Malicious code in bosh_plugin-pipeline (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

org.graylog.plugins:graylog-plugin-pipeline-processor (1.1.0), org.graylog.plugins:usage-statistics (2.1.0) potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (2.1.0)

org.graylog2:graylog2-server MAVEN version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-pipeline-processor 1.1.0 - org.graylog.plugins:usage-statistics 2.1....

org.graylog.plugins:graylog-plugin-parent (2.4.0-beta.1), org.graylog.plugins:graylog-plugin-pipeline-processor (2.4.0-beta.1) +2 more potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (2.4.0-beta.1)

org.graylog2:graylog2-server MAVEN version 2.4.0-beta.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 2.4.0-beta.1 -...

org.graylog.plugins:graylog-plugin-parent (2.2.0), org.graylog.plugins:graylog-plugin-pipeline-processor (2.2.0) +2 more potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (2.2.0)

org.graylog2:graylog2-server MAVEN version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 2.2.0 - org.graylog.plugins:graylog-plugin-pipeline-processor...

org.graylog.plugins:graylog-plugin-parent (2.2.0-beta.1), org.graylog.plugins:graylog-plugin-pipeline-processor (2.2.0-beta.1) +2 more potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (2.2.0-beta.1)

org.graylog2:graylog2-server MAVEN version 2.2.0-beta.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 2.2.0-beta.1 -...

org.graylog.plugins:graylog-plugin-parent (2.3.0-rc.2), org.graylog.plugins:graylog-plugin-pipeline-processor (2.3.0-rc.2) +2 more potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (2.3.0-rc.2)

org.graylog2:graylog2-server MAVEN version 2.3.0-rc.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 2.3.0-rc.2 -...

org.graylog.plugins:graylog-plugin-parent (2.5.0-beta.1), org.graylog.plugins:graylog-plugin-pipeline-processor (2.5.0-beta.1) +2 more potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (2.5.0-beta.1)

org.graylog2:graylog2-server MAVEN version 2.5.0-beta.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 2.5.0-beta.1 -...

org.graylog.plugins:graylog-plugin-parent (2.3.0-alpha.2), org.graylog.plugins:graylog-plugin-pipeline-processor (2.3.0-alpha.2) +2 more potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (2.3.0-alpha.2)

org.graylog2:graylog2-server MAVEN version 2.3.0-alpha.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 2.3.0-alpha.2 -...

org.graylog.plugins:graylog-plugin-pipeline-processor (1.1.1), org.graylog.plugins:usage-statistics (2.1.1) potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (2.1.1)

org.graylog2:graylog2-server MAVEN version 2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-pipeline-processor 1.1.1 - org.graylog.plugins:usage-statistics 2.1....

org.graylog.plugins:graylog-plugin-parent (2.4.0-beta.3), org.graylog.plugins:graylog-plugin-pipeline-processor (2.4.0-beta.3) +2 more potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (2.4.0-beta.3)

org.graylog2:graylog2-server MAVEN version 2.4.0-beta.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 2.4.0-beta.3 -...

org.graylog.plugins:graylog-plugin-parent (2.5.1), org.graylog.plugins:graylog-plugin-pipeline-processor (2.5.1) +2 more potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (2.5.1)

org.graylog2:graylog2-server MAVEN version 2.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 2.5.1 - org.graylog.plugins:graylog-plugin-pipeline-processor...

org.graylog.plugins:graylog-plugin-parent (2.3.0-alpha.3), org.graylog.plugins:graylog-plugin-pipeline-processor (2.3.0-alpha.3) +2 more potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (2.3.0-alpha.3)

org.graylog2:graylog2-server MAVEN version 2.3.0-alpha.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 2.3.0-alpha.3 -...

org.graylog.plugins:graylog-plugin-parent (2.4.4), org.graylog.plugins:graylog-plugin-pipeline-processor (2.4.4) +2 more potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (2.4.4)

org.graylog2:graylog2-server MAVEN version 2.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 2.4.4 - org.graylog.plugins:graylog-plugin-pipeline-processor...

Jenkins Plugin Pipeline: Job 跨站脚本漏洞

Jenkins is a Jenkins open source application. An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins Pipeline is a suite of plugins that support the implementation and integration of continuous delivery pipelines int...

Jenkins Plugin Pipeline Utility Steps 路径遍历漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A path traversal...

Jenkins Plugin Pipeline: Supporting APIs 跨站脚本漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. Jenkins Plugin Pipeline:...