Skip to main content
← Maven

org.jenkins-ci.plugins.workflow:workflow-cps-global-lib

10 known vulnerabilities, with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
10
Registry
Maven Central

Advisories 10

  • A sandbox bypass vulnerability in Jenkins Pipeline: Deprecated Groovy Libraries Plugin 583.vf3b_454e43966 and earlier allows attackers…

    Affected: fixed in 588.v576c103a_ff86.

  • A sandbox bypass vulnerability in Jenkins Pipeline: Groovy Libraries Plugin 612.v84da_9c54906d and earlier allows attackers with…

    Affected: fixed in 588.v576c103a_ff86.

  • Jenkins Pipeline: Shared Groovy Libraries Plugin 564.ve62a_4eb_b_e039 and earlier, except 2.21.3, allows attackers able to submit pull…

    Affected: fixed in 2.21.3; from 544.vff04fa68714d, fixed in 566.vd0a.

  • Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier uses the names of Pipeline libraries to create cache…

    Affected: fixed in 561.va_ce0de3c2d69.

  • A sandbox bypass vulnerability in Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier allows attackers with…

    Affected: fixed in 561.va_ce0de3c2d69.

  • A sandbox bypass vulnerability in Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier allows attackers with…

    Affected: fixed in 561.va_ce0de3c2d69.

  • Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier does not restrict the names of resources passed to the…

    Affected: from 2.22, fixed in 561.va_ce0de3c2d69; from 2.19, fixed in 2.21.1; fixed in 2.18.1.

  • Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier follows symbolic links to locations outside of the expected…

    Affected: from 2.22, fixed in 561.va_ce0de3c2d69; from 2.19, fixed in 2.21.1; fixed in 2.18.1.

  • Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier uses the same checkout directories for distinct SCMs for…

    Affected: from 544.vff04fa68714d, fixed in 561.va; from 2.19, fixed in 2.21.1; fixed in 2.18.1.

  • A missing permission check in Jenkins Pipeline: Shared Groovy Libraries Plugin 2.14 and earlier allowed users with Overall/Read access to…

    Affected: fixed in 2.15.