Jenkins Project vulnerabilities

Products

• Jenkins 174
• Script Security Plugin 39
• Active Directory Plugin 11
• Pipeline: Groovy Plugin 11
• Email Extension Plugin 9
• Build Failure Analyzer Plugin 8
• Gitlab Plugin 8
• Job Configuration History Plugin 8
• Ns-nd Integration Performance Publisher Plugin 8
• Openid Connect Authentication Plugin 8
• Pipeline: Shared Groovy Libraries Plugin 8
• Amazon Ec2 Plugin 7
• Configuration As Code Plugin 7
• Git Plugin 7
• Openshift Deployer Plugin 7
• Rundeck Plugin 7
• Saml Single Sign On(sso) Plugin 7
• Xebialabs Xl Deploy Plugin 7
• Artifactory Plugin 6
• Azure Vm Agents Plugin 6
• Config File Provider Plugin 6
• Credentials Binding Plugin 6
• Deployment Dashboard Plugin 6
• Electricflow Plugin 6
• Gitlab Authentication Plugin 6
• Git Parameter Plugin 6
• Hashicorp Vault Plugin 6
• Html Publisher Plugin 6
• Pipeline Maven Integration Plugin 6
• Inheritance Plugin 6
• Repository Connector Plugin 6
• Appspider Plugin 5
• Aws Codecommit Trigger Plugin 5
• Azure Ad Plugin 5
• Blue Ocean Plugin 5
• Cadence Vmanager Plugin 5
• Chef Sinatra Plugin 5
• Delphix Plugin 5
• Extended Choice Parameter Plugin 5
• Fortify Plugin 5

Show 160 moreShow less

• Git Client Plugin 5
• Google Compute Engine Plugin 5
• Job Import Plugin 5
• Mabl Plugin 5
• Matrix Project Plugin 5
• Maven Release Plugin 5
• Neuvector Vulnerability Scanner Plugin 5
• Octoperf Load Testing Plugin Plugin 5
• Openid Plugin 5
• Publish Over Ssh Plugin 5
• Scriptler Plugin 5
• Subversion Plugin 5
• Support Core Plugin 5
• Websphere Deployer Plugin 5
• Wso2 Oauth Plugin 5
• Active Choices Plugin 4
• Assembla Plugin 4
• Bitbucket Branch Source Plugin 4
• Bitbucket Oauth Plugin 4
• Bitbucket Server Integration Plugin 4
• Checkmarx Plugin 4
• Compuware Topaz For Total Test Plugin 4
• Cons3rt Plugin 4
• Continuous Integration With Toad Edge Plugin 4
• Contrast Continuous Application Security Plugin 4
• Convertigo Mobile Platform Plugin 4
• Credentials Plugin 4
• Crx Content Package Deployer Plugin 4
• Deployer Framework Plugin 4
• Elasticbox Jenkins Kubernetes Ci/cd Plugin 4
• Embeddable Build Status Plugin 4
• Fortify On Demand Plugin 4
• Gerrit Trigger Plugin 4
• Gitee Plugin 4
• Gogs Plugin 4
• Health Advisor By Cloudbees Plugin 4
• Icescrum Plugin 4
• Jira Pipeline Steps Plugin 4
• Job And Node Ownership Plugin 4
• Katalon Plugin 4
• Kubernetes Continuous Deploy Plugin 4
• Kubernetes Plugin 4
• Ldap Plugin 4
• Mercurial Plugin 4
• Nexus Platform Plugin 4
• Orka By Macstadium Plugin 4
• P4 Plugin 4
• Paaslane Estimate Plugin 4
• Pipeline: Build Step Plugin 4
• Pipeline: Groovy Libraries Plugin 4
• Pipeline: Phoenix Autotest Plugin 4
• Proxmox Plugin 4
• Rapiddeploy Plugin 4
• Report Portal Plugin 4
• Requests-plugin Plugin 4
• Storable Configs Plugin 4
• Subversion Partial Release Manager Plugin 4
• Team Concert Plugin 4
• Team Foundation Server Plugin 4
• Vmware Lab Manager Slaves Plugin 4
• Warnings Next Generation Plugin 4
• Warnings Plugin 4
• Ansible Plugin 3
• Ansible Tower Plugin 3
• Applitools Eyes Plugin 3
• Aqua Security Scanner Plugin 3
• Assembla Auth Plugin 3
• Audit To Database Plugin 3
• Audit Trail Plugin 3
• Autocomplete Parameter Plugin 3
• Azure Credentials Plugin 3
• Beaker Builder Plugin 3
• Bitbucket Push And Pull Request Plugin 3
• Build-metrics Plugin 3
• Build-publisher Plugin 3
• Cloudbees Aws Credentials Plugin 3
• Cloudbees Cd Plugin 3
• Code Coverage Api Plugin 3
• Conjur Secrets Plugin 3
• Coverity Plugin 3
• Cvs Plugin 3
• Dashboard View Plugin 3
• Database Plugin 3
• Dbcharts Plugin 3
• Docker Plugin 3
• Dotci Plugin 3
• Dynamic Extended Choice Parameter Plugin 3
