io.jenkins.plugins:code-coverage-api (>=4.2.0, <=4.4.0), io.jenkins.plugins:nested-data-reporting (5.2.1) +1 more potentially affected by CVE-2026-57281 via org.jenkins-ci.plugins:script-security (1228.vd93135a_2fb_25)

org.jenkins-ci.plugins:script-security MAVEN version 1228.vd93135a2fb25 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - io.jenkins.plugins:code-coverage-api =4.2.0, =4.4.0 -...

org.jvnet.hudson.plugins:groovy-postbuild (>=2.0, <=2.2.2) potentially affected by CVE-2026-57281 via org.jenkins-ci.plugins:script-security (1.5)

org.jenkins-ci.plugins:script-security MAVEN version 1.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jvnet.hudson.plugins:groovy-postbuild =2.0, =2.2.2 Source cves: CVE-2026-57281...

de.esailors.jenkins:test-stability (2.4), io.jenkins.blueocean:blueocean-rest-impl (>=1.27.17, <=1.27.18) +20 more potentially affected by CVE-2026-57281 via org.jenkins-ci.plugins:script-security (1335.vf07d9ce377a_e)

org.jenkins-ci.plugins:script-security MAVEN version 1335.vf07d9ce377ae is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - de.esailors.jenkins:test-stability 2.4 -...

jp.ikedam.jenkins.plugins:extensible-choice-parameter (>=1.4.0, <=1.8.0), org.jenkins-ci.plugins:extended-choice-parameter (0.65) +4 more potentially affected by CVE-2026-57281 via org.jenkins-ci.plugins:script-security (1.18.1)

org.jenkins-ci.plugins:script-security MAVEN version 1.18.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - jp.ikedam.jenkins.plugins:extensible-choice-parameter =1.4.0, =1.2.3, =1.3.4, =1.9...

io.jenkins.plugins:createos-sandbox (24.vfe318c36a_db_8), io.jenkins.plugins:gitea-checks (606.679.vb_d632867a_6b_b) +10 more potentially affected by CVE-2026-57281 via org.jenkins-ci.plugins:script-security (1402.v94c9ce464861)

org.jenkins-ci.plugins:script-security MAVEN version 1402.v94c9ce464861 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - io.jenkins.plugins:createos-sandbox 24.vfe318c36adb8 -...

au.com.versent.jenkins.plugins:ignore-committer-strategy (29.v7c3891a_434c3), com.coravy.hudson.plugins.github:github (>=1.41.0, <=1.42.0) +52 more potentially affected by CVE-2026-57281 via org.jenkins-ci.plugins:script-security (1362.v67dc1f0e1b_b_3)

org.jenkins-ci.plugins:script-security MAVEN version 1362.v67dc1f0e1bb3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - au.com.versent.jenkins.plugins:ignore-committer-strategy...

org.jenkins-ci.plugins:whitesource (20.8.1) potentially affected by CVE-2026-57281 via org.jenkins-ci.plugins:script-security (1.66)

org.jenkins-ci.plugins:script-security MAVEN version 1.66 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins:whitesource 20.8.1 Source cves: CVE-2026-57281 Source advisor...

org.jenkins-ci.plugins:ant-in-workspace (1.2.2), org.jenkins-ci.plugins:applitools-eyes (>=1.14, <=1.15.1) +1 more potentially affected by CVE-2026-57281 via org.jenkins-ci.plugins:script-security (1.75)

org.jenkins-ci.plugins:script-security MAVEN version 1.75 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins:ant-in-workspace 1.2.2 - org.jenkins-ci.plugins:applitools-ey...

Jenkins Script Security Plugin has a script security bypass vulnerability

Jenkins Script Security Plugin 1402.v94c9ce464861 and earlier does not reject Groovy AST transformation annotations such as @CompileStatic and @TypeChecked that carry an extensions member, which causes Groovy to load and execute a script from the classpath at compile time, before the sandbox is...

org.jenkins-ci.plugins.workflow:workflow-basic-steps (>=1017.vb_45b_302f0cea, <=1058.vcb_fc1e3a_21a_9), org.jenkins-ci.plugins.workflow:workflow-durable-task-step (>=1246.v5524618ea_097, <=1247.v7f9dfea_b_4fd0) potentially affected by CVE-2026-57281 via org.jenkins-ci.plugins:script-security (1189.vb_a_b_7c8fd5fde)

org.jenkins-ci.plugins:script-security MAVEN version 1189.vbab7c8fd5fde is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-basic-steps...

