Jenkins Project Jenkins Pipeline Groovy Libraries Plugin vulnerabilities
2 known vulnerabilities affecting jenkins_project/jenkins_pipeline_groovy_libraries_plugin.
Total CVEs
2
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1HIGH1
Vulnerabilities
Page 1 of 1
CVE-2022-43405P3CRITICALCVSS 9.9≥ unspecified, ≤ 612.v84da_9c54906d2022-10-19
CVE-2022-43405 [CRITICAL] CVE-2022-43405: A sandbox bypass vulnerability in Jenkins Pipeline: Groovy Libraries Plugin 612.v84da_9c54906d and e
A sandbox bypass vulnerability in Jenkins Pipeline: Groovy Libraries Plugin 612.v84da_9c54906d and earlier allows attackers with permission to define untrusted Pipeline libraries and to define and run sandboxed scripts, including Pipelines, to bypass the sandbox protection and execute arbitrary code in the context of the Jenkins controller JVM.
nvd
CVE-2026-48921P3HIGHCVSS 7.5≤ 797.v90ea_a_9b_e45a_02026-05-27
CVE-2026-48921 [HIGH] CWE-59 CVE-2026-48921: Jenkins Pipeline: Groovy Libraries Plugin 797.v90ea_a_9b_e45a_0 and earlier does not prohibit symbol
Jenkins Pipeline: Groovy Libraries Plugin 797.v90ea_a_9b_e45a_0 and earlier does not prohibit symbolic links in shared libraries, allowing attackers able to control the content of a library used by a Pipeline job to read arbitrary files on the Jenkins controller filesystem.
nvd