• Dynatrace Application Monitoring Plugin 3
• Easyqa Plugin 3
• Elastest Plugin 3
• Elasticbox Ci Plugin 3
• Fitnesse Plugin 3
• Flaky Test Handler Plugin 3
• Folders Plugin 3
• Ftp Publisher Plugin 3
• Generic Webhook Trigger Plugin 3
• Github Authentication Plugin 3
• Github Plugin 3
• Github Pull Request Builder Plugin 3
• Gitlab Branch Source Plugin 3
• Google Kubernetes Engine Plugin 3
• Google Login Plugin 3
• Jira Plugin 3
• Junit Plugin 3
• Keycloak Authentication Plugin 3
• Kmap Plugin 3
• Libvirt Slaves Plugin 3
• Liquibase Runner Plugin 3
• Lucene-search Plugin 3
• Mac Plugin 3
• Mailer Plugin 3
• Matlab Plugin 3
• Matrix Authorization Strategy Plugin 3
• Multijob Plugin 3
• Netsparker Cloud Scan Plugin 3
• Nomad Plugin 3
• Openstack Heat Plugin 3
• Owasp Dependency-check Plugin 3
• Parameterized Remote Trigger Plugin 3
• Pipeline Github Notify Step Plugin 3
• Pipeline: Multibranch Plugin 3
• Promoted Builds Plugin 3
• Publish To Bitbucket Plugin 3
• Recipe Plugin 3
• Relution Enterprise Appstore Publisher Plugin 3
• Rocketchat Notifier Plugin 3
• Role-based Authorization Strategy Plugin 3
• Rqm Plugin 3
• S3 Publisher Plugin 3
• Saml Plugin 3
• Self-organizing Swarm Plug-in Modules Plugin 3
• Semantic Versioning Plugin 3
• Soasta Cloudtest Plugin 3
• Ssh Plugin 3
• Static Analysis Utilities Plugin 3
• Testcomplete Support Plugin 3
• Testquality Updater Plugin 3
• Violation Comments To Gitlab Plugin 3
• Xebialabs Xl Release Plugin 3
• Xpath Configuration Viewer Plugin 3
• Zephyr Enterprise Test Management Plugin 3
• Zephyr For Jira Test Management Plugin 3
• 360 Fireline Plugin 2
• Agent Server Parameter Plugin 2
• Alauda Devops Pipeline Plugin 2
• Alauda Kubernetes Suport Plugin 2
• Anchore Container Image Scanner Plugin 2
• Apica Loadtest Plugin 2
• Aqua Microscanner Plugin 2
• Asakusasatellite Plugin 2
• Autonomiq Plugin 2
• Azure Key Vault Plugin 2
• Azure Service Fabric Plugin 2
• Bearychat Plugin 2
• Benchmark Evaluator Plugin 2
• Bigpanda Notifier Plugin 2
• Blue Ocean Plugins 2
• Buildgraph-view Plugin 2
• Build Notifications Plugin 2
• Build With Parameters Plugin 2

Newest

• jenkins project jenkins Jenkins 2.587 and earlier, LTS 2.580.1 and earlier improperly identifies file paths attempting... CVE-2026-117626 4.3 MediumOctober 28, 2026
• jenkins project jenkins A missing permission check in Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows attackers... CVE-2026-117625 4.3 MediumOctober 28, 2026
• jenkins Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not consistently enforce the restriction... CVE-2026-117624 8.8 HighOctober 28, 2026
• jenkins Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not escape the text shown in the tooltips... CVE-2026-117623 5.4 MediumOctober 28, 2026
• jenkins Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows agents to send exceptions implementing... CVE-2026-117622 6.1 MediumOctober 28, 2026
• jenkins Jenkins 2.587 and earlier, LTS 2.580.1 and earlier computes on the agent the URL of the link... CVE-2026-117621 6.1 MediumOctober 28, 2026
• jenkins Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows attackers with Overall/Read permission... CVE-2026-117620 8.8 HighOctober 28, 2026
• jenkins Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows requests authenticated using HTTP Basic... CVE-2026-117619 8.1 HighOctober 28, 2026
• jenkins In Jenkins 2.587 and earlier, LTS 2.580.1 and earlier, the HTTP endpoint for creating the first... CVE-2026-117618 8.1 HighOctober 28, 2026
• jenkins Jenkins 2.587 and earlier, LTS 2.580.1 and earlier checks for symbolic links in the path of an... CVE-2026-117617 8.1 HighOctober 28, 2026
