Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.jenkins-ci.plugins:github-branch-source

5 known vulnerabilities (2 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
5 · 2 medium
Registry
Maven Central

Advisories 5

  • CVE-2026-57285Medium 4.3

    A missing permission check in Jenkins GitHub Branch Source Plugin 1967.1969.v205fd594c821 and earlier allows attackers with Overall/Read…

    Affected: fixed in 1967.1970.

  • CVE-2026-42522Medium 4.3

    A missing permission check in Jenkins GitHub Branch Source Plugin 1967.vdea_d580c1a_b_a_ and earlier allows attackers with Overall/Read…

    Affected: fixed in 1967.1969.v205fd594c821.

  • A server-side request forgery vulnerability exists in Jenkins GitHub Branch Source Plugin 2.3.4 and older in Endpoint.java that allows…

    Affected: fixed in 2.3.5.

  • GitHub Branch Source Plugin connects to a user-specified GitHub API URL (e.g.

    Affected: fixed in 2.2.0-alpha-1.

  • GitHub Branch Source provides a list of applicable credential IDs to allow users configuring a job to select the one they'd like to use.

    Affected: fixed in 2.2.0-alpha-1.