io.jenkins.blueocean:blueocean (>=1.0.0-b25, <=1.1.7), io.jenkins.blueocean:blueocean-dashboard (>=1.0.0-b25, <=1.0.1) +25 more potentially affected by CVE-2026-42519 via org.jenkins-ci.plugins:script-security (1.26)

org.jenkins-ci.plugins:script-security MAVEN version 1.26 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - io.jenkins.blueocean:blueocean =1.0.0-b25, =1.0.0-b25, =1.0.0-b25, =1.0.0-b25,...

org.jenkins-ci.plugins.pipeline-stage-view:pipeline-rest-api (>=2.32, <=2.34), org.jenkins-ci.plugins.pipeline-stage-view:pipeline-stage-view (>=2.32, <=2.34) +2 more potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (2660.vb_c0412dc4e6d)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 2660.vbc0412dc4e6d is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.pipeline-stage-view:pipeline-rest-a...

com.splunk.splunkins:splunk-devops-extend (>=1.0, <=1.7.0), org.jenkins-ci.plugins.pipeline-stage-view:pipeline-rest-api (>=1.8-beta-1, <=2.11) +2 more potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (2.2)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - com.splunk.splunkins:splunk-devops-extend =1.0, =1.8-beta-1, =1.8-beta-1,...

org.jenkins-ci.plugins.pipeline-stage-view:parent-pom (>=1.0-alpha-1, <=1.0-alpha-2), org.jenkins-ci.plugins.pipeline-stage-view:pipeline-rest-api (>=1.0-alpha-1, <=1.0-alpha-2) +4 more potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (1.14-beta-1)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.14-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.pipeline-stage-view:parent-pom =1.0-alpha-...

jenkins-plugin/pipeline-stage-view: CSRF protection for any URL can be bypassed in Pipeline: Stage View Plugin

A Cross-site request forgery CSRF vulnerability was found in a Jenkins plugin. This issue may allow an authenticated attacker to access Jenkins builds, bypassing CSRF protections...

org.jenkins-ci.plugins.pipeline-stage-view:parent-pom (>=1.0-alpha-1, <=1.0-alpha-2), org.jenkins-ci.plugins.pipeline-stage-view:pipeline-rest-api (>=1.0-alpha-1, <=1.0-alpha-2) +3 more potentially affected by CVE-2023-32977 via org.jenkins-ci.plugins.workflow:workflow-job (1.14-beta-1)

org.jenkins-ci.plugins.workflow:workflow-job MAVEN version 1.14-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-job and may be impacted: - org.jenkins-ci.plugins.pipeline-stage-view:parent-pom =1.0-alpha-...

org.jenkins-ci.plugins.pipeline-stage-view:pipeline-rest-api (2.32), org.jenkins-ci.plugins.pipeline-stage-view:pipeline-stage-view (2.32) potentially affected by CVE-2023-32977 via org.jenkins-ci.plugins.workflow:workflow-job (1284.v2fe8ed4573d4)

org.jenkins-ci.plugins.workflow:workflow-job MAVEN version 1284.v2fe8ed4573d4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-job and may be impacted: - org.jenkins-ci.plugins.pipeline-stage-view:pipeline-rest-a...

jenkins-plugin/pipeline-stage-view: CSRF protection for any URL can be bypassed in Pipeline: Stage View Plugin

A Cross-site request forgery CSRF vulnerability was found in a Jenkins plugin. This issue may allow an authenticated attacker to access Jenkins builds, bypassing CSRF protections...

jenkins-plugin/pipeline-stage-view: CSRF protection for any URL can be bypassed in Pipeline: Stage View Plugin

A Cross-site request forgery CSRF vulnerability was found in a Jenkins plugin. This issue may allow an authenticated attacker to access Jenkins builds, bypassing CSRF protections...

jenkins-plugin/pipeline-stage-view: CSRF protection for any URL can be bypassed in Pipeline: Stage View Plugin

A Cross-site request forgery CSRF vulnerability was found in a Jenkins plugin. This issue may allow an authenticated attacker to access Jenkins builds, bypassing CSRF protections...

org.jenkins-ci.plugins.pipeline-stage-view:parent-pom (1.0), org.jenkins-ci.plugins.pipeline-stage-view:pipeline-rest-api (1.0) +2 more potentially affected by CVE-2022-43405 via org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.14)

org.jenkins-ci.plugins.workflow:workflow-cps-global-lib MAVEN version 1.14 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps-global-lib and may be impacted: -...

