Openshift Pipeline (Jenkins) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 59 known versions, newest CVE from 2025-10-29. Vendor: Jenkins.

CVEs of Openshift Pipeline

• CVE-2025-64143 - CVSS 4.3 (medium), 2025-10-29: Jenkins OpenShift Pipeline Plugin 1.0.57 and earlier stores authorization tokens unencrypted in job config.xml files on the Jenkins controller where they can…
• CVE-2020-2167 - CVSS 8.8 (high), 2020-03-25: Jenkins OpenShift Pipeline Plugin 1.0.56 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote…