JG
Product
Jenkins GitLab Plugin
3
CVEs
0
On KEV
5.4
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 3Low 0
Watch
Add Jenkins GitLab Plugin to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-92133 | 5.4 | Sep 16 | Jenkins GitLab Plugin 1.2149.vcfc32c82b_f7f and earlier caches the GitLab API client built for alternative GitLab API token credentials under a cache key derived from the… Affected: through 1.2149.vcfc32c82b_f7f |
| CVE-2026-84664 | 5.4 | Sep 2 | Jenkins GitLab Plugin 1.9.16 and earlier allows overwriting the global GitLab connection configuration through Stapler data binding, allowing attackers to connect to an… Affected: through 1.9.16 |
| CVE-2022-43411 | 5.3 | Oct 19 | Jenkins GitLab Plugin 1.5.35 and earlier uses a non-constant time comparison function when checking whether the provided and expected webhook token are equal, potentially allowing… Affected: through 1.5.35 |
Showing 3