io.jenkins.plugins:autograding (>=4.0.0, <=4.2.0), io.jenkins.plugins:synopsys-sigma (>=2021.12.0, <=2022.1.0) +1 more potentially affected by CVE-2026-92134 via io.jenkins.plugins:warnings-ng (>=9.4.0, <=11.3.0)

io.jenkins.plugins:warnings-ng MAVEN version =9.4.0, =4.0.0, =2021.12.0, =103.v0b1421a30c11, =115.v23dc31226ea8 Source cves: CVE-2026-92134 Source advisory: MEND:CVE-2026-92134...

Stored XSS vulnerability in warnings-ng

warnings-ng uses analysis results IDs to create the links to analysis results on the Jenkins UI. warnings-ng 13.10258.va17d49a78c3b and earlier does not validate the analysis results ID when a job configuration is submitted through the REST API. This allows attackers with Item/Configure permissio...

io.jenkins.plugins:cdevents (>=1-37.v6412b_91c3799, <=1-40.vb_3d2c94f2379), io.jenkins.plugins:pipeline-agent-build-history (>=20.v2cb_6cc0a_7d81, <=34.v570d1a_452f30) +4 more potentially affected by CVE-2026-57281 via org.jenkins-ci.plugins:script-security (1273.v66c1964f0dfd)

org.jenkins-ci.plugins:script-security MAVEN version 1273.v66c1964f0dfd is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - io.jenkins.plugins:cdevents =1-37.v6412b91c3799, =20.v2cb6cc0a7d81,...

io.jenkins.plugins:cdevents (>=1-37.v6412b_91c3799, <=1-40.vb_3d2c94f2379), io.jenkins.plugins:pipeline-agent-build-history (>=20.v2cb_6cc0a_7d81, <=34.v570d1a_452f30) +4 more potentially affected by CVE-2026-42519 via org.jenkins-ci.plugins:script-security (1273.v66c1964f0dfd)

org.jenkins-ci.plugins:script-security MAVEN version 1273.v66c1964f0dfd is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - io.jenkins.plugins:cdevents =1-37.v6412b91c3799, =20.v2cb6cc0a7d81,...

EUVD-2022-4847

Malicious code in bioql PyPI...

EUVD-2022-5633

Malicious code in bioql PyPI...

CVE-2019-10325

A cross-site scripting vulnerability in Jenkins Warnings NG Plugin 5.0.0 and earlier allowed attacker with Job/Configure permission to inject arbitrary JavaScript in build overview pages...

CVE-2019-10326

A cross-site request forgery vulnerability in Jenkins Warnings NG Plugin 5.0.0 and earlier allowed attackers to reset warning counts for future builds...

com.amadeus.jenkins.plugins:workflow-cps-global-lib-http (>=2.40.0, <=2.57.0), io.jenkins.plugins:autograding (4.2.0) +2 more potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (3806.va_3a_6988277b_2)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 3806.va3a6988277b2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - com.amadeus.jenkins.plugins:workflow-cps-global-lib-http...

io.jenkins.plugins:cdevents (>=1-37.v6412b_91c3799, <=1-40.vb_3d2c94f2379), io.jenkins.plugins:pipeline-agent-build-history (>=20.v2cb_6cc0a_7d81, <=34.v570d1a_452f30) +4 more potentially affected by CVE-2024-52549 via org.jenkins-ci.plugins:script-security (1273.v66c1964f0dfd)

org.jenkins-ci.plugins:script-security MAVEN version 1273.v66c1964f0dfd is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - io.jenkins.plugins:cdevents =1-37.v6412b91c3799, =20.v2cb6cc0a7d81,...

io.jenkins.plugins:forensics-api (2.4.0), io.jenkins.plugins:warnings-ng (11.0.0) potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (3853.vb_a_490d892963)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 3853.vba490d892963 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - io.jenkins.plugins:forensics-api 2.4.0 -...

io.jenkins.plugins:forensics-api (>=2.5.0, <=2.7.0), io.jenkins.plugins:warnings-ng (>=11.4.0, <=11.7.0) potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (3903.v48a_8836749e9)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 3903.v48a8836749e9 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - io.jenkins.plugins:forensics-api =2.5.0, =11.4.0, =11.7.0...