• jenkins Jenkins 2.587 and earlier, LTS 2.580.1 and earlier provides an HTTP endpoint that loads agents by... CVE-2026-117616 8.8 HighOctober 28, 2026
• jenkins Jenkins 2.587 and earlier, LTS 2.580.1 and earlier follows symbolic links when copying the... CVE-2026-117615 6.5 MediumOctober 28, 2026
• jenkins Jenkins 2.587 and earlier, LTS 2.580.1 and earlier converts the launch commands in older agent... CVE-2026-117614 8.8 HighOctober 28, 2026
• jenkins Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not restrict item types in collections... CVE-2026-117613 5.4 MediumOctober 28, 2026
• jenkins Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not apply its deserialization filter to... CVE-2026-117612 8.8 HighOctober 28, 2026
• jenkins project keycloak authentication plugin Jenkins Keycloak Authentication Plugin 2.4.1 and earlier does not restrict the redirect URL after... CVE-2026-92141 4.3 MediumSeptember 16, 2026
• jenkins project gitee plugin Jenkins Gitee Plugin 1301.v8957053c7902 and earlier does not escape the sender name from Gitee... CVE-2026-92140 6.8 MediumSeptember 16, 2026
• jenkins project bitbucket push and pull request plugin Jenkins Bitbucket Push and Pull Request Plugin 4.0.1 and earlier trusts values provided in the... CVE-2026-92139 6.5 MediumSeptember 16, 2026
• jenkins project bitbucket server integration plugin The OAuth authorization endpoint in Jenkins Bitbucket Server Integration Plugin 6.0.1 and earlier... CVE-2026-92138 4.2 MediumSeptember 16, 2026
• jenkins project robot framework plugin Jenkins Robot Framework Plugin 6.2.2 and earlier does not check that the archive directory... CVE-2026-92137 8.8 HighSeptember 16, 2026
• jenkins project owasp dependency-check plugin Jenkins OWASP Dependency-Check Plugin 5.6.4 and earlier does not escape CWE values from... CVE-2026-92136 8.0 HighSeptember 16, 2026
• jenkins project coverage plugin Jenkins Coverage Plugin 3.3358.v9487dde48783 and earlier does not validate the coverage results... CVE-2026-92135 8.0 HighSeptember 16, 2026
• jenkins project warnings plugin Jenkins Warnings Plugin 13.10258.va_17d49a_78c3b_ and earlier does not validate the analysis... CVE-2026-92134 8.0 HighSeptember 16, 2026
• jenkins project gitlab plugin Jenkins GitLab Plugin 1.2149.vcfc32c82b_f7f and earlier caches the GitLab API client built for... CVE-2026-92133 5.4 MediumSeptember 16, 2026
• jenkins project gradle plugin Jenkins Gradle Plugin 2.19.1252.v15196b_5a_6e10 and earlier requests build scan data from the... CVE-2026-92132 5.4 MediumSeptember 16, 2026
• jenkins project pipeline: groovy libraries plugin Jenkins Pipeline: Groovy Libraries Plugin 805.va_fc79344957d and earlier does not restrict the... CVE-2026-92131 4.2 MediumSeptember 16, 2026
• jenkins project pipeline: multibranch plugin Jenkins Pipeline: Multibranch Plugin 841.vec5b_9e1806ec and earlier does not set the appropriate... CVE-2026-92130 3.1 LowSeptember 16, 2026
• jenkins script security, jenkins project script security plugin +1 more Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier does not check calls from... CVE-2026-92129 7.5 HighSeptember 16, 2026
• jenkins script security, jenkins project script security plugin +1 more Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier downloads a JAR file specified... CVE-2026-92128 7.5 HighSeptember 16, 2026
• jenkins script security, jenkins project script security plugin +1 more Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier automatically approves the... CVE-2026-92127 8.0 HighSeptember 16, 2026
