Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

io.jenkins.plugins:dingding-notifications

2 known vulnerabilities (1 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
2 · 1 medium
Registry
Maven Central

Advisories 2

  • CVE-2025-47888Medium 5.9

    Jenkins DingTalk Plugin 2.7.3 and earlier unconditionally disables SSL/TLS certificate and hostname validation for connections to the…

    Affected: through 2.7.3.

  • Jenkins Dingding[钉钉] Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users…

    Affected: fixed in 2.0.0.