Jenkins Project vulnerabilities
Every vulnerability this feed holds for Jenkins Project, merged from five public registers and ordered by what warrants attention first — exploited in the wild, then CVSS, then recency.
8 vulnerabilities tracked.
- 8.8 Jenkins 2.587 and earlier, LTS 2.580.1 and earlier provides an HTTP endpoint that loads agents by name without validating the name,…
- 8.8 Jenkins 2.587 and earlier, LTS 2.580.1 and earlier converts the launch commands in older agent configurations into launchers provided by…
- 8.8 Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not apply its deserialization filter to classes referenced by the resolves-to…
- 8.1 In Jenkins 2.587 and earlier, LTS 2.580.1 and earlier, the HTTP endpoint for creating the first user account does not check whether the…
- 8.1 Jenkins 2.587 and earlier, LTS 2.580.1 and earlier checks for symbolic links in the path of an extracted file only before creating its…
- 6.5 Jenkins 2.587 and earlier, LTS 2.580.1 and earlier follows symbolic links when copying the directory of an item being renamed, allowing…
- 5.4 Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not restrict item types in collections after deserialization, allowing attackers…
- 4.3 Jenkins 2.587 and earlier, LTS 2.580.1 and earlier improperly identifies file paths attempting path traversal in the file browser for…
What this covers
This feed accumulates forward from the day it started storing records, and a name search that finds nothing here is also looked up against the registers directly — so an older advisory resolves even when it predates the corpus. It is still a reading view, not a substitute for the vendor's own advisory, and absence from this page is not a statement that Jenkins Project is free of vulnerabilities.
Query this from an agent over MCP · Check a lockfile by version
Other vendors tracked here
Red Hat Google Microsoft Apple Linux Apache Software Foundation zephyrproject n/a Oracle Corporation Unknown Hewlett Packard Enterprise (HPE) Eclipse Foundation Tanium FreeRDP IBM Samsung Semiconductor Dell SuiteCRM MONGODB kyverno vercel vim Hitachi jpadilla