Security advisories

medium2024-03-06

CVE-2024-28161-Jenkins Delphix Plugin has SSL/TLS certificate validation disabled by default

jenkinsci/delphix-plugin · GHSA-xj36-6xc6-8p9x

medium2024-03-06

CVE-2024-28162-Jenkins Delphix Plugin has improper SSL/TLS certificate validation

jenkinsci/delphix-plugin · GHSA-pfh3-j79r-vqrj

medium2024-03-06

CVE-2024-28159-Jenkins Subversion Partial Release Manager Plugin missing permission check

jenkinsci/svn-partial-release-mgr-plugin · GHSA-mr9j-qqjh-67f2

medium2024-03-06

CVE-2024-2216-Jenkins docker-build-step Plugin missing permission check

jenkinsci/docker-build-step-plugin · GHSA-8h2m-54wh-gwj3

medium2024-03-06

CVE-2024-2215-Jenkins docker-build-step Plugin Cross-Site Request Forgery vulnerability

jenkinsci/docker-build-step-plugin · GHSA-64c5-r2h5-c2fg

medium2024-03-06

CVE-2024-28160-Jenkins iceScrum Plugin vulnerable to stored Cross-site Scripting

jenkinsci/icescrum-plugin · GHSA-2pc2-h97h-2mmw

medium2024-03-06

CVE-2024-28155-Jenkins AppSpider Plugin missing permission checks

jenkinsci/appspider-build-scanner-plugin · GHSA-xxv9-w5hm-328j

high2024-03-06

CVE-2024-28150-Jenkins HTML Publisher Plugin Stored XSS vulnerability

jenkinsci/htmlpublisher-plugin · GHSA-xrrw-9j78-hpf3

medium2024-03-06

CVE-2024-28158-Jenkins Subversion Partial Release Manager Plugin vulnerable to Cross-Site Request Forgery

jenkinsci/svn-partial-release-mgr-plugin · GHSA-rv35-69ff-g9gv

medium2024-03-06

CVE-2024-28152-Jenkins Bitbucket Branch Source Plugin has incorrect trust policy behavior for pull requests

jenkinsci/bitbucket-branch-source-plugin · GHSA-m4rm-x2rr-357w

medium2024-03-06

CVE-2024-28153-Jenkins OWASP Dependency-Check Plugin has stored XSS vulnerability

jenkinsci/dependency-check-plugin · GHSA-9pp4-mx6x-xh36

high2024-03-06

CVE-2024-28149-Jenkins HTML Publisher Plugin does not properly sanitize input

jenkinsci/htmlpublisher-plugin · GHSA-8vcg-v7g4-3vr7

medium2024-03-06

CVE-2024-28154-Jenkins MQ Notifier Plugin exposes sensitive information in build logs

jenkinsci/mq-notifier-plugin · GHSA-8fm4-r23p-v68v

high2024-03-06

CVE-2024-28157-Jenkins GitBucket Plugin vulnerable to stored Cross-site Scripting

jenkinsci/gitbucket-plugin · GHSA-5j74-g3c5-wqww

medium2024-03-06

CVE-2024-28156-Jenkins Build Monitor View Plugin vulnerable to stored Cross-site Scripting

jenkinsci/build-monitor-plugin · GHSA-5j5r-6mv9-m255

medium2024-03-06

CVE-2024-28151-Jenkins HTML Publisher Plugin Path traversal vulnerability

jenkinsci/htmlpublisher-plugin · GHSA-478x-m3mx-7j3f

high2024-03-06

CVE-2024-28101-Apollo Router's Compressed Payloads do not respect HTTP Payload Limits

apollographql/router · GHSA-cgqf-3cq5-wvcj

high2024-03-06

CVE-2024-27758-RPyC's missing security check results in code execution when using numpy.array on the server-side.

tomerfiliba-org/rpyc · GHSA-h5cg-53g7-gqjw

high2024-03-06

CVE-2024-27934-*const c_void / ExternalPointer unsoundness leading to use-after-free

denoland/deno · GHSA-3j27-563v-28wf

high2024-03-06

CVE-2024-27933-Deno arbitrary file descriptor close via `op_node_ipc_pipe()` leading to permission prompt bypass

denoland/deno · GHSA-6q4w-9x56-rmwq