Jenkins Git Client Plugin (Jenkins Project) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-06-24. Vendor: Jenkins Project.

CVEs of Jenkins Git Client Plugin

• CVE-2026-57282 - CVSS 5 (medium), 2026-06-24: Jenkins Git client Plugin 6.6.0 and earlier does not correctly escape the workspace directory name when it is embedded into a generated SSH wrapper script,…
• CVE-2025-67640 - CVSS 5 (medium), 2025-12-10: Jenkins Git client Plugin 6.4.0 and earlier does not not correctly escape the path to the workspace directory as part of an argument in a temporary shell…
• CVE-2025-58458 - CVSS 4.3 (medium), 2025-09-03: In Jenkins Git client Plugin 6.3.2 and earlier, except 6.1.4 and 6.2.1, Git URL field form validation responses differ based on whether the specified file…
• CVE-2022-36881 - CVSS 8.1 (high), 2022-07-27: Jenkins Git client Plugin 3.11.0 and earlier does not perform SSH host key verification when connecting to Git repositories via SSH, enabling…
• CVE-2019-10392 - CVSS 8.8 (high), 2019-09-12: Jenkins Git Client Plugin 2.8.4 and earlier and 3.0.0-rc did not properly restrict values passed as URL argument to an invocation of 'git ls-remote',…