All products

org.jenkins-ci.plugins.workflow:workflow-cps

Maven · Package
13 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Sandbox bypass in Jenkins Pipeline: Groovy PluginCVE-2019-1003030 · GHSA-R6MC-MRVR-23CR org.jenkins-ci.plugins.workflow:workflow-cpsRed Hat OpenShift Container Platform 3.10/jenkins-2-plugins MavenRed Hat Critical Fix reported
Rebuilding a run with revoked script approval allowed by Jenkins Pipeline: Groovy Plugin CVE-2024-52550 · GHSA-MRPR-VR82-X88R org.jenkins-ci.plugins.workflow:workflow-cps Maven High Fix reported
Arbitrary code execution due to incomplete sandbox protection in Jenkins PipelineCVE-2017-1000096 · GHSA-MHWQ-4MH7-FV7C org.jenkins-ci.plugins.workflow:workflow-cpsRed Hat OpenShift Enterprise 3/jenkins-plugin-workflow-cps MavenRed Hat High Fix reported
Improper Input Validation in Jenkins Pipeline: Groovy PluginCVE-2020-2109 · GHSA-99MF-F3QH-WQRP org.jenkins-ci.plugins.workflow:workflow-cps Maven High Fix reported
Improper Neutralization of Special Elements used in an OS Command in Jenkins Pipeline: Groovy PluginCVE-2022-25173 · GHSA-4M7P-55JM-3VWV org.jenkins-ci.plugins.workflow:workflow-cps Maven High Fix reported
Jenkins Pipeline: Groovy Plugin has Insufficiently Protected CredentialsCVE-2022-25180 · GHSA-QV6Q-X9VR-W7J3 org.jenkins-ci.plugins.workflow:workflow-cps Maven Medium Fix reported
Jenkins Script Security and Pipeline Groovy Plugins Sandbox BypassCVE-2018-1000866 · GHSA-GQHM-4H93-RRHG org.jenkins-ci.plugins.workflow:workflow-cpsorg.jenkins-ci.plugins:script-security MavenRed Hat High Fix reported
Sandbox bypass vulnerability in Jenkins Pipeline: Groovy PluginCVE-2019-1003041 · GHSA-X74X-QF5J-35JH org.jenkins-ci.plugins.workflow:workflow-cpsRed Hat OpenShift Container Platform 3.10/jenkins-plugin-workflow-cps MavenRed Hat Critical Fix reported
Sandbox bypass vulnerabilities in Jenkins Script Security Plugin and in Pipeline: Groovy PluginCVE-2022-43401 · GHSA-7VR5-72W7-Q6JC org.jenkins-ci.plugins.workflow:workflow-cpsorg.jenkins-ci.plugins:script-security MavenRed Hat High Fix reported
Sandbox bypass vulnerabilities in Jenkins Script Security Plugin and in Pipeline: Groovy PluginCVE-2022-43404 · GHSA-27RF-8MJP-R363 org.jenkins-ci.plugins.workflow:workflow-cpsorg.jenkins-ci.plugins:script-security MavenRed Hat High Fix reported
Jenkins Pipeline: Groovy Plugin allows sandbox protection bypass and arbitrary code executionCVE-2022-43402 · GHSA-MQC2-W9R8-MMXM org.jenkins-ci.plugins.workflow:workflow-cpsRed Hat OpenShift Container Platform 3.11/jenkins-2-plugins MavenRed Hat Critical Fix reported
Sandbox bypass vulnerability through implicitly allowlisted platform Groovy files in Jenkins Pipeline: Groovy PluginCVE-2022-30945 · GHSA-2XVX-RW9P-XGFC org.jenkins-ci.plugins.workflow:workflow-cpsRed Hat OpenShift Container Platform 3.11/jenkins-2-plugins MavenRed Hat High Fix reported
Improper Link Resolution Before File Access in Jenkins Pipeline: Groovy PluginCVE-2022-25176 · GHSA-6473-GQRJ-4P65 org.jenkins-ci.plugins.workflow:workflow-cps Maven Medium Fix reported