jenkinsci/email-ext-plugin Security Advisories | GitStock

high2026-05-27

Jenkins Email Extension Plugin: Attackers able to control email content may specify `file:` URLs for images to read arbitrary files from Jenkins controller filesystem

GHSA-mq58-m26g-46gp · CVE-2026-48920

medium2023-02-15

Cross-site Scripting in Jenkins Email Extension Plugin

GHSA-p2fr-mq9m-6w6p · CVE-2023-25764

medium2023-02-15

Cross-site Scripting in Jenkins Email Extension Plugin

GHSA-h97r-fchm-m23x · CVE-2023-25763

critical2023-02-15

Sandbox escape in Jenkins Email Extension Plugin

GHSA-c9c2-wcxh-3w5j · CVE-2023-25765

medium2022-05-24

Missing hostname validation in Email Extension Plugin

GHSA-4qrj-99r6-jfrh · CVE-2020-2253

low2022-05-24

Jenkins Email Extension Plugin SMTP password transmitted and displayed in plain text

GHSA-5c4v-vh95-c67c · CVE-2020-2232

critical2022-05-13

Script security sandbox bypass in Jenkins Email Extension Plugin

GHSA-qwm8-vgm6-f86p · CVE-2019-1003032