Login Request a demo
CB
Product
Credentials Binding
by Jenkins · last CVE May 27, 2026
8
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 0High 3Medium 5Low 0
Severity
All severities8Critical0High3Medium5Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Credentials Binding to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-48922
7.5
0%
May 27
Jenkins Credentials Binding Plugin 720.v3f6decef43ea_ and earlier does not properly sanitize file names for file and zip file credentials, allowing attackers able to provide…
Affected: before 725.ve52b_2328a_fde
CVE-2026-42520
7.5
0%
Apr 29
Jenkins Credentials Binding Plugin 719.v80e905ef14eb_ and earlier does not sanitize file names for file and zip file credentials, allowing attackers able to provide credentials to…
Affected: through 719.v80e905ef14eb
CVE-2025-53650
7.3
0%
Jul 9
Jenkins Credentials Binding Plugin 687.v619cb_15e923f and earlier does not properly mask (i.e., replace with asterisks) credentials present in exception error messages that are…
Affected: through 687.689.v1a_f775332fc
CVE-2020-2181
6.5
1%
May 6
Jenkins Credentials Binding Plugin 1.22 and earlier does not mask (i.e., replace with asterisks) secrets in the build log when the build contains no build steps
Affected: through 1.22
CVE-2019-1010241
6.5
1%
Jul 19
Jenkins Credentials Binding Plugin Jenkins 1.17 is affected by: CWE-257: Storing Passwords in a Recoverable Format
Affected: 1.17
CVE-2022-20616
4.3
1%
Jan 12
Jenkins Credentials Binding Plugin 1.27 and earlier does not perform a permission check in a method implementing form validation, allowing attackers with Overall/Read access to…
Affected: through 1.27
CVE-2020-2182
4.3
1%
May 6
Jenkins Credentials Binding Plugin 1.22 and earlier does not mask (i.e., replace with asterisks) secrets containing a `$` character in some circumstances
Affected: through 1.22
CVE-2018-1000057
4.3
1%
Feb 9
Jenkins Credentials Binding Plugin 1.14 and earlier masks passwords it provides to build processes in their build logs
Affected: through 1.14
Showing 8