io.jenkins.plugins:tricentis-ci (>=1.0, <=1.3), org.jenkins-ci.plugins.workflow:workflow-cps (>=2.37, <=2.38) +3 more potentially affected by CVE-2022-30946 via org.jenkins-ci.plugins:script-security (1.30)

org.jenkins-ci.plugins:script-security MAVEN version 1.30 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - io.jenkins.plugins:tricentis-ci =1.0, =2.37, =1.22-beta-1, =1.10, =1.5, =1.6 Source...

org.jenkins-ci.plugins.workflow:workflow-cps (>=2.40, <=2.41), org.jenkins-ci.plugins:claim (>=2.10, <=2.15) +3 more potentially affected by CVE-2022-30946 via org.jenkins-ci.plugins:script-security (1.34)

org.jenkins-ci.plugins:script-security MAVEN version 1.34 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-cps =2.40, =2.10, =1.7, =1.2.5, =1.2.5,...

org.jenkinsci.plugins:pipeline-model-definition (>=1.1.5, <=1.2-beta-3), org.jenkinsci.plugins:pipeline-model-extensions (>=1.1.5, <=1.2-beta-3) potentially affected by CVE-2022-30945 via org.jenkins-ci.plugins.workflow:workflow-cps (2.33)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 2.33 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkinsci.plugins:pipeline-model-definition =1.1.5, =1.1.5,...

io.jenkins.blueocean:blueocean (>=1.0.0-b22, <=1.0.0-b24), io.jenkins.blueocean:blueocean-dashboard (>=1.0.0-b22, <=1.0.0-b24) +9 more potentially affected by CVE-2022-30945 via org.jenkins-ci.plugins.workflow:workflow-cps (2.25)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 2.25 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - io.jenkins.blueocean:blueocean =1.0.0-b22, =1.0.0-b22, =1.0.0-b22,...

org.jenkins-ci.plugins.workflow:workflow-aggregator (0.1-beta-3) potentially affected by CVE-2022-30945 via org.jenkins-ci.plugins.workflow:workflow-cps (0.1-beta-3)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 0.1-beta-3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 0.1-beta-3...

io.jenkins.plugins:synopsys-sigma (>=2021.12.0, <=2022.1.0) potentially affected by CVE-2022-30945 via org.jenkins-ci.plugins.workflow:workflow-cps (2.92)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 2.92 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - io.jenkins.plugins:synopsys-sigma =2021.12.0, =2022.1.0 Source cves:...

io.jenkins.blueocean:blueocean (>=1.0.0-b25, <=1.1.0-beta-9), io.jenkins.blueocean:blueocean-dashboard (>=1.0.0-b25, <=1.0.1) +11 more potentially affected by CVE-2022-30945 via org.jenkins-ci.plugins.workflow:workflow-cps (2.29)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 2.29 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - io.jenkins.blueocean:blueocean =1.0.0-b25, =1.0.0-b25, =1.0.0-b25,...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.10-beta-1), org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.10-beta-1) potentially affected by CVE-2022-30945 via org.jenkins-ci.plugins.workflow:workflow-cps (1.10-beta-1)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.10-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 1.10-beta-1 -...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.11-beta-1), org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.11-beta-1) +1 more potentially affected by CVE-2022-30945 via org.jenkins-ci.plugins.workflow:workflow-cps (1.11-beta-1)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.11-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 1.11-beta-1 -...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.14.1), org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.14.1) +1 more potentially affected by CVE-2022-30945 via org.jenkins-ci.plugins.workflow:workflow-cps (1.14.1)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.14.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 1.14.1 -...

org.jenkins-ci.plugins.workflow:workflow-aggregator (>=0.1-beta-1, <=0.1-beta-4), org.jenkins-ci.plugins.workflow:workflow-cps (>=0.1-beta-1, <=0.1-beta-4) +1 more potentially affected by CVE-2022-30946 via org.jenkins-ci.plugins:script-security (1.4)

org.jenkins-ci.plugins:script-security MAVEN version 1.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator =0.1-beta-1, =0.1-beta-1,...

org.jenkins-ci.plugins.workflow:workflow-aggregator (0.1-beta-8), org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (0.1-beta-8) potentially affected by CVE-2022-30945 via org.jenkins-ci.plugins.workflow:workflow-cps (0.1-beta-8)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 0.1-beta-8 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 0.1-beta-8 -...

com.testinium.jenkins:testinium (1.0), de.taimos:pipeline-aws (>=1.14, <=1.20) +10 more potentially affected by CVE-2022-30945 via org.jenkins-ci.plugins.workflow:workflow-cps (2.24)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 2.24 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - com.testinium.jenkins:testinium 1.0 - de.taimos:pipeline-aws =1.14,...

org.jenkins-ci.plugins.workflow:workflow-multibranch (>=2.4, <=2.8), org.jenkins-ci.plugins:blueocean-display-url (>=1.1, <=2.2.0) potentially affected by CVE-2022-30945 via org.jenkins-ci.plugins.workflow:workflow-cps (2.3)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 2.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-multibranch =2.4, =1.1, =2.2.0...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.0-beta-1), org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.0-beta-1) potentially affected by CVE-2022-30945 via org.jenkins-ci.plugins.workflow:workflow-cps (1.0-beta-1)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.0-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 1.0-beta-1 -...

com.coravy.hudson.plugins.github:github (>=1.28.0, <=1.29.4), io.fabric8.jenkins.plugins:openshift-sync (>=y, <=1.0.45) +22 more potentially affected by CVE-2017-1000242 via org.jenkins-ci.plugins:git-client (>=2.0.0-beta1, <=2.4.0)

org.jenkins-ci.plugins:git-client MAVEN version =2.0.0-beta1, =1.28.0, =y, =1.0.0-b19-beta-1, =1.0.0-b19-beta-1, =1.0.0-b19-beta-1, =1.0.0-b19-beta-1, =1.0.0-b19-beta-1, =1.0.0-b19-beta-1, =1.0.0-b19-beta-1, =0.1-preview-4, =2.8, =2.2.0-alpha-1, =1.0, =1.40.0, =3.0.0-beta1, =3.4.1 and more Source...

Sandbox bypass vulnerability through implicitly allowlisted platform Groovy files in workflow-cps

workflow-cps allows pipelines to load Groovy source files. This is intended to be used to allow Global Shared Libraries to execute without sandbox protection. In workflow-cps 2689.v434009a31bf1 and earlier, any Groovy source files bundled with Jenkins core and plugins could be loaded this way and...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.10-beta-1), org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.10-beta-1) potentially affected by CVE-2017-1000096 via org.jenkins-ci.plugins.workflow:workflow-cps (1.10-beta-1)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.10-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 1.10-beta-1 -...

org.jenkins-ci.plugins.workflow:workflow-aggregator (0.1-beta-8), org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (0.1-beta-8) potentially affected by CVE-2017-1000096 via org.jenkins-ci.plugins.workflow:workflow-cps (0.1-beta-8)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 0.1-beta-8 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 0.1-beta-8 -...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.4), org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.4) +2 more potentially affected by CVE-2017-1000096 via org.jenkins-ci.plugins.workflow:workflow-cps (1.4)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 1.4 -...