Github (Jenkins) - vulnerabilities (CVEs)

6 CVEs, 0 in the last 30 days, 107 known versions, newest CVE from 2026-04-29. Vendor: Jenkins.

CVEs of Github

• CVE-2026-42523 - CVSS 9 (critical), 2026-04-29: Jenkins GitHub Plugin 1.46.0 and earlier improperly processes the current job URL as part of JavaScript implementing validation of the feature "GitHub hook…
• CVE-2023-46650 - CVSS 5.4 (medium), 2023-10-25: Jenkins GitHub Plugin 1.37.3 and earlier does not escape the GitHub project URL on the build page when showing changes, resulting in a stored cross-site…
• CVE-2022-36885 - CVSS 5.3 (medium), 2022-07-27: Jenkins GitHub Plugin 1.34.4 and earlier uses a non-constant time comparison function when checking whether the provided and computed webhook signatures are…
• CVE-2018-1000600 - CVSS 8.8 (high), 2018-06-26: A exposure of sensitive information vulnerability exists in Jenkins GitHub Plugin 1.29.1 and earlier in GitHubTokenCredentialsCreator.java that allows…
• CVE-2018-1000184 - CVSS 5.4 (medium), 2018-06-05: A server-side request forgery vulnerability exists in Jenkins GitHub Plugin 1.29.0 and older in GitHubPluginConfig.java that allows attackers with…
• CVE-2018-1000183 - CVSS 6.5 (medium), 2018-06-05: A exposure of sensitive information vulnerability exists in Jenkins GitHub Plugin 1.29.0 and older in GitHubServerConfig.java that allows attackers with…