Jenkins Pipeline Groovy Plugin (Jenkins Project) - vulnerabilities (CVEs)
11 CVEs, 0 in the last 30 days, 3 known versions, newest CVE from 2026-06-24. Vendor: Jenkins Project.
CVEs of Jenkins Pipeline Groovy Plugin
- CVE-2026-57284 - CVSS 4.3 (medium), 2026-06-24: Jenkins Pipeline: Groovy Plugin 4331.v9d06ed4658ff and earlier does not restrict the types that can be instantiated through the Pipeline Snippet Generator,…
- CVE-2026-57283 - CVSS 4.3 (medium), 2026-06-24: A cross-site request forgery (CSRF) vulnerability in Jenkins Pipeline: Groovy Plugin 4331.v9d06ed4658ff and earlier allows attackers to instantiate types…
- CVE-2024-52550 - CVSS 8 (high), 2024-11-13: Jenkins Pipeline: Groovy Plugin 3990.vd281dd77a_388 and earlier, except 3975.3977.v478dd9e956c3 does not check whether the main (Jenkinsfile) script for a…
- CVE-2022-43402 - CVSS 9.9 (critical), 2022-10-19: A sandbox bypass vulnerability involving various casts performed implicitly by the Groovy language runtime in Jenkins Pipeline: Groovy Plugin…
- CVE-2022-30945 - CVSS 8.5 (high), 2022-05-17: Jenkins Pipeline: Groovy Plugin 2689.v434009a_31b_f1 and earlier allows loading any Groovy source files on the classpath of Jenkins and Jenkins plugins in…
- CVE-2022-25173 - CVSS 8.8 (high), 2022-02-15: Jenkins Pipeline: Groovy Plugin 2648.va9433432b33c and earlier uses the same checkout directories for distinct SCMs when reading the script file (typically…
- CVE-2022-25180 - CVSS 4.3 (medium), 2022-02-15: Jenkins Pipeline: Groovy Plugin 2648.va9433432b33c and earlier includes password parameters from the original build in replayed builds, allowing attackers…
- CVE-2022-25176 - CVSS 6.5 (medium), 2022-02-15: Jenkins Pipeline: Groovy Plugin 2648.va9433432b33c and earlier follows symbolic links to locations outside of the checkout directory for the configured SCM…
- CVE-2020-2109 - CVSS 8.8 (high), 2020-02-12: Sandbox protection in Jenkins Pipeline: Groovy Plugin 2.78 and earlier can be circumvented through default parameter expressions in CPS-transformed methods.
- CVE-2019-1003041 - CVSS 9.8 (critical), 2019-03-28: A sandbox bypass vulnerability in Jenkins Pipeline: Groovy Plugin 2.64 and earlier allows attackers to invoke arbitrary constructors in sandboxed scripts.
- CVE-2019-1003030 - CVSS 9.9 (critical), 2019-03-08: A sandbox bypass vulnerability exists in Jenkins Pipeline: Groovy Plugin 2.63 and earlier in pom.xml,…
