org.jenkins-ci.main:jenkins-test-harness (1.641), org.jenkins-ci.main:jenkins-war (1.641) +2 more potentially affected by CVE-2025-59475 via org.jenkins-ci.main:jenkins-core (1.641)

org.jenkins-ci.main:jenkins-core MAVEN version 1.641 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.641 - org.jenkins-ci.main:jenkins-war 1.641 -...

org.jenkins-ci.main:jenkins-test-harness (1.636), org.jenkins-ci.main:jenkins-war (1.636) +1 more potentially affected by CVE-2025-59476 via org.jenkins-ci.main:jenkins-core (1.636)

org.jenkins-ci.main:jenkins-core MAVEN version 1.636 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.636 - org.jenkins-ci.main:jenkins-war 1.636 -...

com.github.bogdanlivadariu:bootstraped-multi-test-results-report (>=1.0.0, <=1.3.4), org.jenkins-ci.main:jenkins-test-harness (1.616) +2 more potentially affected by CVE-2025-59476 via org.jenkins-ci.main:jenkins-core (1.616)

org.jenkins-ci.main:jenkins-core MAVEN version 1.616 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.github.bogdanlivadariu:bootstraped-multi-test-results-report =1.0.0, =1.3.4 -...

org.jenkins-ci.main:jenkins-test-harness (1.630), org.jenkins-ci.main:jenkins-war (1.630) +1 more potentially affected by CVE-2025-59476 via org.jenkins-ci.main:jenkins-core (1.630)

org.jenkins-ci.main:jenkins-core MAVEN version 1.630 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.630 - org.jenkins-ci.main:jenkins-war 1.630 -...

com.piketec.jenkins.plugins:piketec-tpt (6.3), org.datadog.jenkins.plugins:datadog (>=1.1.2, <=1.2.0) +4 more potentially affected by CVE-2025-59475 via org.jenkins-ci.main:jenkins-core (1.632)

org.jenkins-ci.main:jenkins-core MAVEN version 1.632 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.piketec.jenkins.plugins:piketec-tpt 6.3 - org.datadog.jenkins.plugins:datadog =1.1.2, =1.0,...

com.sonyericsson.hudson.plugins.gerrit:gerrit-trigger (2.22.0-beta-1), io.jenkins.plugins:screenrecorder (>=0.3, <=0.7) +14 more potentially affected by CVE-2025-59475 via org.jenkins-ci.main:jenkins-core (1.625)

org.jenkins-ci.main:jenkins-core MAVEN version 1.625 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.sonyericsson.hudson.plugins.gerrit:gerrit-trigger 2.22.0-beta-1 -...

com.amazonaws:codedeploy (>=1.17, <=1.23), hudson.plugins.octopusdeploy:octopusdeploy (>=1.3.0, <=1.4.0) +6 more potentially affected by CVE-2025-59476 via org.jenkins-ci.main:jenkins-core (1.612)

org.jenkins-ci.main:jenkins-core MAVEN version 1.612 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.amazonaws:codedeploy =1.17, =1.3.0, =2.7.0, =1.0, =1.4 -...

com.piketec.jenkins.plugins:piketec-tpt (6.3), org.datadog.jenkins.plugins:datadog (>=1.1.2, <=1.2.0) +4 more potentially affected by CVE-2025-59476 via org.jenkins-ci.main:jenkins-core (1.632)

org.jenkins-ci.main:jenkins-core MAVEN version 1.632 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.piketec.jenkins.plugins:piketec-tpt 6.3 - org.datadog.jenkins.plugins:datadog =1.1.2, =1.0,...

org.jenkins-ci.main:jenkins-test-harness (1.588), org.jenkins-ci.main:jenkins-war (1.588) +1 more potentially affected by CVE-2025-59476 via org.jenkins-ci.main:jenkins-core (1.588)

org.jenkins-ci.main:jenkins-core MAVEN version 1.588 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.588 - org.jenkins-ci.main:jenkins-war 1.588 -...

