- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 9
- Registry
- Maven Central
Advisories 9
- CVE-2022-23106Unrated
Jenkins Configuration as Code Plugin 1.55 and earlier used a non-constant time comparison function when validating an authentication token…
Affected: from 1.55, fixed in 1.55.1; from 1.54, fixed in 1.54.1; from 1.48, fixed in 1.53.1; fixed in 1.47.1.
- CVE-2019-10367Unrated
Due to an incomplete fix of CVE-2019-10343, Jenkins Configuration as Code Plugin 1.26 and earlier did not properly apply masking to some…
Affected: fixed in 1.27.
- CVE-2019-10363Unrated
Jenkins Configuration as Code Plugin 1.24 and earlier did not reliably identify sensitive values expected to be exported in their…
Affected: fixed in 1.25.
- CVE-2019-10362Unrated
Jenkins Configuration as Code Plugin 1.24 and earlier did not escape values resulting in variable interpolation during configuration…
Affected: fixed in 1.25.
- CVE-2019-10345Unrated
Jenkins Configuration as Code Plugin 1.20 and earlier did not treat the proxy password as a secret to be masked when logging or encrypted…
Affected: fixed in 1.25.
- CVE-2019-10344Unrated
Missing permission checks in Jenkins Configuration as Code Plugin 1.24 and earlier in various HTTP endpoints allowed users with…
Affected: fixed in 1.25.
- CVE-2019-10343Unrated
Jenkins Configuration as Code Plugin 1.24 and earlier did not properly apply masking to values expected to be hidden when logging the…
Affected: fixed in 1.25.
- CVE-2018-1000610Unrated
A exposure of sensitive information vulnerability exists in Jenkins Configuration as Code Plugin 0.7-alpha and earlier in…
Affected: fixed in 0.8-alpha.
- CVE-2018-1000609Unrated
A exposure of sensitive information vulnerability exists in Jenkins Configuration as Code Plugin 0.7-alpha and earlier in…
Affected: fixed in 0.8-alpha.