Bitbucket Push And Pull Request (Jenkins) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 58 known versions, newest CVE from 2026-06-24. Vendor: Jenkins.

CVEs of Bitbucket Push And Pull Request

• CVE-2026-57289 - CVSS 4.8 (medium), 2026-06-24: Jenkins Bitbucket Push and Pull Request Plugin 3.3.8 and earlier unconditionally disables SSL/TLS certificate and hostname validation for connections sending…
• CVE-2023-41937 - CVSS 7.5 (high), 2023-09-06: Jenkins Bitbucket Push and Pull Request Plugin 2.4.0 through 2.8.3 (both inclusive) trusts values provided in the webhook payload, including certain URLs, and…