org.jenkins-ci.main:jenkins-test-harness (1.583), org.jenkins-ci.main:jenkins-war (1.583) +1 more potentially affected by CVE-2025-59476 via org.jenkins-ci.main:jenkins-core (1.583)

org.jenkins-ci.main:jenkins-core MAVEN version 1.583 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.583 - org.jenkins-ci.main:jenkins-war 1.583 -...

org.jenkins-ci.main:jenkins-test-harness (1.588), org.jenkins-ci.main:jenkins-war (1.588) +1 more potentially affected by CVE-2025-59476 via org.jenkins-ci.main:jenkins-core (1.588)

org.jenkins-ci.main:jenkins-core MAVEN version 1.588 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.588 - org.jenkins-ci.main:jenkins-war 1.588 -...

com.parallels:parallels-desktop (>=0.4, <=0.6), org.fedoraproject.jenkins.plugins:copr (0.6.1) +7 more potentially affected by CVE-2025-59476 via org.jenkins-ci.main:jenkins-core (1.651.1)

org.jenkins-ci.main:jenkins-core MAVEN version 1.651.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.parallels:parallels-desktop =0.4, =1.6, =0.7.0, =0.8.1 Source cves: CVE-2025-59476 Source...

com.thalesgroup.jenkins-ci.plugins:cppcheck (0.15), com.thalesgroup.jenkins-ci.plugins:xunit (1.16) +46 more potentially affected by CVE-2025-59474 via org.jenkins-ci.main:jenkins-core (1.398)

org.jenkins-ci.main:jenkins-core MAVEN version 1.398 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.thalesgroup.jenkins-ci.plugins:cppcheck 0.15 - com.thalesgroup.jenkins-ci.plugins:xunit 1.1...

org.jenkins-ci.main:jenkins-test-harness (1.422), org.jenkins-ci.main:jenkins-war (1.422) +3 more potentially affected by CVE-2025-59476 via org.jenkins-ci.main:jenkins-core (1.422)

org.jenkins-ci.main:jenkins-core MAVEN version 1.422 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.422 - org.jenkins-ci.main:jenkins-war 1.422 -...

org.jenkins-ci.main:jenkins-test-harness (1.549), org.jenkins-ci.main:jenkins-war (1.549) +1 more potentially affected by CVE-2025-59475 via org.jenkins-ci.main:jenkins-core (1.549)

org.jenkins-ci.main:jenkins-core MAVEN version 1.549 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.549 - org.jenkins-ci.main:jenkins-war 1.549 -...

com.dubture.jenkins:digitalocean-plugin (>=0.9, <=0.12), com.inkysea.vmware.vra:vmware-vrealize-automation-plugin (>=1.2.1, <=1.2.3) +8 more potentially affected by CVE-2025-59474 via org.jenkins-ci.main:jenkins-core (1.642.2)

org.jenkins-ci.main:jenkins-core MAVEN version 1.642.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.dubture.jenkins:digitalocean-plugin =0.9, =1.2.1, =0.0.8, =0.6, =2.4.2, =1.13-alpha, =0.1...

de.einsundeins.jenkins.plugins.failedjobdeactivator:failedjobdeactivator (>=1.0, <=1.2.1), de.esailors.jenkins:test-stability (2.3) +8 more potentially affected by CVE-2025-59474 via org.jenkins-ci.main:jenkins-core (1.607)

org.jenkins-ci.main:jenkins-core MAVEN version 1.607 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - de.einsundeins.jenkins.plugins.failedjobdeactivator:failedjobdeactivator =1.0, =1.20, =0.12.0,...

org.jenkins-ci.main:jenkins-test-harness (1.593), org.jenkins-ci.main:jenkins-war (1.593) +1 more potentially affected by CVE-2025-59475 via org.jenkins-ci.main:jenkins-core (1.593)

org.jenkins-ci.main:jenkins-core MAVEN version 1.593 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.593 - org.jenkins-ci.main:jenkins-war 1.593 -...

