JP
Product
Jenkins Pipeline: Groovy Libraries Plugin
4
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 1High 1Medium 2Low 0
Watch
Add Jenkins Pipeline: Groovy Libraries Plugin to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-43405 | 9.9 | Oct 19 | A sandbox bypass vulnerability in Jenkins Pipeline: Groovy Libraries Plugin 612.v84da_9c54906d and earlier allows attackers with permission to define untrusted Pipeline libraries… Affected: through 612.v84da_9c54906d |
| CVE-2026-48921 | 7.5 | May 27 | Jenkins Pipeline: Groovy Libraries Plugin 797.v90ea_a_9b_e45a_0 and earlier does not prohibit symbolic links in shared libraries, allowing attackers able to control the content of… Affected: through 797.v90ea_a_9b_e45a_0 |
| CVE-2026-84663 | 5.4 | Sep 2 | A cross-site request forgery (CSRF) vulnerability in Jenkins Pipeline: Groovy Libraries Plugin 798.v5cc688825312 and earlier allows attackers to delete shared library caches Affected: through 798.v5cc688825312 |
| CVE-2026-92131 | 4.2 | Sep 16 | Jenkins Pipeline: Groovy Libraries Plugin 805.va_fc79344957d and earlier does not restrict the library path provided to the library Pipeline step to a relative path inside the SCM… Affected: through 805.va_fc79344957d |
Showing 4