org.jenkins-ci.plugins:gradle (>=1.37.1, <=1.40) potentially affected by CVE-2026-57281 via org.jenkins-ci.plugins:script-security (1.64)

org.jenkins-ci.plugins:script-security MAVEN version 1.64 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins:gradle =1.37.1, =1.40 Source cves: CVE-2026-57281 Source...

io.jenkins.plugins:secone-sca-sast-security-scanner (>=13.v31f269d5b_52f, <=45.v14200f5b_4b_33), org.6wind.jenkins:lockable-resources (1301.v0e3b_da_4b_4462) +5 more potentially affected by CVE-2026-57281 via org.jenkins-ci.plugins:script-security (1354.va_70a_fe478c7f)

org.jenkins-ci.plugins:script-security MAVEN version 1354.va70afe478c7f is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - io.jenkins.plugins:secone-sca-sast-security-scanner =13.v31f269d5b52f,...

hudson.plugins.octopusdeploy:octopusdeploy (4.0.2), org.jenkins-ci.plugins:badge (>=1.0, <=1.1) +2 more potentially affected by CVE-2026-57281 via org.jenkins-ci.plugins:script-security (1.39)

org.jenkins-ci.plugins:script-security MAVEN version 1.39 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - hudson.plugins.octopusdeploy:octopusdeploy 4.0.2 - org.jenkins-ci.plugins:badge =1.0...

org.jenkins-ci.plugins:extreme-notification (>=1.5, <=1.6), org.jenkins-ci.plugins:junit-realtime-test-reporter (>=0.5, <=0.6) +1 more potentially affected by CVE-2026-57281 via org.jenkins-ci.plugins:script-security (1.33)

org.jenkins-ci.plugins:script-security MAVEN version 1.33 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins:extreme-notification =1.5, =0.5, =3.4.0-beta-1, =3.5.12 Sourc...

com.openshift.jenkins.plugins:openshift-client (1.1.0.413.v3023d27e8434), io.jenkins.plugins:openshift-k8s-credentials (104.v4ff06c65eb_f7) +21 more potentially affected by CVE-2026-57281 via org.jenkins-ci.plugins:script-security (1244.ve463715a_f89c)

org.jenkins-ci.plugins:script-security MAVEN version 1244.ve463715af89c is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - com.openshift.jenkins.plugins:openshift-client 1.1.0.413.v3023d27e8434...

org.6wind.jenkins:lockable-resources (>=1309.ve21874387edf, <=1310.v99ca_947ed698), org.jenkins-ci.plugins:badge (>=2.0, <=2.1) +5 more potentially affected by CVE-2026-57281 via org.jenkins-ci.plugins:script-security (1361.v913100720139)

org.jenkins-ci.plugins:script-security MAVEN version 1361.v913100720139 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.6wind.jenkins:lockable-resources =1309.ve21874387edf, =2.0, =5.5.0...

io.jenkins.plugins:zohosprints (>=1.0, <=1.1.4), org.jenkins-ci.plugins:build-name-setter (2.0.4) +6 more potentially affected by CVE-2026-57281 via org.jenkins-ci.plugins:script-security (1.54)

org.jenkins-ci.plugins:script-security MAVEN version 1.54 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - io.jenkins.plugins:zohosprints =1.0, =2.4, =2.62.1, =2.2, =1.78, =2.0.0, =1.14,...

org.jenkins-ci.plugins:groovy (2.1) potentially affected by CVE-2026-57281 via org.jenkins-ci.plugins:script-security (1.50)

org.jenkins-ci.plugins:script-security MAVEN version 1.50 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins:groovy 2.1 Source cves: CVE-2026-57281 Source advisory:...

com.mig82:folder-properties (57.vde5161ec7a_b_a), com.sonyericsson.jenkins.plugins.bfa:build-failure-analyzer (2.5.3) +24 more potentially affected by CVE-2026-57281 via org.jenkins-ci.plugins:script-security (1336.vf33a_a_9863911)

org.jenkins-ci.plugins:script-security MAVEN version 1336.vf33aa9863911 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - com.mig82:folder-properties 57.vde5161ec7aba -...

com.lookout.jenkins:environment-script (100.v3a_f1a_6a_b_7549), com.sonyericsson.jenkins.plugins.bfa:build-failure-analyzer (>=2.4.2, <=2.5.2) +38 more potentially affected by CVE-2026-57281 via org.jenkins-ci.plugins:script-security (1229.v4880b_b_e905a_6)

org.jenkins-ci.plugins:script-security MAVEN version 1229.v4880bbe905a6 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - com.lookout.jenkins:environment-script 100.v3af1a6ab7549 -...