Jenkins Pipeline: Groovy Libraries Plugin vulnerabilities

Product

Jenkins Pipeline: Groovy Libraries Plugin

by Jenkins project · last CVE Sep 16, 2026

CVEs

On KEV

9.9

Max CVSS

New 30D

Severity mix

Critical 1High 1Medium 2Low 0

Severity

Exploitation

Watch

Add Jenkins Pipeline: Groovy Libraries Plugin to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-84663	5.4	0%	Sep 2	A cross-site request forgery (CSRF) vulnerability in Jenkins Pipeline: Groovy Libraries Plugin 798.v5cc688825312 and earlier allows attackers to delete shared library caches Affected: through 798.v5cc688825312
CVE-2026-92131	4.2	0%	Sep 16	Jenkins Pipeline: Groovy Libraries Plugin 805.va_fc79344957d and earlier does not restrict the library path provided to the library Pipeline step to a relative path inside the SCM… Affected: through 805.va_fc79344957d