- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 8 · 3 high
- Dependents
- 6
- Registry
- Maven Central
Advisories 8
- CVE-2026-48922High 7.5
Jenkins Credentials Binding Plugin 720.v3f6decef43ea_ and earlier does not properly sanitize file names for file and zip file credentials…
Affected: fixed in 725.ve52b.
- CVE-2026-42520High 7.5
Jenkins Credentials Binding Plugin 719.v80e905ef14eb_ and earlier does not sanitize file names for file and zip file credentials, allowing…
Affected: fixed in 720.v3f6decef43ea.
- CVE-2025-53650High 7.3
Jenkins Credentials Binding Plugin 687.v619cb_15e923f and earlier does not properly mask (i.e., replace with asterisks) credentials…
Affected: fixed in 687.689.v1a.
- CVE-2022-20616Unrated
Jenkins Credentials Binding Plugin 1.27 and earlier does not perform a permission check in a method implementing form validation, allowing…
Affected: from 1.25, fixed in 1.27.1; fixed in 1.24.1.
- CVE-2020-2182Unrated
Jenkins Credentials Binding Plugin 1.22 and earlier does not mask (i.e., replace with asterisks) secrets containing a `$` character in…
Affected: fixed in 1.23.
- CVE-2020-2181Unrated
Jenkins Credentials Binding Plugin 1.22 and earlier does not mask (i.e., replace with asterisks) secrets in the build log when the build…
Affected: fixed in 1.23.
- CVE-2019-1010241Unrated
Jenkins Credentials Binding Plugin Jenkins 1.17 is affected by: CWE-257: Storing Passwords in a Recoverable Format.
Affected: versions 1.17.
- CVE-2018-1000057Unrated
Jenkins Credentials Binding Plugin 1.14 and earlier masks passwords it provides to build processes in their build logs.
Affected: fixed in 1.15.