org.jenkins-ci.plugins.pipeline-stage-view:parent-pom (>=1.0-alpha-1, <=1.0-alpha-2), org.jenkins-ci.plugins.pipeline-stage-view:pipeline-rest-api (>=1.0-alpha-1, <=1.0-alpha-2) +2 more potentially affected by CVE-2022-43406 via org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.14-beta-1)

org.jenkins-ci.plugins.workflow:workflow-cps-global-lib MAVEN version 1.14-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps-global-lib and may be impacted: -...

org.jenkins-ci.plugins.pipeline-stage-view:parent-pom (>=1.0-alpha-1, <=1.0-alpha-2), org.jenkins-ci.plugins.pipeline-stage-view:pipeline-rest-api (>=1.0-alpha-1, <=1.0-alpha-2) +2 more potentially affected by CVE-2022-43405 via org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.14-beta-1)

org.jenkins-ci.plugins.workflow:workflow-cps-global-lib MAVEN version 1.14-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps-global-lib and may be impacted: -...

org.jenkins-ci.plugins.pipeline-stage-view:pipeline-rest-api (>=2.32, <=2.34), org.jenkins-ci.plugins.pipeline-stage-view:pipeline-stage-view (>=2.32, <=2.34) +2 more potentially affected by CVE-2022-43401 via org.jenkins-ci.plugins.workflow:workflow-cps (2660.vb_c0412dc4e6d)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 2660.vbc0412dc4e6d is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.pipeline-stage-view:pipeline-rest-a...

org.jenkins-ci.plugins.pipeline-stage-view:pipeline-rest-api (>=2.32, <=2.34), org.jenkins-ci.plugins.pipeline-stage-view:pipeline-stage-view (>=2.32, <=2.34) +2 more potentially affected by CVE-2022-43402 via org.jenkins-ci.plugins.workflow:workflow-cps (2660.vb_c0412dc4e6d)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 2660.vbc0412dc4e6d is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.pipeline-stage-view:pipeline-rest-a...

com.synopsys.jenkinsci:ownership (>=0.9.0-beta-1, <=0.13.0), org.jenkins-ci.plugins.pipeline-stage-view:parent-pom (1.0) +9 more potentially affected by CVE-2022-43401 via org.jenkins-ci.plugins.workflow:workflow-cps (1.14)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.14 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - com.synopsys.jenkinsci:ownership =0.9.0-beta-1, =1.0, =1.2.0, =1.2.7 -...

org.jenkins-ci.plugins.pipeline-stage-view:parent-pom (>=1.0-alpha-1, <=1.0-alpha-2), org.jenkins-ci.plugins.pipeline-stage-view:pipeline-rest-api (>=1.0-alpha-1, <=1.0-alpha-2) +4 more potentially affected by CVE-2022-43402 via org.jenkins-ci.plugins.workflow:workflow-cps (1.14-beta-1)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.14-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.pipeline-stage-view:parent-pom =1.0-alpha-...

com.splunk.splunkins:splunk-devops-extend (>=1.0, <=1.7.0), org.jenkins-ci.plugins.pipeline-stage-view:pipeline-rest-api (>=1.8-beta-1, <=2.11) +2 more potentially affected by CVE-2022-43401 via org.jenkins-ci.plugins.workflow:workflow-cps (2.2)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - com.splunk.splunkins:splunk-devops-extend =1.0, =1.8-beta-1, =1.8-beta-1,...

com.testinium.jenkins:testinium (1.0), net.praqma:memory-map (>=2.2.0, <=2.2.1) +11 more potentially affected by CVE-2022-43408 via org.jenkins-ci.plugins.pipeline-stage-view:pipeline-stage-view (>=2.0, <=2.10)

org.jenkins-ci.plugins.pipeline-stage-view:pipeline-stage-view MAVEN version =2.0, =2.2.0, =2.3, =2.0.5, =1.0.0, =1.0.0, =1.5.0, =3.0.0-beta.2, =1.0.0, =1.0.3, =1.1.1 Source cves: CVE-2022-43408 Source advisory: OSV:GHSA-G975-F26H-93G8...

org.jenkins-ci.plugins.workflow:workflow-aggregator (2.2) potentially affected by CVE-2022-43408 via org.jenkins-ci.plugins.pipeline-stage-view:pipeline-stage-view (1.4)

org.jenkins-ci.plugins.pipeline-stage-view:pipeline-stage-view MAVEN version 1.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.pipeline-stage-view:pipeline-stage-view and may be impacted: -...