# org.biouno:uno-choice (Maven) vulnerabilities 5 known vulnerabilities, with the versions each affects and the releases that fix them. ## At a glance - Latest release: not known (cve.now hasn't read this package's releases) - Newest unaffected release: not known without release data - Registry: https://central.sonatype.com/artifact/org.biouno/uno-choice ## Advisories (5) ### [CVE-2021-21699](https://cve.now/CVE-2021-21699): Jenkins Active Choices Plugin 2.5.6 and earlier does not escape the parameter name of reactive parameters and dynamic reference… - Severity: Unrated - Published: Nov 12, 2021 - Affected: fixed in 2.5.7. ### [CVE-2021-21616](https://cve.now/CVE-2021-21616): Jenkins Active Choices Plugin 2.5.2 and earlier does not escape reference parameter values, resulting in a stored cross-site scripting… - Severity: Unrated - Published: Feb 24, 2021 - Affected: fixed in 2.5.3. ### [CVE-2020-2290](https://cve.now/CVE-2020-2290): Jenkins Active Choices Plugin 2.4 and earlier does not escape some return values of sandboxed scripts for Reactive Reference Parameters… - Severity: Unrated - Published: Oct 8, 2020 - Affected: fixed in 2.5. ### [CVE-2020-2289](https://cve.now/CVE-2020-2289): Jenkins Active Choices Plugin 2.4 and earlier does not escape the name and description of build parameters, resulting in a stored… - Severity: Unrated - Published: Oct 8, 2020 - Affected: fixed in 2.5. ### [CVE-2017-1000386](https://cve.now/CVE-2017-1000386): Jenkins Active Choices plugin version 1.5.3 and earlier allowed users with Job/Configure permission to provide arbitrary HTML to be shown… - Severity: Unrated - Published: Jan 26, 2018 - Affected: fixed in 2.0. --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/packages/maven/org.biouno:uno-choice Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.