Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

io.jenkins.plugins:pipeline-groovy-lib

5 known vulnerabilities (1 high, 2 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
5 · 1 high, 2 medium
Dependents
0
Registry
Maven Central

Advisories 5

  • CVE-2026-57284Medium 4.3

    Jenkins Pipeline: Groovy Plugin 4331.v9d06ed4658ff and earlier does not restrict the types that can be instantiated through the Pipeline…

    Affected: fixed in 4331.4333.

  • CVE-2026-57283Medium 4.3

    A cross-site request forgery (CSRF) vulnerability in Jenkins Pipeline: Groovy Plugin 4331.v9d06ed4658ff and earlier allows attackers to…

    Affected: fixed in 4331.4333.

  • Jenkins Pipeline: Groovy Libraries Plugin 797.v90ea_a_9b_e45a_0 and earlier does not prohibit symbolic links in shared libraries, allowing…

    Affected: fixed in 798.v5cc688825312.

  • A sandbox bypass vulnerability in Jenkins Pipeline: Deprecated Groovy Libraries Plugin 583.vf3b_454e43966 and earlier allows attackers…

    Affected: fixed in 613.v9c41a_160233f.

  • A sandbox bypass vulnerability in Jenkins Pipeline: Groovy Libraries Plugin 612.v84da_9c54906d and earlier allows attackers with…

    Affected: fixed in 613.v9c41a_160233f.