JP
Product
Jenkins Pipeline: Groovy Libraries Plugin
by Jenkins project · last CVE Sep 16, 2026
4
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 1High 1Medium 2Low 0
Watch

Add Jenkins Pipeline: Groovy Libraries Plugin to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-43405
9.9
1%
Oct 19
A sandbox bypass vulnerability in Jenkins Pipeline: Groovy Libraries Plugin 612.v84da_9c54906d and earlier allows attackers with permission to define untrusted Pipeline libraries…
Affected: through 612.v84da_9c54906d
CVE-2026-48921
7.5
0%
May 27
Jenkins Pipeline: Groovy Libraries Plugin 797.v90ea_a_9b_e45a_0 and earlier does not prohibit symbolic links in shared libraries, allowing attackers able to control the content of…
Affected: through 797.v90ea_a_9b_e45a_0
CVE-2026-84663
5.4
0%
Sep 2
A cross-site request forgery (CSRF) vulnerability in Jenkins Pipeline: Groovy Libraries Plugin 798.v5cc688825312 and earlier allows attackers to delete shared library caches
Affected: through 798.v5cc688825312
CVE-2026-92131
4.2
0%
Sep 16
Jenkins Pipeline: Groovy Libraries Plugin 805.va_fc79344957d and earlier does not restrict the library path provided to the library Pipeline step to a relative path inside the SCM…
Affected: through 805.va_fc79344957d
Showing 4