Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: Jenkins Pipeline: Groovy Plugin — Jenkins Security Advisory 2026-06-24 Clear all filters
TI-2026-41221 CVE-2026-57284 · GHSA-2w2h-gwwj-fh3q

Jenkins Pipeline: Groovy Plugin 4331.v9d06ed4658ff and earlier does not restrict the…

Priority LOW 20

Jenkins Pipeline: Groovy Plugin 4331.v9d06ed4658ff and earlier does not restrict the types that can be instantiated through the Pipeline Snippet Generator, allowing attackers to instantiate types related to job or system…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00338 Published 2026-06-24 Fixed in 4331.4333 CWE-470
TI-2026-41220 CVE-2026-57283 · GHSA-72c8-3wwg-r59w

Cross-site request forgery in Jenkins Pipeline: Groovy Plugin

Priority LOW 20

A cross-site request forgery (CSRF) vulnerability in Jenkins Pipeline: Groovy Plugin 4331.v9d06ed4658ff and earlier allows attackers to instantiate types related to job or system configuration other than Pipeline steps t…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00237 Published 2026-06-24 Partial fix · 4331.4333 CWE-352