Security Advisories | GitStock

high2022-01-13

CVE-2022-21676-Uncaught Exception in engine.io

socketio/engine.io · GHSA-273r-mgr4-v34f

medium2022-01-13

GovernorCompatibilityBravo incorrect ABI encoding may lead to unexpected behavior

openzeppelin/openzeppelin-contracts · GHSA-m6w8-fq7v-ph4m

high2022-01-13

CVE-2022-21646-Lookup operations do not take into account wildcards in SpiceDB

authzed/spicedb · GHSA-7p8f-8hjm-wm92

critical2022-01-13

CVE-2021-23543-Prototype Pollution in realms-shim

agoric/realms-shim · GHSA-q4j7-v27r-fgcx

medium2022-01-13

CVE-2022-20615-Stored XSS vulnerability in Matrix Project Plugin

jenkinsci/matrix-project-plugin · GHSA-vqwg-4v6f-h6x5

medium2022-01-13

CVE-2022-20613-Cross-Site Request Forgery in Jenkins Mailer Plugin

jenkinsci/mailer-plugin · GHSA-85rq-hp8x-ghjq

high2022-01-13

CVE-2022-20617-OS command execution vulnerability in Jenkins Docker Commons Plugin

jenkinsci/docker-commons-plugin · GHSA-jpxj-vgq5-prjc

medium2022-01-13

CVE-2022-20616-Incorrect Permission Assignment for Critical Resource in Jenkins Credentials Binding Plugin

jenkinsci/credentials-binding-plugin · GHSA-gqm2-2gcx-p88w

medium2022-01-13

CVE-2022-20618-Incorrect Permission Assignment for Critical Resource in Jenkins Bitbucket Branch Source Plugin

jenkinsci/bitbucket-branch-source-plugin · GHSA-w2mh-6xj5-f77f

high2022-01-13

CVE-2022-20619-Cross-Site Request Forgery in Jenkins Bitbucket Branch Source Plugin

jenkinsci/bitbucket-branch-source-plugin · GHSA-w4jv-6rg4-pr4m

medium2022-01-13

CVE-2022-20620-Missing permission checks in SSH Agent Plugin allow enumerating credentials IDs

jenkinsci/ssh-agent-plugin · GHSA-9wxh-jjj5-67cv

medium2022-01-13

CVE-2022-20621-Access key stored in plain text by Jenkins Metrics Plugin

jenkinsci/metrics-plugin · GHSA-gg9m-x3cg-69vh

medium2022-01-13

CVE-2022-23105-User passwords transmitted in plain text by Jenkins Active Directory Plugin

jenkinsci/active-directory-plugin · GHSA-c8cc-hj57-vm65

medium2022-01-13

CVE-2022-23109-Improper credentials masking in Jenkins HashiCorp Vault Plugin

jenkinsci/hashicorp-vault-plugin · GHSA-h6x7-jq46-fp33

medium2022-01-13

CVE-2022-23110-Stored XSS vulnerability in Jenkins Publish Over SSH Plugin

jenkinsci/publish-over-ssh-plugin · GHSA-fjpm-hf7c-xgc2

medium2022-01-13

CVE-2022-23108-Stored XSS vulnerability in Jenkins Badge Plugin

jenkinsci/badge-plugin · GHSA-5qx5-vg5w-5mx3

medium2022-01-13

CVE-2022-23112-Missing permission check in Jenkins Publish Over SSH Plugin

jenkinsci/publish-over-ssh-plugin · GHSA-vc4r-j8j6-3fp6

low2022-01-13

CVE-2022-23114-Password stored in plain text by Jenkins Publish Over SSH Plugin

jenkinsci/publish-over-ssh-plugin · GHSA-r3rr-wph6-9638

medium2022-01-13

CVE-2022-23115-CSRF vulnerability in Jenkins batch task Plugin

jenkinsci/batch-task-plugin · GHSA-mh8g-8jwp-q6xw

medium2022-01-13

CVE-2022-23113-Path traversal vulnerability in Jenkins Publish Over SSH Plugin

jenkinsci/publish-over-ssh-plugin · GHSA-j8rg-4hjm-8r95