JP
Product
Jenkins Pipeline: Groovy Plugin
by Jenkins project · last CVE Jun 24, 2026
On CISA KEVExploited in the wild
4
CVEs
1
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 2High 0Medium 2Low 0
Watch

Add Jenkins Pipeline: Groovy Plugin to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-57284
4.3
0%
Jun 24
Jenkins Pipeline: Groovy Plugin 4331.v9d06ed4658ff and earlier does not restrict the types that can be instantiated through the Pipeline Snippet Generator, allowing attackers to…
Affected: through 4331.v9d06ed4658ff
CVE-2026-57283
4.3
0%
Jun 24
A cross-site request forgery (CSRF) vulnerability in Jenkins Pipeline: Groovy Plugin 4331.v9d06ed4658ff and earlier allows attackers to instantiate types related to job or system…
Affected: through 4331.v9d06ed4658ff
Showing 2