Known Vulnerabilities for Script Security by Jenkins
Listed below are 10 of the newest known vulnerabilities associated with "Script Security" by "Jenkins".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-41469 json | Beghelli Sicuro24 SicuroWeb does not enforce a Content Security Policy, allowing unrestricted loading of external JavaScript ... | Not Provided | 2026-04-22 | 2026-04-22 |
| CVE-2026-35390 json | Bulwark Webmail is a self-hosted webmail client for Stalwart Mail Server. Prior to 1.4.11, the reverse proxy (proxy.ts) set t... | Not Provided | 2026-04-06 | 2026-04-07 |
| CVE-2026-34765 json | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.5, 40.8... | Not Provided | 2026-04-07 | 2026-04-13 |
| CVE-2026-34605 json | SiYuan is a personal knowledge management system. From version 3.6.0 to before version 3.6.2, the SanitizeSVG function introd... | Not Provided | 2026-03-31 | 2026-04-01 |
| CVE-2026-34375 json | WWBN AVideo is an open source video platform. In versions up to and including 26.0, the YPTWallet Stripe payment confirmation... | Not Provided | 2026-03-27 | 2026-03-31 |
| CVE-2026-33525 json | Authelia is an open-source authentication and authorization server providing two-factor authentication and single sign-on (SS... | Not Provided | 2026-03-26 | 2026-03-30 |
| CVE-2026-4364 json | IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and I... | Not Provided | 2026-04-01 | 2026-04-02 |
| CVE-2025-49993 json | Missing Authorization vulnerability in csarturas Cookie-Script.com cookie-script-com allows Exploiting Incorrectly Configured... | Not Provided | 2025-06-20 | 2026-04-01 |
| CVE-2023-24422 json | A sandbox bypass vulnerability involving map constructors in Jenkins Script Security Plugin 1228.vd93135a_2fb_25 and earlier ... | 8.8 - HIGH | 2023-01-26 | 2023-02-04 |
| CVE-2022-45379 json | Jenkins Script Security Plugin 1189.vb_a_b_7c8fd5fde and earlier stores whole-script approvals as the SHA-1 hash of the scrip... | 7.5 - HIGH | 2022-11-15 | 2023-11-22 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Jenkins | Script Security | 1.9 | |||
| Application | Jenkins | Script Security | 1.8 | |||
| Application | Jenkins | Script Security | 1.74 | |||
| Application | Jenkins | Script Security | 1.73 | |||
| Application | Jenkins | Script Security | 1.72 | |||
| Application | Jenkins | Script Security | 1.71 | |||
| Application | Jenkins | Script Security | 1.70 | |||
| Application | Jenkins | Script Security | 1.7 | |||
| Application | Jenkins | Script Security | 1.69 | |||
| Application | Jenkins | Script Security | 1.68 | |||
| Application | Jenkins | Script Security | 1.67 | |||
| Application | Jenkins | Script Security | 1.66.4 | |||
| Application | Jenkins | Script Security | 1.66.2 | |||
| Application | Jenkins | Script Security | 1.66.1 | |||
| Application | Jenkins | Script Security | 1.66 | |||
| Application | Jenkins | Script Security | 1.65 | |||
| Application | Jenkins | Script Security | 1.64 | |||
| Application | Jenkins | Script Security | 1.63.1 | |||
| Application | Jenkins | Script Security | 1.63 | |||
| Application | Jenkins | Script Security | 1.62 |