Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.jenkins-ci.plugins:git-client

6 known vulnerabilities (3 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
6 · 3 medium
Registry
Maven Central

Advisories 6

  • CVE-2026-57282Medium 5.0

    Jenkins Git client Plugin 6.6.0 and earlier does not correctly escape the workspace directory name when it is embedded into a generated…

    Affected: fixed in 6.6.1.

  • CVE-2025-67640Medium 5.0

    Jenkins Git client Plugin 6.4.0 and earlier does not not correctly escape the path to the workspace directory as part of an argument in a…

    Affected: fixed in 6.4.1.

  • CVE-2025-58458Medium 4.3

    In Jenkins Git client Plugin 6.3.2 and earlier, except 6.1.4 and 6.2.1, Git URL field form validation responses differ based on whether…

    Affected: fixed in 6.3.3.

  • Jenkins Git client Plugin 3.11.0 and earlier does not perform SSH host key verification when connecting to Git repositories via SSH…

    Affected: fixed in 3.11.1.

  • Jenkins Git Client Plugin 2.8.4 and earlier and 3.0.0-rc did not properly restrict values passed as URL argument to an invocation of 'git…

    Affected: fixed in 2.8.5.

  • Jenkins Git Client Plugin 2.4.2 and earlier creates temporary file with insecure permissions resulting in information disclosure

    Affected: fixed in 2.4.3.