file-provider (2.15.1)

org.jenkins-ci.plugins:config-file-provider MAVEN version 2.15.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:config-file-provider and may be impacted: - org.jenkins-ci.plugins:pipeline-maven =0.5, =0.9.0, =0.9.1 Source cves:...