Jenkins Webhook Secret Credentials Provider Plugin vulnerabilities

Product

Jenkins Webhook Secret Credentials Provider Plugin

by Jenkins Project · last CVE Aug 5, 2026

CVEs

On KEV

3.7

Max CVSS

New 30D

Severity mix

Critical 0High 0Medium 0Low 1

Severity

Exploitation

Watch

Add Jenkins Webhook Secret Credentials Provider Plugin to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-70437	3.7	0%	Aug 5	Jenkins Webhook Secret Credentials Provider Plugin 16.v0cfa_f0215cf5 and earlier does not use a constant-time comparison function when checking whether the provided and expected… Affected: through 16.v0cfa_f0215cf5