org.jenkins-ci.plugins:list-git-branches-parameter (>=0.0.7, <=0.0.11), org.jenkins-ci.plugins:templating-engine (>=1.6, <=2.2.1.1) +1 more potentially affected by CVE-2022-36883 via org.jenkins-ci.plugins:git (3.9.3)

org.jenkins-ci.plugins:git MAVEN version 3.9.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:list-git-branches-parameter =0.0.7, =1.6, =0.9.8, =0.9.10 Source cves: CVE-2022-3688...

org.jenkins-ci.plugins:stashnotifier (1.16), org.jenkins-ci.plugins:templating-engine (>=2.3, <=2.5.3) potentially affected by CVE-2022-36881 via org.jenkins-ci.plugins:git-client (>=3.0.0-rc, <=3.2.1)

org.jenkins-ci.plugins:git-client MAVEN version =3.0.0-rc, =2.3, =2.5.3 Source cves: CVE-2022-36881 Source advisory: OSV:GHSA-CM7J-P8HC-97VJ...

org.jenkins-ci.plugins:stashnotifier (1.16), org.jenkins-ci.plugins:templating-engine (>=2.3, <=2.5.3) potentially affected by CVE-2022-36881 via org.jenkins-ci.plugins:git-client (>=3.0.0-rc, <=3.2.1)

org.jenkins-ci.plugins:git-client MAVEN version =3.0.0-rc, =2.3, =2.5.3 Source cves: CVE-2022-36881 Source advisory: GHSA-CM7J-P8HC-97VJ...

[SECURITY] Fedora 35 Update: golang-github-eknkc-amber-0-0.17.20190601gitcdade1c.fc35

Amber is an elegant templating engine for Go Programming Language It is inspi red from HAML and Jade...

[SECURITY] Fedora 36 Update: golang-github-eknkc-amber-0-0.17.20190601gitcdade1c.fc36

Amber is an elegant templating engine for Go Programming Language It is inspi red from HAML and Jade...

org.jenkins-ci.plugins:templating-engine (>=2.3, <=2.5.3) potentially affected by CVE-2022-34177 via org.jenkins-ci.plugins:pipeline-input-step (2.12)

org.jenkins-ci.plugins:pipeline-input-step MAVEN version 2.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:pipeline-input-step and may be impacted: - org.jenkins-ci.plugins:templating-engine =2.3, =2.5.3 Source cves:...

org.jenkins-ci.plugins:junit-realtime-test-reporter (0.6), org.jenkins-ci.plugins:templating-engine (>=1.6, <=2.5.3) potentially affected by CVE-2022-34176 via org.jenkins-ci.plugins:junit (1.24)

org.jenkins-ci.plugins:junit MAVEN version 1.24 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:junit and may be impacted: - org.jenkins-ci.plugins:junit-realtime-test-reporter 0.6 - org.jenkins-ci.plugins:templating-engine =1.6,...

Remote code execution vulnerability in Jenkins Templating Engine Plugin

Jenkins Templating Engine Plugin 2.1 and earlier does not protect its pipeline configurations using Script Security Plugin. This vulnerability allows attackers with Job/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM. Jenkins Templating Engine Plugin 2....

GHSA-P6QC-37HQ-WQR6 Remote code execution vulnerability in Jenkins Templating Engine Plugin

Jenkins Templating Engine Plugin 2.1 and earlier does not protect its pipeline configurations using Script Security Plugin. This vulnerability allows attackers with Job/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM. Jenkins Templating Engine Plugin 2....

org.jenkins-ci.plugins:list-git-branches-parameter (>=0.0.7, <=0.0.11), org.jenkins-ci.plugins:templating-engine (>=1.6, <=2.2.1.1) +1 more potentially affected by CVE-2020-2136 via org.jenkins-ci.plugins:git (3.9.3)

org.jenkins-ci.plugins:git MAVEN version 3.9.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:list-git-branches-parameter =0.0.7, =1.6, =0.9.8, =0.9.10 Source cves: CVE-2020-2136...

org.jenkins-ci.plugins:templating-engine (>=2.2, <=2.5.3) potentially affected by CVE-2022-30946 via org.jenkins-ci.plugins:script-security (1.76)

org.jenkins-ci.plugins:script-security MAVEN version 1.76 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins:templating-engine =2.2, =2.5.3 Source cves: CVE-2022-30946...

org.jenkins-ci.plugins:templating-engine (>=1.6, <=2.5.3) potentially affected by CVE-2022-30945 via org.jenkins-ci.plugins.workflow:workflow-cps (2.53)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 2.53 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins:templating-engine =1.6, =2.5.3 Source cves:...

org.jenkins-ci.plugins:templating-engine (>=1.6, <=2.1) potentially affected by CVE-2022-30946 via org.jenkins-ci.plugins:script-security (1.42)

org.jenkins-ci.plugins:script-security MAVEN version 1.42 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins:templating-engine =1.6, =2.1 Source cves: CVE-2022-30946 Sour...

[SECURITY] Fedora 35 Update: esh-0.3.2-1.fc35

esh embedded shell is a templating engine for evaluating shell commands embedded in arbitrary templates. It=EF=BF=BD=EF=BF=BD=EF=BF=BDs like ERB Emb edded RuBy for shell, intended to be used for templating configuration files...

[SECURITY] Fedora 34 Update: esh-0.3.2-1.fc34

esh embedded shell is a templating engine for evaluating shell commands embedded in arbitrary templates. It=EF=BF=BD=EF=BF=BD=EF=BF=BDs like ERB Emb edded RuBy for shell, intended to be used for templating configuration files...

Antaris RazorEngine has an unspecified vulnerability

Antaris RazorEngine is an open source templating engine based on Microsoft's Razor parsing engine from Matthew Abbott, a personal developer in the U.K. Antaris RazorEngine contains a security vulnerability that could be exploited by attackers to execute arbitrary .NET code in a sandboxed...

org.jenkins-ci.plugins:templating-engine (>=1.6, <=2.5.3), org.waveywaves.jenkins.plugins:tekton-client (1.1.0) potentially affected by CVE-2022-25175 via org.jenkins-ci.plugins.workflow:workflow-multibranch (2.20)

org.jenkins-ci.plugins.workflow:workflow-multibranch MAVEN version 2.20 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-multibranch and may be impacted: - org.jenkins-ci.plugins:templating-engine =1.6, =2.5.3 -...

org.jenkins-ci.plugins:templating-engine (>=1.6, <=2.5.3) potentially affected by CVE-2022-25180 via org.jenkins-ci.plugins.workflow:workflow-cps (2.53)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 2.53 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins:templating-engine =1.6, =2.5.3 Source cves:...

GHSA-66HF-2P6W-JQFW Laravel Framework XSS in Blade templating engine

A security researcher has disclosed a possible XSS vulnerability in the Blade templating engine. Given the following two Blade templates: resources/views/parent.blade.php: html @section'content' @show resources/views/child.blade.php: html @extends'parent' @section'content' @endsection And a route...

CVE-2021-43808

Laravel is a web application framework. Laravel prior to versions 8.75.0, 7.30.6, and 6.20.42 contain a possible cross-site scripting XSS vulnerability in the Blade templating engine. A broken HTML element may be clicked and the user taken to another location in their browser due to XSS. This is...