jenkinsci__workflow-multibranch-plugin_CVE-2022-25175_706-vd43c65dec013

Pipeline: Multibranch Introduction Enhances Pipeline plugin to handle branches better by automatically grouping builds from different branches. Automatically creates a new Jenkins job whenever a new branch is pushed to a source code repository. Other plugins can define various branch types, e.g. ...

au.com.versent.jenkins.plugins:ignore-committer-strategy (>=29.v7c3891a_434c3, <=63.v7e87d06b_a_30c), com.fuzzpro.jenkins-plugins:multibranch-job-tear-down (>=61.v68b_d7264b_643, <=73.ve2b_957fc2921) +64 more potentially affected by CVE-2026-92130 via org.jenkins-ci.plugins.workflow:workflow-multibranch (>=1.13, <=841.vec5b_9e1806ec)

org.jenkins-ci.plugins.workflow:workflow-multibranch MAVEN version =1.13, =29.v7c3891a434c3, =61.v68bd7264b643, =57.vde5161ec7aba, =0.9.1, =1.0-alpha-1, =1.27.17, =1.0-alpha-1, =1.0-alpha-1, =1.0.0-b15, =1.0.0-b15, =1.0-alpha-8, =1.0-alpha-4, =0.1-preview-1, =1.1.0-beta-4, =1.27.26 and more Sourc...

Exposure of System-scoped credentials in workflow-multibranch

workflow-multibranch 841.vec5b9e1806ec and earlier does not set the appropriate context for credentials lookup in the resolveScm Pipeline step, allowing the use of System-scoped credentials otherwise reserved for the global configuration. This allows attackers with Item/Configure permission to...

com.openshift.jenkins.plugins:openshift-client (1.1.0.424.v829cb_ccf8798), io.jenkins.plugins:openshift-k8s-credentials (>=168.v79a_983191991, <=276.v708b_2cd34a_9e) +7 more potentially affected by CVE-2026-57281 via org.jenkins-ci.plugins:script-security (1313.v7a_6067dc7087)

org.jenkins-ci.plugins:script-security MAVEN version 1313.v7a6067dc7087 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - com.openshift.jenkins.plugins:openshift-client 1.1.0.424.v829cbccf8798...

com.openshift.jenkins.plugins:openshift-client (1.1.0.424.v829cb_ccf8798), io.jenkins.plugins:openshift-k8s-credentials (>=168.v79a_983191991, <=276.v708b_2cd34a_9e) +7 more potentially affected by CVE-2026-57280 via org.jenkins-ci.plugins:script-security (1313.v7a_6067dc7087)

org.jenkins-ci.plugins:script-security MAVEN version 1313.v7a6067dc7087 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - com.openshift.jenkins.plugins:openshift-client 1.1.0.424.v829cbccf8798...

io.jenkins.blueocean:blueocean (>=1.0.0-b18, <=1.0.0-b21), io.jenkins.blueocean:blueocean-dashboard (>=1.0.0-b18, <=1.0.0-b21) +13 more potentially affected by CVE-2026-57281 via org.jenkins-ci.plugins:script-security (1.23)

org.jenkins-ci.plugins:script-security MAVEN version 1.23 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - io.jenkins.blueocean:blueocean =1.0.0-b18, =1.0.0-b18, =1.0.0-b18, =1.0.0-b18,...

RHCOS 4 : OpenShift Container Platform 4.9.26 (RHSA-2022:1021)

The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:1021 advisory. - haproxy: Denial of service via set-cookie2 header CVE-2022-0711 - workflow-cps: OS command execution through crafted SCM contents...

RHCOS 4 : OpenShift Container Platform 4.8.35 (RHSA-2022:0871)

The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:0871 advisory. - CRI-O: Arbitrary code execution in cri-o via abusing kernel.corepattern kernel parameter CVE-2022-0811 - workflow-cps: OS command...

com.openshift.jenkins.plugins:openshift-client (1.1.0.424.v829cb_ccf8798), io.jenkins.plugins:openshift-k8s-credentials (>=168.v79a_983191991, <=276.v708b_2cd34a_9e) +7 more potentially affected by CVE-2026-42519 via org.jenkins-ci.plugins:script-security (1313.v7a_6067dc7087)

org.jenkins-ci.plugins:script-security MAVEN version 1313.v7a6067dc7087 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - com.openshift.jenkins.plugins:openshift-client 1.1.0.424.v829cbccf8798...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.14.1), org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.14.1) +1 more potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (1.14.1)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.14.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 1.14.1 -...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.14.2), org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.14.2) +3 more potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (1.14.2)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.14.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 1.14.2 -...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.11-beta-1), org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.11-beta-1) +1 more potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (1.11-beta-1)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.11-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 1.11-beta-1 -...

org.jenkins-ci.plugins.workflow:workflow-multibranch (>=2.4, <=2.8), org.jenkins-ci.plugins:blueocean-display-url (>=1.1, <=2.2.0) potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (2.3)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 2.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-multibranch =2.4, =1.1, =2.2.0...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.12), org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.12) +1 more potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (1.12)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 1.12 -...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.12-beta-2), org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.12-beta-2) +1 more potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (1.12-beta-2)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.12-beta-2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 1.12-beta-2 -...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.9), org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.9) +1 more potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (1.9)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 1.9 -...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.14.1-beta-1), org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.14.1-beta-1) +1 more potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (1.14.1-beta-1)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.14.1-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 1.14.1-beta...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.9-beta-1), org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.9-beta-1) +1 more potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (1.9-beta-1)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.9-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 1.9-beta-1 -...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.11-beta-3), org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.11-beta-3) +1 more potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (1.11-beta-3)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.11-beta-3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 1.11-beta-3 -...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.15-beta-1), org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.15-beta-1) +2 more potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (1.15-beta-1)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.15-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 1.15-beta-1 -...