• jenkins script security, jenkins project script security plugin +1 more Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier does not reject @Builder... CVE-2026-92126 8.5 HighSeptember 16, 2026
• jenkins script security, jenkins project script security plugin +1 more Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier does not reject the ... CVE-2026-92125 8.8 HighSeptember 16, 2026
• jenkins script security, jenkins project script security plugin +1 more Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier checks the operations Groovy... CVE-2026-92124 8.8 HighSeptember 16, 2026
• jenkins script security, jenkins project script security plugin +1 more Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier does not intercept operations... CVE-2026-92123 8.8 HighSeptember 16, 2026
• jenkins script security, jenkins project script security plugin +1 more Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier does not check the method called... CVE-2026-92122 8.8 HighSeptember 16, 2026
• jenkins project update-center2 Jenkins update-center2 3.18.3 and earlier does not escape plugin-provided values (plugin names,... CVE-2026-84677 5.4 MediumSeptember 2, 2026
• jenkins project parameterized remote trigger plugin Jenkins Parameterized Remote Trigger Plugin 3.2.2 and earlier stores tokens unencrypted in job... CVE-2026-84676 4.3 MediumSeptember 2, 2026
• jenkins project tics plugin OS command injection vulnerability in Jenkins TICS Plugin 2025.1.1 and earlier allows attackers... CVE-2026-84675 7.4 HighSeptember 2, 2026
• jenkins project xebialabs xl deploy plugin Missing permission checks in Jenkins XebiaLabs XL Deploy Plugin 26.1.0 and earlier allow... CVE-2026-84674 5.4 MediumSeptember 2, 2026
• jenkins project customizable header plugin Jenkins Customizable Header Plugin 295.v2544b_ca_19b_97 and earlier allows overwriting the plugin... CVE-2026-84673 8.8 HighSeptember 2, 2026
• jenkins project microsoft entra id (previously azure ad) plugin Jenkins Microsoft Entra ID (previously Azure AD) Plugin 710.v0b_ff8e9cc2d2 and earlier grants... CVE-2026-84672 8.8 HighSeptember 2, 2026
• jenkins project file parameter plugin Jenkins File Parameter Plugin 425.v3fa_801681b_5e and earlier allows writing files to arbitrary... CVE-2026-84671 8.8 HighSeptember 2, 2026
• jenkins project performance plugin Jenkins Performance Plugin 1015.v09ca_52b_3370e and earlier does not restrict the classes that... CVE-2026-84670 8.8 HighSeptember 2, 2026
• jenkins project allure plugin A path traversal vulnerability in Jenkins Allure Plugin 2.35.2 and earlier allows attackers with... CVE-2026-84669 8.8 HighSeptember 2, 2026
• jenkins project saml plugin Jenkins SAML Plugin 4.618.v441a_27fa_46d2 and earlier allows overwriting the SAML identity... CVE-2026-84668 8.8 HighSeptember 2, 2026
• jenkins project thinbackup plugin Jenkins ThinBackup Plugin 2.1.4 and earlier allows overwriting the plugin's backup configuration... CVE-2026-84667 7.1 HighSeptember 2, 2026
• jenkins project job configuration history plugin Jenkins Job Configuration History Plugin 1367.vc8fa_b_15101dc and earlier allows overwriting the... CVE-2026-84666 5.4 MediumSeptember 2, 2026
• jenkins project sonarqube scanner plugin Jenkins SonarQube Scanner Plugin 2.18.3 and earlier does not limit URL schemes for the dashboard... CVE-2026-84665 8.0 HighSeptember 2, 2026
• jenkins project gitlab plugin Jenkins GitLab Plugin 1.9.16 and earlier allows overwriting the global GitLab connection... CVE-2026-84664 5.4 MediumSeptember 2, 2026
• jenkins project pipeline: groovy libraries plugin A cross-site request forgery (CSRF) vulnerability in Jenkins Pipeline: Groovy Libraries Plugin... CVE-2026-84663 5.4 MediumSeptember 2, 2026
• Show olderLoading…