io.jenkins.plugins:warnings-ng (>=11.2.1, <=11.3.0), org.jenkins-ci.plugins:absint-astree (>=103.v0b_1421a_30c11, <=115.v23dc31226ea_8) potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (3880.vb_ef4b_5cfd270)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 3880.vbef4b5cfd270 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - io.jenkins.plugins:warnings-ng =11.2.1, =103.v0b1421a30c11...

io.jenkins.plugins:pipeline-agent-build-history (>=20.v2cb_6cc0a_7d81, <=22.v0372f41a_2ea_9), io.jenkins.plugins:warnings-ng (>=11.1.0, <=11.2.0) potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (3867.v535458ce43fd)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 3867.v535458ce43fd is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - io.jenkins.plugins:pipeline-agent-build-history...

io.jenkins.plugins:appknox-scanner (>=1.0, <=1.0.10), io.jenkins.plugins:warnings-ng (>=11.4.0, <=11.7.0) potentially affected by CVE-2024-47805 via org.jenkins-ci.plugins:credentials (1361.v56f5ca_35d21c)

org.jenkins-ci.plugins:credentials MAVEN version 1361.v56f5ca35d21c is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials and may be impacted: - io.jenkins.plugins:appknox-scanner =1.0, =11.4.0, =11.7.0 Source cves:...

com.openshift.jenkins.plugins:openshift-client (1.1.0.424.v829cb_ccf8798), io.jenkins.plugins:openshift-k8s-credentials (>=168.v79a_983191991, <=276.v708b_2cd34a_9e) +7 more potentially affected by CVE-2024-34145 via org.jenkins-ci.plugins:script-security (1313.v7a_6067dc7087)

org.jenkins-ci.plugins:script-security MAVEN version 1313.v7a6067dc7087 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - com.openshift.jenkins.plugins:openshift-client 1.1.0.424.v829cbccf8798...

io.jenkins.plugins:cdevents (>=1-37.v6412b_91c3799, <=1-40.vb_3d2c94f2379), io.jenkins.plugins:pipeline-agent-build-history (>=20.v2cb_6cc0a_7d81, <=34.v570d1a_452f30) +4 more potentially affected by CVE-2024-34145 via org.jenkins-ci.plugins:script-security (1273.v66c1964f0dfd)

org.jenkins-ci.plugins:script-security MAVEN version 1273.v66c1964f0dfd is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - io.jenkins.plugins:cdevents =1-37.v6412b91c3799, =20.v2cb6cc0a7d81,...

com.openshift.jenkins.plugins:openshift-client (1.1.0.424.v829cb_ccf8798), io.jenkins.plugins:openshift-k8s-credentials (>=168.v79a_983191991, <=276.v708b_2cd34a_9e) +7 more potentially affected by CVE-2024-34144 via org.jenkins-ci.plugins:script-security (1313.v7a_6067dc7087)

org.jenkins-ci.plugins:script-security MAVEN version 1313.v7a6067dc7087 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - com.openshift.jenkins.plugins:openshift-client 1.1.0.424.v829cbccf8798...

io.jenkins.plugins:autograding (>=4.0.0, <=4.1.0) potentially affected by CVE-2023-46651 via io.jenkins.plugins:warnings-ng (10.5.0)

io.jenkins.plugins:warnings-ng MAVEN version 10.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.jenkins.plugins:warnings-ng and may be impacted: - io.jenkins.plugins:autograding =4.0.0, =4.1.0 Source cves: CVE-2023-46651 Source advisory:...

io.jenkins.plugins:autograding (>=4.0.0, <=4.1.0) potentially affected by CVE-2023-46651 via io.jenkins.plugins:warnings-ng (10.5.0)

io.jenkins.plugins:warnings-ng MAVEN version 10.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.jenkins.plugins:warnings-ng and may be impacted: - io.jenkins.plugins:autograding =4.0.0, =4.1.0 Source cves: CVE-2023-46651 Source advisory:...