CVE-2025-31722

CVE-2025-31722 affects the Jenkins Templating Engine Plugin, version 2.5.3 and earlier. The root cause is that libraries defined in folders are not sandboxed, allowing attackers with Item/Configure permission to execute arbitrary code in the Jenkins controller JVM. The description from multiple c...

CVE-2021-21646

The CVE-2021-21646 entry concerns the Jenkins Templating Engine Plugin, version 2.1 and earlier. The underlying issue is failure to protect pipeline configurations with the Script Security Plugin, allowing attackers with Job/Configure permission to execute arbitrary code in the Jenkins controller...