Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Vendor: samrocketman Clear all filters
TI-2025-42381 CVE-2025-68925 · GHSA-5pq9-5mpr-jj85

Jervis has a JWT Algorithm Confusion Vulnerability

Priority LOW 35

Jervis is a library for Job DSL plugin scripts and shared Jenkins pipeline libraries.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00153 Published 2026-01-13 Fixed in 2.2 CWE-347
TI-2025-42174 CVE-2025-68703 · GHSA-36h5-vrq6-pp34

Jervis has a Salt for PBKDF2 derived from password

Priority MEDIUM 43

Jervis is a library for Job DSL plugin scripts and shared Jenkins pipeline libraries.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00133 Published 2026-01-13 Fixed in 2.2 CWE-326
TI-2025-42173 CVE-2025-68702 · GHSA-67rj-pjg6-pq59

Jervis has a SHA-256 Hex String Padding Bug

Priority MEDIUM 43

Jervis is a library for Job DSL plugin scripts and shared Jenkins pipeline libraries.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00174 Published 2026-01-13 Fixed in 2.2 CWE-327
TI-2025-42387 CVE-2025-68931 · GHSA-gxp5-mv27-vjcj

Jervis has AES CBC Mode Without Authentication

Priority MEDIUM 43

Jervis is a library for Job DSL plugin scripts and shared Jenkins pipeline libraries.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00199 Published 2026-01-13 Fixed in 2.2 CWE-287
TI-2025-42169 CVE-2025-68698 · GHSA-mqw7-c5gg-xq97

Jervis has an RSA PKCS#1 v1.5 Padding Vulnerability

Priority MEDIUM 43

Jervis is a library for Job DSL plugin scripts and shared Jenkins pipeline libraries.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00137 Published 2026-01-13 Fixed in 2.2 CWE-327