Jenkins Update-center2 (Jenkins Project) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 4 known versions, newest CVE from 2026-09-02. Vendor: Jenkins Project.

CVEs of Jenkins Update-center2

• CVE-2026-84677 - CVSS 5.4 (medium), 2026-09-02: Jenkins update-center2 3.18.3 and earlier does not escape plugin-provided values (plugin names, descriptions, and version metadata) on plugin download index…
• CVE-2023-27905 - CVSS 9.6 (critical), 2023-03-10: Jenkins update-center2 3.13 and 3.14 renders the required Jenkins core version on plugin download index pages without sanitization, resulting in a stored…