- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 12 · 1 critical, 1 high, 4 medium, 1 low
- Dependents
- 1
- Registry
- Maven Central
Advisories 12
- CVE-2026-48920High 8.8
Jenkins Email Extension Plugin 1933.v45cec755423f and earlier allows inlining images as `base64` in email content by setting the…
Affected: fixed in 1933.1935.v276319e3cc47.
- CVE-2023-32980Medium 4.3
A cross-site request forgery (CSRF) vulnerability in Jenkins Email Extension Plugin allows attackers to make another user stop watching an…
Affected: fixed in 2.96.1.
- CVE-2023-32979Medium 4.3
Jenkins Email Extension Plugin does not perform a permission check in a method implementing form validation, allowing attackers with…
Affected: fixed in 2.96.1.
- CVE-2023-25765Critical 9.9
In Jenkins Email Extension Plugin 2.93 and earlier, templates defined inside a folder were not subject to Script Security protection…
Affected: fixed in 2.94.
- CVE-2023-25764Medium 5.4
Jenkins Email Extension Plugin 2.93 and earlier does not escape, sanitize, or sandbox rendered email template output or log output…
Affected: fixed in 2.94.
- CVE-2023-25763Medium 5.4
Jenkins Email Extension Plugin 2.93 and earlier does not escape various fields included in bundled email templates, resulting in a stored…
Affected: fixed in 2.94.
- CVE-2020-2253Unrated
Jenkins Email Extension Plugin 2.75 and earlier does not perform hostname validation when connecting to the configured SMTP server.
Affected: fixed in 2.76.
- CVE-2020-2232Unrated
Jenkins Email Extension Plugin 2.72 and 2.73 transmits and displays the SMTP password in plain text as part of the global Jenkins…
Affected: from 2.72, fixed in 2.74.
- CVE-2019-1003032Unrated
A sandbox bypass vulnerability exists in Jenkins Email Extension Plugin 2.64 and earlier in pom.xml…
Affected: fixed in 2.65.
- CVE-2018-1000417Unrated
A cross-site request forgery vulnerability exists in Jenkins Email Extension Template Plugin 1.0 and earlier in…
Affected: fixed in 1.1.
- CVE-2017-2654Low 3.7
jenkins-email-ext before version 2.57.1 is vulnerable to an Information Exposure.
Affected: fixed in 2.57.1.
- CVE-2018-1000176Unrated
An exposure of sensitive information vulnerability exists in Jenkins Email Extension Plugin 2.61 and older in…
Affected: fixed in 2.62.