Known Vulnerabilities for Script Security by Jenkins
Listed below are 10 of the newest known vulnerabilities associated with "Script Security" by "Jenkins".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-61456 json | The Grav API plugin (getgrav/grav-plugin-api) before 1.0.3 fails to sanitize SVG files uploaded through the POST /api/v1/medi... | Not Provided | 2026-07-10 | 2026-07-10 |
| CVE-2026-58371 json | SeaweedFS before 4.30 reflects the callback query parameter verbatim into responses served with Content-Type application/java... | Not Provided | 2026-06-30 | 2026-07-01 |
| CVE-2026-57281 json | Jenkins Script Security Plugin 1402.v94c9ce464861 and earlier does not reject Groovy AST transformation annotations carrying ... | Not Provided | 2026-06-24 | 2026-06-30 |
| CVE-2026-57280 json | Jenkins Script Security Plugin 1402.v94c9ce464861 and earlier does not intercept the implicit type casts applied to the eleme... | Not Provided | 2026-06-24 | 2026-06-24 |
| CVE-2026-50557 json | Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other lang... | Not Provided | 2026-06-22 | 2026-06-22 |
| CVE-2026-48692 json | FastNetMon Community Edition through 1.2.9 exposes a gRPC API server on port 50052 with no authentication mechanism. The serv... | Not Provided | 2026-05-26 | 2026-05-26 |
| CVE-2026-47119 json | Agent Zero before version 1.15 contains a stored cross-site scripting vulnerability that allows attackers to execute arbitrar... | Not Provided | 2026-05-27 | 2026-05-27 |
| CVE-2026-45627 json | Arcane is an interface for managing Docker containers, images, networks, and volumes. Prior to 1.19.0, the unauthenticated GE... | Not Provided | 2026-05-29 | 2026-05-29 |
| CVE-2026-45348 json | pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev100, the packages.js template at src... | Not Provided | 2026-05-28 | 2026-05-28 |
| CVE-2026-44429 json | The MCP Registry provides MCP clients with a list of MCP servers, like an app store for MCP servers. Prior to 1.7.7, the publ... | Not Provided | 2026-05-14 | 2026-05-15 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Jenkins | Script Security | 1.9 | |||
| Application | Jenkins | Script Security | 1.8 | |||
| Application | Jenkins | Script Security | 1.74 | |||
| Application | Jenkins | Script Security | 1.73 | |||
| Application | Jenkins | Script Security | 1.72 | |||
| Application | Jenkins | Script Security | 1.71 | |||
| Application | Jenkins | Script Security | 1.70 | |||
| Application | Jenkins | Script Security | 1.7 | |||
| Application | Jenkins | Script Security | 1.69 | |||
| Application | Jenkins | Script Security | 1.68 | |||
| Application | Jenkins | Script Security | 1.67 | |||
| Application | Jenkins | Script Security | 1.66.4 | |||
| Application | Jenkins | Script Security | 1.66.2 | |||
| Application | Jenkins | Script Security | 1.66.1 | |||
| Application | Jenkins | Script Security | 1.66 | |||
| Application | Jenkins | Script Security | 1.65 | |||
| Application | Jenkins | Script Security | 1.64 | |||
| Application | Jenkins | Script Security | 1.63.1 | |||
| Application | Jenkins | Script Security | 1.63 | |||
| Application | Jenkins | Script Security | 1.62 |