com.paul8620.jenkins.plugins:pipeline-aggregator-view (>=1.0, <=1.4.1), com.splunk.splunkins:splunk-devops-extend (>=1.0, <=1.4.3) +38 more potentially affected by CVE-2026-42519 via org.jenkins-ci.plugins:script-security (1.16)

org.jenkins-ci.plugins:script-security MAVEN version 1.16 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - com.paul8620.jenkins.plugins:pipeline-aggregator-view =1.0, =1.0, =2.5.8, =1.22,...

com.lookout.jenkins:environment-script (>=1.2.4, <=1.2.6), com.mig82:folder-properties (>=1.0, <=1.2.1) +25 more potentially affected by CVE-2025-67639 via org.jenkins-ci.main:jenkins-core (1.642.4)

org.jenkins-ci.main:jenkins-core MAVEN version 1.642.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.lookout.jenkins:environment-script =1.2.4, =1.0, =1.0.3, =1.0, =1.0, =1.0, =1.4, =1.4,...

com.lookout.jenkins:environment-script (>=1.2.4, <=1.2.6), com.mig82:folder-properties (>=1.0, <=1.2.1) +25 more potentially affected by CVE-2025-31720 via org.jenkins-ci.main:jenkins-core (1.642.4)

org.jenkins-ci.main:jenkins-core MAVEN version 1.642.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.lookout.jenkins:environment-script =1.2.4, =1.0, =1.0.3, =1.0, =1.0, =1.0, =1.4, =1.4,...

com.splunk.splunkins:splunk-devops-extend (>=1.0, <=1.7.0), org.jenkins-ci.plugins.pipeline-stage-view:pipeline-rest-api (>=1.8-beta-1, <=2.11) +2 more potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (2.2)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - com.splunk.splunkins:splunk-devops-extend =1.0, =1.8-beta-1, =1.8-beta-1,...

com.splunk.splunkins:splunk-devops-extend (>=1.0, <=1.7.0), org.jenkins-ci.plugins.pipeline-stage-view:pipeline-rest-api (>=1.8-beta-1, <=2.11) +2 more potentially affected by CVE-2022-43401 via org.jenkins-ci.plugins.workflow:workflow-cps (2.2)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - com.splunk.splunkins:splunk-devops-extend =1.0, =1.8-beta-1, =1.8-beta-1,...

com.lookout.jenkins:environment-script (>=1.2.4, <=1.2.6), com.mig82:folder-properties (>=1.0, <=1.2.1) +25 more potentially affected by CVE-2022-34174 via org.jenkins-ci.main:jenkins-core (1.642.4)

org.jenkins-ci.main:jenkins-core MAVEN version 1.642.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.lookout.jenkins:environment-script =1.2.4, =1.0, =1.0.3, =1.0, =1.0, =1.0, =1.4, =1.4,...

com.lookout.jenkins:environment-script (>=1.2.4, <=1.2.6), com.mig82:folder-properties (>=1.0, <=1.2.1) +25 more potentially affected by CVE-2021-21671 via org.jenkins-ci.main:jenkins-core (1.642.4)

org.jenkins-ci.main:jenkins-core MAVEN version 1.642.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.lookout.jenkins:environment-script =1.2.4, =1.0, =1.0.3, =1.0, =1.0, =1.0, =1.4, =1.4,...

com.lookout.jenkins:environment-script (>=1.2.4, <=1.2.6), com.mig82:folder-properties (>=1.0, <=1.2.1) +25 more potentially affected by CVE-2020-2220 via org.jenkins-ci.main:jenkins-core (1.642.4)

org.jenkins-ci.main:jenkins-core MAVEN version 1.642.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.lookout.jenkins:environment-script =1.2.4, =1.0, =1.0.3, =1.0, =1.0, =1.0, =1.4, =1.4,...

com.splunk.splunkins:splunk-devops-extend (>=1.0, <=1.7.0) potentially affected by CVE-2019-10390 via com.splunk.splunkins:splunk-devops (>=1.0, <=1.7.0)

com.splunk.splunkins:splunk-devops MAVEN version =1.0, =1.0, =1.7.0 Source cves: CVE-2019-10390 Source advisory: OSV:GHSA-CJR8-5RW4-WH65...

com.splunk.splunkins:splunk-devops-extend (>=1.0, <=1.7.0) potentially affected by CVE-2019-10390 via com.splunk.splunkins:splunk-devops (>=1.0, <=1.7.0)

com.splunk.splunkins:splunk-devops MAVEN version =1.0, =1.0, =1.7.0 Source cves: CVE-2019-10390 Source advisory: GHSA-CJR8-5RW4-WH65...

com.splunk.splunkins:splunk-devops-extend (>=1.0, <=1.7.0), org.jenkins-ci.plugins.pipeline-stage-view:pipeline-rest-api (>=1.8-beta-1, <=2.11) +2 more potentially affected by CVE-2022-30945 via org.jenkins-ci.plugins.workflow:workflow-cps (2.2)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - com.splunk.splunkins:splunk-devops-extend =1.0, =1.8-beta-1, =1.8-beta-1,...

com.lookout.jenkins:environment-script (>=1.2.4, <=1.2.6), com.mig82:folder-properties (>=1.0, <=1.2.1) +25 more potentially affected by CVE-2012-6153 +1 more via org.jenkins-ci.main:jenkins-core (1.642.4)

org.jenkins-ci.main:jenkins-core MAVEN version 1.642.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.lookout.jenkins:environment-script =1.2.4, =1.0, =1.0.3, =1.0, =1.0, =1.0, =1.4, =1.4,...

com.splunk.splunkins:splunk-devops-extend (>=1.0, <=1.7.0), org.jenkins-ci.plugins.pipeline-stage-view:pipeline-rest-api (>=1.8-beta-1, <=2.11) +2 more potentially affected by CVE-2022-25180 via org.jenkins-ci.plugins.workflow:workflow-cps (2.2)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - com.splunk.splunkins:splunk-devops-extend =1.0, =1.8-beta-1, =1.8-beta-1,...

com.splunk.splunkins:splunk-devops-extend (>=1.0, <=1.7.0) potentially affected by CVE-2019-10390 via com.splunk.splunkins:splunk-devops (>=1.0, <=1.7.0)

com.splunk.splunkins:splunk-devops MAVEN version =1.0, =1.0, =1.7.0 Source cves: CVE-2019-10390 Source advisory: MEND:CVE-2019-10390...

Sandbox Bypass in splunk-devops

splunk-devops has a form validation HTTP endpoint used to validate a user-submitted Groovy script through compilation, which was not subject to sandbox protection. This allowed attackers with Overall/Read access to execute arbitrary code on the Jenkins controller by applying AST transforming...