de.einsundeins.jenkins.plugins.failedjobdeactivator:failedjobdeactivator (>=1.0, <=1.2.1), de.esailors.jenkins:test-stability (2.3) +8 more potentially affected by CVE-2025-59474 via org.jenkins-ci.main:jenkins-core (1.607)

org.jenkins-ci.main:jenkins-core MAVEN version 1.607 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - de.einsundeins.jenkins.plugins.failedjobdeactivator:failedjobdeactivator =1.0, =1.20, =0.12.0,...

org.jenkins-ci.main:jenkins-test-harness (1.542), org.jenkins-ci.main:jenkins-war (1.542) +2 more potentially affected by CVE-2025-59474 via org.jenkins-ci.main:jenkins-core (1.542)

org.jenkins-ci.main:jenkins-core MAVEN version 1.542 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.542 - org.jenkins-ci.main:jenkins-war 1.542 -...

org.jenkins-ci.main:jenkins-test-harness (1.562), org.jenkins-ci.main:jenkins-war (1.562) +1 more potentially affected by CVE-2025-59474 via org.jenkins-ci.main:jenkins-core (1.562)

org.jenkins-ci.main:jenkins-core MAVEN version 1.562 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.562 - org.jenkins-ci.main:jenkins-war 1.562 -...

org.jenkins-ci.main:jenkins-test-harness (1.495), org.jenkins-ci.main:jenkins-war (1.495) +6 more potentially affected by CVE-2025-59474 via org.jenkins-ci.main:jenkins-core (1.495)

org.jenkins-ci.main:jenkins-core MAVEN version 1.495 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.495 - org.jenkins-ci.main:jenkins-war 1.495 -...

org.jenkins-ci.main:jenkins-test-harness (1.497), org.jenkins-ci.main:jenkins-war (1.497) +3 more potentially affected by CVE-2025-59474 via org.jenkins-ci.main:jenkins-core (1.497)

org.jenkins-ci.main:jenkins-core MAVEN version 1.497 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.497 - org.jenkins-ci.main:jenkins-war 1.497 -...

com.amazonaws:codedeploy (>=1.17, <=1.23), hudson.plugins.octopusdeploy:octopusdeploy (>=1.3.0, <=1.4.0) +6 more potentially affected by CVE-2025-59474 via org.jenkins-ci.main:jenkins-core (1.612)

org.jenkins-ci.main:jenkins-core MAVEN version 1.612 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.amazonaws:codedeploy =1.17, =1.3.0, =2.7.0, =1.0, =1.4 -...

org.jenkins-ci.main:jenkins-test-harness (1.606), org.jenkins-ci.main:jenkins-war (1.606) +1 more potentially affected by CVE-2025-59474 via org.jenkins-ci.main:jenkins-core (1.606)

org.jenkins-ci.main:jenkins-core MAVEN version 1.606 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.606 - org.jenkins-ci.main:jenkins-war 1.606 -...

com.dubture.jenkins:digitalocean-plugin (>=0.9, <=0.12), com.inkysea.vmware.vra:vmware-vrealize-automation-plugin (>=1.2.1, <=1.2.3) +8 more potentially affected by CVE-2025-59474 via org.jenkins-ci.main:jenkins-core (1.642.2)

org.jenkins-ci.main:jenkins-core MAVEN version 1.642.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.dubture.jenkins:digitalocean-plugin =0.9, =1.2.1, =0.0.8, =0.6, =2.4.2, =1.13-alpha, =0.1...

Path Traversal

github.com/mattermost/mattermost-server is vulnerable to Path Traversal. The vulnerability is due to improper validation of file paths during plugin import operations, which allows an attacker with restricted admin privileges to install unauthorized custom plugins by bypassing plugin signature...

Important: Red Hat Security Advisory: Red Hat Developer Hub 1.7.1 release.

Red Hat Developer Hub 1.7.1 has been released. Red Hat Developer Hub RHDH is Red Hat's enterprise-grade, self-managed, customizable developer portal based on Backstage.io. RHDH is supported on OpenShift and other major Kubernetes clusters AKS, EKS, GKE. The core features of RHDH include a single...

Medium: gstreamer1-plugins-base

Issue Overview: In GStreamer through 1.26.1, the subparse plugin's parsesubriptime function may write data past the bounds of a stack buffer, leading to a crash. CVE-2025-47806 In GStreamer through 1.26.1, the subparse plugin's subripunescapeformatting function may dereference a NULL pointer whil...