Known Vulnerabilities for Script Security by Jenkins
Listed below are 10 of the newest known vulnerabilities associated with "Script Security" by "Jenkins".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-70431 json | Jenkins Multijob Plugin 669.v9d96a_d9c71b_0 and earlier provides Groovy scripting features that do not integrate with Script ... | Not Provided | 2026-08-05 | 2026-08-06 |
| CVE-2026-67531 json | FrontMCP is a TypeScript-first framework for the Model Context Protocol (MCP). Prior to 1.5.7, the sandboxed codecall:execute... | Not Provided | 2026-08-06 | 2026-08-06 |
| CVE-2026-66829 json | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in the HTML5 scrubber in rrrene html_sanitize_ex allows a r... | Not Provided | 2026-08-06 | 2026-08-06 |
| CVE-2026-66418 json | OpenClaw Dashboard v3.0.0 contains a stored cross-site scripting vulnerability that allows unauthenticated remote attackers t... | Not Provided | 2026-07-30 | 2026-07-31 |
| CVE-2026-61859 json | ImageMagick before 7.1.2-26 and 6.9.13-x before 6.9.13-51 contains a policy bypass vulnerability in the -script operation due... | Not Provided | 2026-07-15 | 2026-07-15 |
| CVE-2026-61456 json | The Grav API plugin (getgrav/grav-plugin-api) before 1.0.3 fails to sanitize SVG files uploaded through the POST /api/v1/medi... | Not Provided | 2026-07-10 | 2026-07-10 |
| CVE-2026-58371 json | SeaweedFS before 4.30 reflects the callback query parameter verbatim into responses served with Content-Type application/java... | Not Provided | 2026-06-30 | 2026-07-14 |
| CVE-2026-57281 json | Jenkins Script Security Plugin 1402.v94c9ce464861 and earlier does not reject Groovy AST transformation annotations carrying ... | Not Provided | 2026-06-24 | 2026-07-15 |
| CVE-2026-57280 json | Jenkins Script Security Plugin 1402.v94c9ce464861 and earlier does not intercept the implicit type casts applied to the eleme... | Not Provided | 2026-06-24 | 2026-06-24 |
| CVE-2026-56398 json | Open WebUI before 0.9.5 contains a stored cross-site scripting vulnerability in the OAuth authentication flow where the pictu... | Not Provided | 2026-07-15 | 2026-07-15 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Jenkins | Script Security | 1.9 | |||
| Application | Jenkins | Script Security | 1.8 | |||
| Application | Jenkins | Script Security | 1.74 | |||
| Application | Jenkins | Script Security | 1.73 | |||
| Application | Jenkins | Script Security | 1.72 | |||
| Application | Jenkins | Script Security | 1.71 | |||
| Application | Jenkins | Script Security | 1.70 | |||
| Application | Jenkins | Script Security | 1.7 | |||
| Application | Jenkins | Script Security | 1.69 | |||
| Application | Jenkins | Script Security | 1.68 | |||
| Application | Jenkins | Script Security | 1.67 | |||
| Application | Jenkins | Script Security | 1.66.4 | |||
| Application | Jenkins | Script Security | 1.66.2 | |||
| Application | Jenkins | Script Security | 1.66.1 | |||
| Application | Jenkins | Script Security | 1.66 | |||
| Application | Jenkins | Script Security | 1.65 | |||
| Application | Jenkins | Script Security | 1.64 | |||
| Application | Jenkins | Script Security | 1.63.1 | |||
| Application | Jenkins | Script Security | 1.63 | |||
| Application | Jenkins | Script Security | 1.62 |