org.jenkins-ci.plugins:stashnotifier (1.16) potentially affected by CVE-2022-30947 via org.jenkins-ci.plugins:git (4.0.0-rc)

org.jenkins-ci.plugins:git MAVEN version 4.0.0-rc is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:stashnotifier 1.16 Source cves: CVE-2022-30947 Source advisory: GHSA-84CM-VJWM-M9...

org.jenkins-ci.plugins:stashnotifier (1.16) potentially affected by CVE-2022-30947 via org.jenkins-ci.plugins:git (4.0.0-rc)

org.jenkins-ci.plugins:git MAVEN version 4.0.0-rc is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:stashnotifier 1.16 Source cves: CVE-2022-30947 Source advisory:...

com.coravy.hudson.plugins.github:github (>=1.9, <=1.13.3), com.elasticbox.jenkins-ci.plugins:elasticbox (>=4.0.9, <=4.1.0) +5 more potentially affected by CVE-2017-1000242 via org.jenkins-ci.plugins:git-client (1.4.4)

org.jenkins-ci.plugins:git-client MAVEN version 1.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - com.coravy.hudson.plugins.github:github =1.9, =4.0.9, =0.9.14, =1.8, =1.4.0, =1.4.2 Source...