All products

org.jenkins-ci.plugins:credentials-binding

Maven · Package
8 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Jenkins Credentials Binding Plugin does not properly sanitize file names for file and zip file credentialsCVE-2026-48922 · GHSA-FXXF-W25W-MCX2 org.jenkins-ci.plugins:credentials-binding Maven High Fix reported
Jenkins Credentials Binding Plugin has a path traversal vulnerabilityCVE-2026-42520 · GHSA-P2RF-WPXJ-MX2G org.jenkins-ci.plugins:credentials-binding Maven High Fix reported
Jenkins Credentials Binding Plugin vulnerability can expose sensitive information in logger messagesCVE-2025-53650 · GHSA-9768-HPRV-CRJ5 org.jenkins-ci.plugins:credentials-binding Maven Medium Fix reported
Jenkins Credentials Binding Plugin Stores Passwords in a Recoverable FormatCVE-2019-1010241 · GHSA-J7GW-MWFG-VQF4 org.jenkins-ci.plugins:credentials-bindingRed Hat OpenShift Container Platform 3.10/jenkins-plugin-credentials MavenRed Hat Medium No fix reported
Incorrect Permission Assignment for Critical Resource in Jenkins Credentials Binding PluginCVE-2022-20616 · GHSA-GQM2-2GCX-P88W org.jenkins-ci.plugins:credentials-bindingRed Hat OpenShift Container Platform 3.11/jenkins-2-plugins MavenRed Hat Medium Fix reported
Jenkins Credentials Binding Plugin has Insufficiently Protected CredentialsCVE-2018-1000057 · GHSA-38XM-XHVJ-Q2QF org.jenkins-ci.plugins:credentials-bindingRed Hat OpenShift Enterprise 3/jenkins-plugin-credentials-binding MavenRed Hat Medium Fix reported
Improper masking of some secrets in Jenkins Credentials Binding PluginCVE-2020-2182 · GHSA-7FF8-QFWX-8GX5 org.jenkins-ci.plugins:credentials-binding Maven Low Fix reported
Secrets are not masked by Jenkins Credentials Binding Plugin in builds without build stepsCVE-2020-2181 · GHSA-43J2-R4V3-M8JP org.jenkins-ci.plugins:credentials-binding Maven Medium Fix reported