Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: Jenkins Script Security Plugin — Jenkins Security Advisory 2026-06-24 Clear all filters
TI-2026-41218 CVE-2026-57281 · GHSA-cfj9-2vgr-hpxp

Protection mechanism failure in Jenkins Script Security Plugin

Priority LOW 37

Jenkins Script Security Plugin 1402.v94c9ce464861 and earlier does not reject Groovy AST transformation annotations carrying an extensions member, allowing attackers able to run sandboxed Groovy scripts to execute code o…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00923 Published 2026-06-24 Partial fix · 1402.1405.vc96e74964250 CWE-693
TI-2026-41217 CVE-2026-57280 · GHSA-c3jm-9vj7-5v66

Protection mechanism failure in Jenkins Script Security Plugin

Priority MEDIUM 41

Jenkins Script Security Plugin 1402.v94c9ce464861 and earlier does not intercept the implicit type casts applied to the elements of typed for-each loops in sandboxed Groovy scripts, allowing attackers able to provide suc…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00513 Published 2026-06-24 Partial fix · 1402.1405.vc96e74964250 CWE-693