GI
Product
Github
6
CVEs
0
On KEV
9.0
Max CVSS
0
New 30D
Severity mix
Critical 1High 1Medium 4Low 0
Watch
Add Github to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-42523 | 9.0 | Apr 29 | Jenkins GitHub Plugin 1.46.0 and earlier improperly processes the current job URL as part of JavaScript implementing validation of the feature "GitHub hook trigger for GITScm… Affected: before 1.46.0.1 |
| CVE-2018-1000600 | 8.8 | Jun 26 | A exposure of sensitive information vulnerability exists in Jenkins GitHub Plugin 1.29.1 and earlier in GitHubTokenCredentialsCreator.java that allows attackers to an… Affected: through 1.29.1 |
| CVE-2018-1000183 | 6.5 | Jun 5 | A exposure of sensitive information vulnerability exists in Jenkins GitHub Plugin 1.29.0 and older in GitHubServerConfig.java that allows attackers with Overall/Read access to… Affected: through 1.29.0 |
| CVE-2023-46650 | 5.4 | Oct 25 | Jenkins GitHub Plugin 1.37.3 and earlier does not escape the GitHub project URL on the build page when showing changes, resulting in a stored cross-site scripting (XSS)… Affected: through 1.37.3 |
| CVE-2018-1000184 | 5.4 | Jun 5 | A server-side request forgery vulnerability exists in Jenkins GitHub Plugin 1.29.0 and older in GitHubPluginConfig.java that allows attackers with Overall/Read access to cause… Affected: through 1.29.0 |
| CVE-2022-36885 | 5.3 | Jul 27 | Jenkins GitHub Plugin 1.34.4 and earlier uses a non-constant time comparison function when checking whether the provided and computed webhook signatures are equal, allowing… Affected: through 1.34.4 |
Showing 6