Security advisories

medium2026-06-24

CVE-2026-57292-Jenkins Gitee Plugin has a cross-site request forgery vulnerability

jenkinsci/gitee-plugin · GHSA-w794-rwp2-jc9m

medium2026-06-24

CVE-2026-57297-Jenkins Contrast Continuous Application Security Plugin has a missing permission check

jenkinsci/contrast-continuous-application-security-plugin · GHSA-p44q-fmwr-jqr7

medium2026-06-24

CVE-2026-57289-Jenkins Bitbucket Push and Pull Request Plugin unconditionally disables SSL/TLS certificate validation

jenkinsci/bitbucket-push-and-pull-request-plugin · GHSA-jwhr-h7pc-3974

medium2026-06-24

CVE-2026-57286-Jenkins Git Parameter Plugin has a missing permission check that allows listing SCM branch and tag names

jenkinsci/git-parameter-plugin · GHSA-hwvp-7xqv-8jx3

high2026-06-24

CVE-2026-57296-Jenkins External Workspace Manager Plugin has a path traversal vulnerability

jenkinsci/external-workspace-manager-plugin · GHSA-hrmj-8fm9-cg8x

low2026-06-24

CVE-2026-57288-Jenkins Active Directory Plugin has an LDAP injection vulnerability

jenkinsci/active-directory-plugin · GHSA-gx55-p8g7-p3fh

medium2026-06-24

CVE-2026-57285-Jenkins GitHub Branch Source Plugin has missing permission check that allows enumerating GitHub Enterprise server URLs

jenkinsci/github-branch-source-plugin · GHSA-g7c6-wxjf-8564

medium2026-06-24

CVE-2026-57290-Jenkins Priority Sorter Plugin has a CSRF vulnerability

jenkinsci/priority-sorter-plugin · GHSA-fq56-wvv2-p8jf

high2026-06-24

CVE-2026-57281-Jenkins Script Security Plugin has a script security bypass vulnerability

jenkinsci/script-security-plugin · GHSA-cfj9-2vgr-hpxp

high2026-06-24

CVE-2026-57280-Jenkins Script Security Plugin sandbox bypass vulnerability

jenkinsci/script-security-plugin · GHSA-c3jm-9vj7-5v66

medium2026-06-24

CVE-2026-57294-Jenkins EC2 Fleet Plugin has a missing permission check

jenkinsci/ec2-fleet-plugin · GHSA-9v77-j4xv-34gq

medium2026-06-24

CVE-2026-57287-Jenkins Job Configuration History Plugin doesn't redact encrypted values of secrets in job and agent configurations

jenkinsci/job-config-history-plugin · GHSA-8qr4-27mh-hqfr

medium2026-06-24

CVE-2026-57283-Jenkins Pipeline: Groovy Plugin has a CSRF vulnerability

jenkinsci/workflow-cps-plugin · GHSA-72c8-3wwg-r59w

medium2026-06-24

CVE-2026-57295-Jenkins EC2 Fleet Plugin has a cross-site request forgery (CSRF) vulnerability

jenkinsci/ec2-fleet-plugin · GHSA-2x9c-vp3g-hvv2

medium2026-06-24

CVE-2026-57284-Jenkins Pipeline: Groovy Plugin vulnerable to unrestricted instantiation of types

jenkinsci/workflow-cps-plugin · GHSA-2w2h-gwwj-fh3q

high2026-06-23

CVE-2026-54329-Snipe-IT API Vulnerable to Cross-Tenant Accessory Injection

grokability/snipe-it · GHSA-pwpj-p52h-q484

low2026-06-23

CVE-2026-55542-Snipe-IT's S3 signature image retrieval lacks authorization before temporary URL

grokability/snipe-it · GHSA-6mmj-jhqj-6c6q

low2026-06-23

CVE-2026-55519-Snipe-IT has Improper Authorization in File Deletion (IDOR)

grokability/snipe-it · GHSA-x667-r589-43m7

medium2026-06-23

CVE-2026-55483-Snipe-IT Vulnerable to Privilege Escalation via Missing admin Permission Check in User Creation

grokability/snipe-it · GHSA-hf68-g98v-wp9g

medium2026-06-23

CVE-2026-55482-Snipe-IT has Multi-Tenancy Bypass via Bulk Asset Update

grokability/snipe-it · GHSA-33g4-646g-qwmm