- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 3 · 2 critical, 1 medium
- Registry
- Maven Central
Advisories 3
- CVE-2022-41239Medium 5.4
Jenkins DotCi Plugin 2.40.00 and earlier does not escape the GitHub user name parameter provided to commit notifications when displaying…
Affected: through 2.40.00.
- CVE-2022-41238Critical 9.8
A missing permission check in Jenkins DotCi Plugin 2.40.00 and earlier allows unauthenticated attackers to trigger builds of jobs…
Affected: through 2.40.00.
- CVE-2022-41237Critical 9.8
Jenkins DotCi Plugin 2.40.00 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in…
Affected: through 2.40.00.