Jenkins Github Plugin (Jenkins Project) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-04-29. Vendor: Jenkins Project.

CVEs of Jenkins Github Plugin

• CVE-2026-42523 - CVSS 9 (critical), 2026-04-29: Jenkins GitHub Plugin 1.46.0 and earlier improperly processes the current job URL as part of JavaScript implementing validation of the feature "GitHub hook…
• CVE-2023-46650 - CVSS 5.4 (medium), 2023-10-25: Jenkins GitHub Plugin 1.37.3 and earlier does not escape the GitHub project URL on the build page when showing changes, resulting in a stored cross-site…
• CVE-2022-36885 - CVSS 5.3 (medium), 2022-07-27: Jenkins GitHub Plugin 1.34.4 and earlier uses a non-constant time comparison function when checking whether the provided and computed webhook signatures are…