Vulnerabilities

Summary — last 7 days

New vulnerabilities2,696▼ 543 vs. last week
Critical / high1,264▼ 228 vs. last week
New active exploitation (KEV)4▼ 5 vs. last week
Unscored (no CVSS)262▼ 241 vs. last week
–

1 results, sorted by published date (most recent first)

CVEStatusSeverityEPSS Active exploitationAffected technologiesPublished ▼Modified Description
ModifiedHigh (8.8)2.6%—Jenkins Pipeline Supporting Apis2/9/20186/17/2026
Jenkins Pipeline: Supporting APIs Plugin 2.17 and earlier have an arbitrary code execution due to incomplete sandbox protection: Methods related to Java deserialization like readResolve implemented in Pipeline scripts were not subject to sandbox protection, and could therefore execute arbitrary code. This could be…