Known Vulnerabilities for Configuration As Code by Jenkins
Listed below are 9 of the newest known vulnerabilities associated with "Configuration As Code" by "Jenkins".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-77084 json | n8n before 1.123.69 (and 2.x before 2.33.4 / 2.34.1) contains a code execution vulnerability in the Git node. The Git node ex... | Not Provided | 2026-08-20 | 2026-08-21 |
| CVE-2026-77083 json | n8n is a workflow automation platform. In versions prior to 1.123.69, 2.33.4, and 2.34.1, the JavaScript Code node's VM sandb... | Not Provided | 2026-08-20 | 2026-08-21 |
| CVE-2026-76635 json | baserCMS before 5.3.0 contains a SQL injection vulnerability in BcDatabaseService.php that allows authenticated administrator... | Not Provided | 2026-08-20 | 2026-08-20 |
| CVE-2026-76315 json | In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power" Splun... | Not Provided | 2026-08-19 | 2026-08-21 |
| CVE-2026-76314 json | In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power" Splun... | Not Provided | 2026-08-19 | 2026-08-21 |
| CVE-2026-76241 json | stigmem-node 0.9.0a1 allows plugin signature enforcement to be disabled via a single configuration flag without a second expl... | Not Provided | 2026-08-19 | 2026-08-21 |
| CVE-2026-76240 json | stigmem-node 0.9.0a1 interpolates Postgres backend schema identifiers into SQL strings without defensive quoting. In the affe... | Not Provided | 2026-08-19 | 2026-08-20 |
| CVE-2026-75926 json | Hugo 0.161.0 placed the Node asset pipelines behind the Node.js permission model so that code running through PostCSS, Babel,... | Not Provided | 2026-08-18 | 2026-08-20 |
| CVE-2026-75149 json | marimo before 0.23.15 contains a code injection vulnerability in the notebook configuration handler that allows attackers to ... | Not Provided | 2026-08-19 | 2026-08-21 |
| CVE-2026-74704 json | In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_cake: drop WARN_ON(1) for malformed packe... | Not Provided | 2026-08-22 | 2026-08-22 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Jenkins | Configuration As Code | 1.9 | |||
| Application | Jenkins | Configuration As Code | 1.8 | |||
| Application | Jenkins | Configuration As Code | 1.7 | |||
| Application | Jenkins | Configuration As Code | 1.6 | |||
| Application | Jenkins | Configuration As Code | 1.5 | |||
| Application | Jenkins | Configuration As Code | 1.4 | |||
| Application | Jenkins | Configuration As Code | 1.3 | |||
| Application | Jenkins | Configuration As Code | 1.27 | |||
| Application | Jenkins | Configuration As Code | 1.26 | |||
| Application | Jenkins | Configuration As Code | 1.25 | |||
| Application | Jenkins | Configuration As Code | 1.24 | |||
| Application | Jenkins | Configuration As Code | 1.23.1 | |||
| Application | Jenkins | Configuration As Code | 1.23 | |||
| Application | Jenkins | Configuration As Code | 1.22 | |||
| Application | Jenkins | Configuration As Code | 1.21 | |||
| Application | Jenkins | Configuration As Code | 1.20 | |||
| Application | Jenkins | Configuration As Code | 1.2 | |||
| Application | Jenkins | Configuration As Code | 1.19 | |||
| Application | Jenkins | Configuration As Code | 1.18 | |||
| Application | Jenkins | Configuration As Code | 1.17 |