customhistory:customhistory (>=1.1, <=1.3), org.jenkins-ci.main:jenkins-test-harness (1.471) +6 more potentially affected by CVE-2025-67639 via org.jenkins-ci.main:jenkins-core (1.471)

org.jenkins-ci.main:jenkins-core MAVEN version 1.471 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - customhistory:customhistory =1.1, =1.3 - org.jenkins-ci.main:jenkins-test-harness 1.471 -...

org.jenkins-ci.main:jenkins-test-harness (1.432), org.jenkins-ci.main:jenkins-war (1.432) +6 more potentially affected by CVE-2025-67639 via org.jenkins-ci.main:jenkins-core (1.432)

org.jenkins-ci.main:jenkins-core MAVEN version 1.432 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.432 - org.jenkins-ci.main:jenkins-war 1.432 -...

org.jenkins-ci.main:jenkins-test-harness (1.459), org.jenkins-ci.main:jenkins-war (1.459) +5 more potentially affected by CVE-2025-67639 via org.jenkins-ci.main:jenkins-core (1.459)

org.jenkins-ci.main:jenkins-core MAVEN version 1.459 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.459 - org.jenkins-ci.main:jenkins-war 1.459 -...

com.cloudbees.plugins:build-flow-plugin (0.5), org.jenkins-ci.main:jenkins-test-harness (1.463) +5 more potentially affected by CVE-2025-67639 via org.jenkins-ci.main:jenkins-core (1.463)

org.jenkins-ci.main:jenkins-core MAVEN version 1.463 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.cloudbees.plugins:build-flow-plugin 0.5 - org.jenkins-ci.main:jenkins-test-harness 1.463 -...

com.deepshiftlabs.nerrvana:nerrvana-plugin (>=1.02.03, <=1.02.05), net.praqma:drmemory-plugin (>=0.1.0, <=0.1.1) +11 more potentially affected by CVE-2025-67639 via org.jenkins-ci.main:jenkins-core (1.450)

org.jenkins-ci.main:jenkins-core MAVEN version 1.450 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.deepshiftlabs.nerrvana:nerrvana-plugin =1.02.03, =0.1.0, =1.0, =0.3, =1.02r, =1.10, =1.3,...

org.jenkins-ci.main:jenkins-test-harness (1.512), org.jenkins-ci.main:jenkins-war (1.512) +4 more potentially affected by CVE-2025-67639 via org.jenkins-ci.main:jenkins-core (1.512)

org.jenkins-ci.main:jenkins-core MAVEN version 1.512 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.512 - org.jenkins-ci.main:jenkins-war 1.512 -...

org.jenkins-ci.main:jenkins-test-harness (1.462), org.jenkins-ci.main:jenkins-war (1.462) +6 more potentially affected by CVE-2025-67639 via org.jenkins-ci.main:jenkins-core (1.462)

org.jenkins-ci.main:jenkins-core MAVEN version 1.462 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.462 - org.jenkins-ci.main:jenkins-war 1.462 -...

com.groupon.jenkins-ci.plugins:dotci (>=1.0.0, <=1.1.0), org.jenkins-ci.main:jenkins-test-harness (1.502) +5 more potentially affected by CVE-2025-67639 via org.jenkins-ci.main:jenkins-core (1.502)

org.jenkins-ci.main:jenkins-core MAVEN version 1.502 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.groupon.jenkins-ci.plugins:dotci =1.0.0, =0.0.1, =0.0.7 - org.jenkins-ci.plugins:plugin 1.5...

org.jenkins-ci.main:jenkins-test-harness (1.440), org.jenkins-ci.main:jenkins-war (1.440) +9 more potentially affected by CVE-2025-67639 via org.jenkins-ci.main:jenkins-core (1.440)

org.jenkins-ci.main:jenkins-core MAVEN version 1.440 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.440 - org.jenkins-ci.main:jenkins-war 1.440 -...

com.brianfromoregon:caliper-ci (2.2), com.unitedinternet.jenkins.plugins.jobtemplates:jobtemplates (1.0) +13 more potentially affected by CVE-2025-67636 via org.jenkins-ci.main:jenkins-core (1.424.6)

org.jenkins-ci.main:jenkins-core MAVEN version 1.424.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.brianfromoregon:caliper-ci 2.2 -...

org.jenkins-ci.main:jenkins-test-harness (1.456), org.jenkins-ci.main:jenkins-war (1.456) +6 more potentially affected by CVE-2025-67639 via org.jenkins-ci.main:jenkins-core (1.456)

org.jenkins-ci.main:jenkins-core MAVEN version 1.456 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.456 - org.jenkins-ci.main:jenkins-war 1.456 -...

com.cloudbees.plugins:build-flow-plugin (0.5), org.jenkins-ci.main:jenkins-test-harness (1.463) +5 more potentially affected by CVE-2025-67636 via org.jenkins-ci.main:jenkins-core (1.463)

org.jenkins-ci.main:jenkins-core MAVEN version 1.463 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.cloudbees.plugins:build-flow-plugin 0.5 - org.jenkins-ci.main:jenkins-test-harness 1.463 -...

org.jenkins-ci.main:jenkins-test-harness (1.505), org.jenkins-ci.main:jenkins-war (1.505) +6 more potentially affected by CVE-2025-67636 via org.jenkins-ci.main:jenkins-core (1.505)

org.jenkins-ci.main:jenkins-core MAVEN version 1.505 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.505 - org.jenkins-ci.main:jenkins-war 1.505 -...

org.jenkins-ci.main:jenkins-test-harness (1.441), org.jenkins-ci.main:jenkins-war (1.441) +3 more potentially affected by CVE-2025-67639 via org.jenkins-ci.main:jenkins-core (1.441)

org.jenkins-ci.main:jenkins-core MAVEN version 1.441 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.441 - org.jenkins-ci.main:jenkins-war 1.441 -...

org.jenkins-ci.main:jenkins-test-harness (1.487), org.jenkins-ci.main:jenkins-war (1.487) +3 more potentially affected by CVE-2025-67639 via org.jenkins-ci.main:jenkins-core (1.487)

org.jenkins-ci.main:jenkins-core MAVEN version 1.487 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.487 - org.jenkins-ci.main:jenkins-war 1.487 -...

EUVD-2025-202418

Malicious code in mws-common-ui npm...

Malicious code in mws-common-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c1ca345fe8bb8298e9adc0920dea67d420dd5c57f79004c058df12bc365f016 The package mws-common-ui was found to contain malicious code. Source: ghsa-malware 935da08d8dffad1e28679a7043038425705e76dff3808c50361e8a67d02c55f8...

MAL-2025-192433 Malicious code in mws-common-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c1ca345fe8bb8298e9adc0920dea67d420dd5c57f79004c058df12bc365f016 The package mws-common-ui was found to contain malicious code. Source: ghsa-malware 935da08d8dffad1e28679a7043038425705e76dff3808c50361e8a67d02c55f8...

org.keycloak:keycloak-dependencies-admin-ui-wrapper (20.0.4), org.keycloak:keycloak-dependencies-server-all (20.0.4) +10 more potentially affected by CVE-2025-14082 via org.keycloak:keycloak-services (20.0.4)

org.keycloak:keycloak-services MAVEN version 20.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-dependencies-admin-ui-wrapper 20.0.4 -...

CVE-2025-66469

NiceGUI is a Python-based UI framework. Versions 3.3.1 and below are vulnerable to Reflected XSS through its ui.addcss, ui.addscss, and ui.addsass functions. The functions lack proper sanitization or encoding for the JavaScript context they generate. An attacker can break out of the intended or...