com.github.bogdanlivadariu:bootstraped-multi-test-results-report (>=1.0.0, <=1.3.4), org.jenkins-ci.main:jenkins-test-harness (1.616) +2 more potentially affected by CVE-2025-59476 via org.jenkins-ci.main:jenkins-core (1.616)

org.jenkins-ci.main:jenkins-core MAVEN version 1.616 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.github.bogdanlivadariu:bootstraped-multi-test-results-report =1.0.0, =1.3.4 -...

com.github.bogdanlivadariu:bootstraped-multi-test-results-report (>=1.0.0, <=1.3.4), org.jenkins-ci.main:jenkins-test-harness (1.616) +2 more potentially affected by CVE-2025-59474 via org.jenkins-ci.main:jenkins-core (1.616)

org.jenkins-ci.main:jenkins-core MAVEN version 1.616 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.github.bogdanlivadariu:bootstraped-multi-test-results-report =1.0.0, =1.3.4 -...

org.jenkins-ci.main:jenkins-test-harness (1.634), org.jenkins-ci.main:jenkins-war (1.634) +1 more potentially affected by CVE-2025-59476 via org.jenkins-ci.main:jenkins-core (1.634)

org.jenkins-ci.main:jenkins-core MAVEN version 1.634 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.634 - org.jenkins-ci.main:jenkins-war 1.634 -...

org.jenkins-ci.main:jenkins-test-harness (1.637), org.jenkins-ci.main:jenkins-war (1.637) +1 more potentially affected by CVE-2025-59474 via org.jenkins-ci.main:jenkins-core (1.637)

org.jenkins-ci.main:jenkins-core MAVEN version 1.637 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.637 - org.jenkins-ci.main:jenkins-war 1.637 -...

org.jenkins-ci.main:jenkins-test-harness (1.641), org.jenkins-ci.main:jenkins-war (1.641) +2 more potentially affected by CVE-2025-59475 via org.jenkins-ci.main:jenkins-core (1.641)

org.jenkins-ci.main:jenkins-core MAVEN version 1.641 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.641 - org.jenkins-ci.main:jenkins-war 1.641 -...

org.jenkins-ci.main:jenkins-test-harness (1.640), org.jenkins-ci.main:jenkins-war (1.640) +1 more potentially affected by CVE-2025-59476 via org.jenkins-ci.main:jenkins-core (1.640)

org.jenkins-ci.main:jenkins-core MAVEN version 1.640 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.640 - org.jenkins-ci.main:jenkins-war 1.640 -...

org.jenkins-ci.main:jenkins-test-harness (1.606), org.jenkins-ci.main:jenkins-war (1.606) +1 more potentially affected by CVE-2025-59474 via org.jenkins-ci.main:jenkins-core (1.606)

org.jenkins-ci.main:jenkins-core MAVEN version 1.606 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.606 - org.jenkins-ci.main:jenkins-war 1.606 -...

org.jenkins-ci.main:jenkins-test-harness (1.589), org.jenkins-ci.main:jenkins-war (1.589) +1 more potentially affected by CVE-2025-59476 via org.jenkins-ci.main:jenkins-core (1.589)

org.jenkins-ci.main:jenkins-core MAVEN version 1.589 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.589 - org.jenkins-ci.main:jenkins-war 1.589 -...

Path Traversal

github.com/mattermost/mattermost-server is vulnerable to Path Traversal. The vulnerability is due to improper validation of file paths during plugin import operations, which allows an attacker with restricted admin privileges to install unauthorized custom plugins by bypassing plugin signature...

Important: Red Hat Security Advisory: Red Hat Developer Hub 1.7.1 release.

Red Hat Developer Hub 1.7.1 has been released. Red Hat Developer Hub RHDH is Red Hat's enterprise-grade, self-managed, customizable developer portal based on Backstage.io. RHDH is supported on OpenShift and other major Kubernetes clusters AKS, EKS, GKE. The core features of RHDH include a single...

Medium: gstreamer1-plugins-base

Issue Overview: In GStreamer through 1.26.1, the subparse plugin's parsesubriptime function may write data past the bounds of a stack buffer, leading to a crash. CVE-2025-47806 In GStreamer through 1.26.1, the subparse plugin's subripunescapeformatting function may dereference a NULL pointer whil...