de.esailors.jenkins:test-stability (2.4), io.jenkins.blueocean:blueocean-rest-impl (>=1.27.17, <=1.27.18) +20 more potentially affected by CVE-2026-42519 via org.jenkins-ci.plugins:script-security (1335.vf07d9ce377a_e)

org.jenkins-ci.plugins:script-security MAVEN version 1335.vf07d9ce377ae is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - de.esailors.jenkins:test-stability 2.4 -...

com.openshift.jenkins.plugins:openshift-client (>=1.1.0.420.v8817277c1990, <=1.1.0.422.va_241c0c97580), com.paul8620.jenkins.plugins:pipeline-aggregator-view (104.v94a_e5f6cdb_c3) +45 more potentially affected by CVE-2026-42519 via org.jenkins-ci.plugins:script-security (1251.vfe552ed55f8d)

org.jenkins-ci.plugins:script-security MAVEN version 1251.vfe552ed55f8d is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - com.openshift.jenkins.plugins:openshift-client =1.1.0.420.v8817277c199...

org.jenkins-ci.plugins:applitools-eyes (1.16.4) potentially affected by CVE-2026-42519 via org.jenkins-ci.plugins:script-security (1145.vb_cf6cf6ed960)

org.jenkins-ci.plugins:script-security MAVEN version 1145.vbcf6cf6ed960 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins:applitools-eyes 1.16.4 Source cves:...

org.jenkins-ci.plugins:templating-engine (>=2.2, <=2.5.3) potentially affected by CVE-2026-42519 via org.jenkins-ci.plugins:script-security (1.76)

org.jenkins-ci.plugins:script-security MAVEN version 1.76 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins:templating-engine =2.2, =2.5.3 Source cves: CVE-2026-42519...

org.jenkins-ci.plugins:github-oauth (>=647.v44f5236c308d, <=651.v135e939e8b_60) potentially affected by CVE-2026-42522 via org.jenkins-ci.plugins:github-branch-source (1810.v913311241fa_9)

org.jenkins-ci.plugins:github-branch-source MAVEN version 1810.v913311241fa9 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - org.jenkins-ci.plugins:github-oauth =647.v44f5236c308d,...

org.jenkins-ci.plugins:github-organization-folder (1.6) potentially affected by CVE-2026-42522 via org.jenkins-ci.plugins:github-branch-source (2.0.0)

org.jenkins-ci.plugins:github-branch-source MAVEN version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - org.jenkins-ci.plugins:github-organization-folder 1.6 Source cves:...

org.jenkins-ci.plugins:github-oauth (611.v70d151e60ec4) potentially affected by CVE-2026-42522 via org.jenkins-ci.plugins:github-branch-source (1793.v1831e9c68d77)

org.jenkins-ci.plugins:github-branch-source MAVEN version 1793.v1831e9c68d77 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - org.jenkins-ci.plugins:github-oauth 611.v70d151e60ec4 Source...

org.jenkins-ci.plugins.workflow:workflow-aggregator (>=1.1, <=1.2), org.jenkins-ci.plugins.workflow:workflow-cps (>=1.1, <=1.2) +1 more potentially affected by CVE-2026-42519 via org.jenkins-ci.plugins:script-security (1.12)

org.jenkins-ci.plugins:script-security MAVEN version 1.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator =1.1, =1.1, =1.1, =1.2 Source...

com.openshift.jenkins:openshift-pipeline (>=1.0.14, <=1.0.57), org.jenkins-ci.plugins.workflow:workflow-aggregator (>=1.10-beta-1, <=1.13) +20 more potentially affected by CVE-2026-42519 via org.jenkins-ci.plugins:script-security (1.15)

org.jenkins-ci.plugins:script-security MAVEN version 1.15 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - com.openshift.jenkins:openshift-pipeline =1.0.14, =1.10-beta-1, =1.10-beta-1,...

org.jenkins-ci.plugins:github-oauth (621.v33b_4394dda_4d) potentially affected by CVE-2026-42522 via org.jenkins-ci.plugins:github-branch-source (1797.v86fdb_4d57d43)

org.jenkins-ci.plugins:github-branch-source MAVEN version 1797.v86fdb4d57d43 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - org.jenkins-ci.plugins:github-oauth 621.v33b4394dda4d Source...

org.biouno:uno-choice (1.5-alpha-1), org.jenkins-ci.plugins:ansible-tower (>=0.5.0, <=0.12.0) +7 more potentially affected by CVE-2026-42519 via org.jenkins-ci.plugins:script-security (1.17)

org.jenkins-ci.plugins:script-security MAVEN version 1.17 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.biouno:uno-choice 1.5-alpha-1 - org.jenkins-ci.plugins:ansible-tower =0.5.0, =1....

