Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

com.coravy.hudson.plugins.github:github

6 known vulnerabilities (1 critical), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
6 · 1 critical
Dependents
0
Registry
Maven Central

Advisories 6

  • CVE-2026-42523Critical 9.0

    Jenkins GitHub Plugin 1.46.0 and earlier improperly processes the current job URL as part of JavaScript implementing validation of the…

    Affected: fixed in 1.46.0.1.

  • Jenkins GitHub Plugin 1.37.3 and earlier does not escape the GitHub project URL on the build page when showing changes, resulting in a…

    Affected: fixed in 1.37.3.1.

  • Jenkins GitHub Plugin 1.34.4 and earlier uses a non-constant time comparison function when checking whether the provided and computed…

    Affected: fixed in 1.34.5.

  • A exposure of sensitive information vulnerability exists in Jenkins GitHub Plugin 1.29.1 and earlier in GitHubTokenCredentialsCreator.java…

    Affected: fixed in 1.29.2.

  • A server-side request forgery vulnerability exists in Jenkins GitHub Plugin 1.29.0 and older in GitHubPluginConfig.java that allows…

    Affected: fixed in 1.29.1.

  • A exposure of sensitive information vulnerability exists in Jenkins GitHub Plugin 1.29.0 and older in GitHubServerConfig.java that allows…

    Affected: fixed in 1.29.1.