Jenkins External Workspace Manager Plugin (Jenkins Project) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-08-05. Vendor: Jenkins Project.

CVEs of Jenkins External Workspace Manager Plugin

• CVE-2026-70436 - CVSS 4.3 (medium), 2026-08-05: Jenkins External Workspace Manager Plugin 1.4.1 and earlier does not perform a permission check (1.4.0 and earlier) or performs an improper permission check…
• CVE-2026-57296 - CVSS 8.8 (high), 2026-06-24: Jenkins External Workspace Manager Plugin 1.3.2 and earlier does not reject path traversal sequences in the custom workspace path provided to the exwsAllocate…