DRUPAL-CONTRIB-2026-045

The security team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, please read: https://www.drupal.org/node/251466s-becoming-owner-maintainer-or-co-mai...

CVE-2026-46558

Plane is an open-source project management tool. Prior to version 1.3.1, there is a cross-workspace asset authorization bypass lets any authenticated user read, copy, delete, and overwrite assets in other Plane workspaces. This issue has been patched in version 1.3.1...

CVE-2026-46558 Plane: Cross-workspace asset authorization bypass lets any authenticated user read, copy, delete, and overwrite assets in other Plane workspaces

Plane is an open-source project management tool. Prior to version 1.3.1, there is a cross-workspace asset authorization bypass lets any authenticated user read, copy, delete, and overwrite assets in other Plane workspaces. This issue has been patched in version 1.3.1...

EUVD-2026-36066

Plane is an open-source project management tool. Prior to version 1.3.1, there is a cross-workspace asset authorization bypass lets any authenticated user read, copy, delete, and overwrite assets in other Plane workspaces. This issue has been patched in version 1.3.1...

CVE-2026-46558 Plane: Cross-workspace asset authorization bypass lets any authenticated user read, copy, delete, and overwrite assets in other Plane workspaces

Plane is an open-source project management tool. Prior to version 1.3.1, there is a cross-workspace asset authorization bypass lets any authenticated user read, copy, delete, and overwrite assets in other Plane workspaces. This issue has been patched in version 1.3.1...

org.jenkins-ci.main:jenkins-test-harness (1.611), org.jenkins-ci.main:jenkins-war (1.611) +3 more potentially affected by CVE-2026-53442 via org.jenkins-ci.main:jenkins-core (1.611)

org.jenkins-ci.main:jenkins-core MAVEN version 1.611 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.611 - org.jenkins-ci.main:jenkins-war 1.611 -...

org.jenkins-ci.main:jenkins-test-harness (1.611), org.jenkins-ci.main:jenkins-war (1.611) +3 more potentially affected by CVE-2026-53435 via org.jenkins-ci.main:jenkins-core (1.611)

org.jenkins-ci.main:jenkins-core MAVEN version 1.611 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.611 - org.jenkins-ci.main:jenkins-war 1.611 -...

com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin (0.3), org.jenkins-ci.main:jenkins-test-harness (1.554.3) +34 more potentially affected by CVE-2026-53437 via org.jenkins-ci.main:jenkins-core (1.554.3)

org.jenkins-ci.main:jenkins-core MAVEN version 1.554.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin 0.3 -...

com.cloudbees.plugins:build-flow-plugin (0.18), com.companyline.hall.jenkins:hall-jenkins (>=1.0, <=1.2) +35 more potentially affected by CVE-2026-53437 via org.jenkins-ci.main:jenkins-core (1.509.1)

org.jenkins-ci.main:jenkins-core MAVEN version 1.509.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.cloudbees.plugins:build-flow-plugin 0.18 - com.companyline.hall.jenkins:hall-jenkins =1.0...

org.jenkins-ci.main:jenkins-test-harness (1.571), org.jenkins-ci.main:jenkins-war (1.571) +2 more potentially affected by CVE-2026-53437 via org.jenkins-ci.main:jenkins-core (1.571)

org.jenkins-ci.main:jenkins-core MAVEN version 1.571 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.571 - org.jenkins-ci.main:jenkins-war 1.571 -...

org.jenkins-ci.main:jenkins-test-harness (1.585), org.jenkins-ci.main:jenkins-war (1.585) +3 more potentially affected by CVE-2026-53437 via org.jenkins-ci.main:jenkins-core (1.585)

org.jenkins-ci.main:jenkins-core MAVEN version 1.585 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.585 - org.jenkins-ci.main:jenkins-war 1.585 -...

org.jenkins-ci.main:jenkins-test-harness (1.459), org.jenkins-ci.main:jenkins-war (1.459) +5 more potentially affected by CVE-2026-53437 via org.jenkins-ci.main:jenkins-core (1.459)

org.jenkins-ci.main:jenkins-core MAVEN version 1.459 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.459 - org.jenkins-ci.main:jenkins-war 1.459 -...

org.jenkins-ci.main:jenkins-test-harness (1.571), org.jenkins-ci.main:jenkins-war (1.571) +2 more potentially affected by CVE-2026-53435 via org.jenkins-ci.main:jenkins-core (1.571)

org.jenkins-ci.main:jenkins-core MAVEN version 1.571 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.571 - org.jenkins-ci.main:jenkins-war 1.571 -...

org.jenkins-ci.main:jenkins-test-harness (1.559), org.jenkins-ci.main:jenkins-war (1.559) +2 more potentially affected by CVE-2026-53438 via org.jenkins-ci.main:jenkins-core (1.559)

org.jenkins-ci.main:jenkins-core MAVEN version 1.559 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.559 - org.jenkins-ci.main:jenkins-war 1.559 -...

org.jenkins-ci.main:jenkins-test-harness (1.561), org.jenkins-ci.main:jenkins-war (1.561) +2 more potentially affected by CVE-2026-53442 via org.jenkins-ci.main:jenkins-core (1.561)

org.jenkins-ci.main:jenkins-core MAVEN version 1.561 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.561 - org.jenkins-ci.main:jenkins-war 1.561 -...

org.jenkins-ci.main:jenkins-test-harness (1.559), org.jenkins-ci.main:jenkins-war (1.559) +2 more potentially affected by CVE-2026-53435 via org.jenkins-ci.main:jenkins-core (1.559)

org.jenkins-ci.main:jenkins-core MAVEN version 1.559 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.559 - org.jenkins-ci.main:jenkins-war 1.559 -...

org.jenkins-ci.main:jenkins-test-harness (1.559), org.jenkins-ci.main:jenkins-war (1.559) +2 more potentially affected by CVE-2026-53436 via org.jenkins-ci.main:jenkins-core (1.559)

org.jenkins-ci.main:jenkins-core MAVEN version 1.559 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.559 - org.jenkins-ci.main:jenkins-war 1.559 -...

org.jenkins-ci.main:jenkins-test-harness (1.559), org.jenkins-ci.main:jenkins-war (1.559) +2 more potentially affected by CVE-2026-53440 via org.jenkins-ci.main:jenkins-core (1.559)

org.jenkins-ci.main:jenkins-core MAVEN version 1.559 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.559 - org.jenkins-ci.main:jenkins-war 1.559 -...

org.jenkins-ci.main:jenkins-test-harness (1.561), org.jenkins-ci.main:jenkins-war (1.561) +2 more potentially affected by CVE-2026-53437 via org.jenkins-ci.main:jenkins-core (1.561)

org.jenkins-ci.main:jenkins-core MAVEN version 1.561 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.561 - org.jenkins-ci.main:jenkins-war 1.561 -...

org.jenkins-ci.main:jenkins-test-harness (1.561), org.jenkins-ci.main:jenkins-war (1.561) +2 more potentially affected by CVE-2026-53436 via org.jenkins-ci.main:jenkins-core (1.561)

org.jenkins-ci.main:jenkins-core MAVEN version 1.561 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.561 - org.jenkins-ci.main:jenkins-war 1.561 -...