io.jenkins.plugins:mergify (>=1.83.v5b_ff0e55cd2d, <=1.95.v8b_31e80441fb), org.jenkins-ci.plugins:github-oauth (>=683.v04a_a_b_e9d7e07, <=685.v53b_070455063) potentially affected by CVE-2026-42522 via org.jenkins-ci.plugins:github-branch-source (1824.v046257273408)

org.jenkins-ci.plugins:github-branch-source MAVEN version 1824.v046257273408 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - io.jenkins.plugins:mergify =1.83.v5bff0e55cd2d,...

com.sonyericsson.hudson.plugins.rebuild:rebuild (>=320.v5a_0933a_e7d61, <=332.va_1ee476d8f6d), de.peass:peass-ci (2.3.9-1285.va_202a_66e21fa) +24 more potentially affected by CVE-2026-42519 via org.jenkins-ci.plugins:script-security (1175.v4b_d517d6db_f0)

org.jenkins-ci.plugins:script-security MAVEN version 1175.v4bd517d6dbf0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - com.sonyericsson.hudson.plugins.rebuild:rebuild =320.v5a0933ae7d61,...

org.jenkinsci.plugins:pipeline-model-definition (>=1.2.6, <=1.2.7), org.waveywaves.jenkins.plugins:tekton-client (1.1.0) potentially affected by CVE-2026-42520 via org.jenkins-ci.plugins:credentials-binding (1.13)

org.jenkins-ci.plugins:credentials-binding MAVEN version 1.13 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials-binding and may be impacted: - org.jenkinsci.plugins:pipeline-model-definition =1.2.6, =1.2.7 -...

@514labs/aurora-mcp (>=0.0.0-dev-nicolas-fix-publishing-aurora-mcp-1750279939, <=0.0.64), @514labs/sloan-mcp (0.0.65) +540 more potentially affected by CVE-2026-41636 via thrift (>=0.6.0-1, <=0.22.0)

thrift NPM version =0.6.0-1, =0.0.0-dev-nicolas-fix-publishing-aurora-mcp-1750279939, =0.9.0, =0.0.1, =0.1.0, =1.0.0-beta.1, =1.0.0-beta.6, =1.0.1, =1.1.0, =0.24.0-no-protobuf-patch.1, =0.18.8, =0.24.0 - @chatopera/node-alchemist 1.0.6 and more Source cves: CVE-2026-41636 Source advisory:...

parley-core (>=0.2.0, <=0.6.1), pqc-combo (0.1.0) +2 more potentially affected by unknown CVE via libcrux-ml-dsa (>=0.0.4, <=0.0.8)

libcrux-ml-dsa CARGO version =0.0.4, =0.2.0, =0.6.1 - pqc-combo 0.1.0 - pqc-fips 0.0.3 - pqc-nostd 0.1.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0126...

@akoskm/create-mcp-server-stdio (>=0.0.5, <=0.0.14), @bazel/create (8.0.2) +43 more potentially affected by CVE-2026-11572 via degit (>=2.1.3, <=2.8.5)

degit NPM version =2.1.3, =0.0.5, =3.0.3, =1.1.0-alpha.0, =1.4.0, =1.0.1, =2.0.5, =1.0.0, =1.5.0, =0.1.0, =17.7.1-alpha.173, =17.7.1-alpha.176, =0.1.1, =1.2.7, =1.3.6 and more Source cves: CVE-2026-11572 Source advisory: SNYK:JS-DEGIT-17116207...

@chrysb/alphaclaw (>=0.8.7, <=0.9.5), @twsxtd/hapi-openclaw (>=0.1.0, <=0.1.8) +2 more potentially affected by CVE-2026-44992 via openclaw (>=2026.4.5, <=2026.4.12)

openclaw NPM version =2026.4.5, =0.8.7, =0.1.0, =0.1.8 - morpho-vault-manager 0.1.0 - openclaw-morpho-vault-manager 0.2.0 Source cves: CVE-2026-44992 Source advisory: OSV:GHSA-H2VW-PH2C-JVWF...

@chrysb/alphaclaw (>=0.8.7, <=0.9.5), @twsxtd/hapi-openclaw (>=0.1.0, <=0.1.8) +2 more potentially affected by CVE-2026-44992 via openclaw (>=2026.4.5, <=2026.4.12)

openclaw NPM version =2026.4.5, =0.8.7, =0.1.0, =0.1.8 - morpho-vault-manager 0.1.0 - openclaw-morpho-vault-manager 0.2.0 Source cves: CVE-2026-44992 Source advisory: SNYK:JS-OPENCLAW-16298042...

arca (>=0.1.0a0, <=0.1.0), mali (>=0.2775.0, <=0.4018.0) +4 more potentially affected by CVE-2026-42284 via gitpython (2.1.7)

gitpython PYPI version 2.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - arca =0.1.0a0, =0.2775.0, =0.2304.0, =0.2304.0, =0.1.0a1, =1.0.0, =1.0.6 Source cves: CVE-2026-42284 Source advisory: OSV:GHSA-X2QX-6953-8485...