Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 24
Reset filtersSandbox bypass vulnerability in Jenkins Pipeline: Deprecated Groovy Libraries Plugin
Sandbox bypass vulnerability in Jenkins Pipeline: Groovy Libraries Plugin and Pipeline: Deprecated Groovy Libraries Plugin
Sandbox bypass vulnerabilities in Jenkins Script Security Plugin and in Pipeline: Groovy Plugin
Jenkins Pipeline: Groovy Plugin allows sandbox protection bypass and arbitrary code execution
Sandbox bypass vulnerabilities in Jenkins Script Security Plugin and in Pipeline: Groovy Plugin
Improper Input Validation in Jenkins Pipeline: Groovy Plugin
Missing Authorization in Jenkins Pipeline: Shared Groovy Libraries Plugin
Sandbox bypass vulnerability through implicitly allowlisted platform Groovy files in Jenkins Pipeline: Groovy Plugin
Jenkins Script Security and Pipeline Groovy Plugins Sandbox Bypass
Arbitrary code execution due to incomplete sandbox protection in Jenkins Pipeline
Jenkins Groovy Plugin sandbox bypass vulnerability
Sandbox bypass vulnerability in Jenkins Pipeline: Groovy Plugin
Sandbox bypass in Jenkins Pipeline: Groovy Plugin
Untrusted users can modify some Pipeline libraries in Jenkins Pipeline: Deprecated Groovy Libraries Plugin
Improper Neutralization of Special Elements used in an OS Command in Jenkins Pipeline: Groovy Plugin
Improper Neutralization of Special Elements used in an OS Command in Jenkins Pipeline: Shared Groovy Libraries Plugin
Improper Link Resolution Before File Access in Jenkins Pipeline: Shared Groovy Libraries Plugin
Improper Link Resolution Before File Access in Jenkins Pipeline: Groovy Plugin
Improper Limitation of a Pathname to a Restricted Directory in Jenkins Pipeline: Shared Groovy Libraries Plugin
Jenkins Pipeline: Groovy Plugin has Insufficiently Protected Credentials
Jenkins Pipeline: Deprecated Groovy Libraries Plugin Protection Mechanism Failure
Jenkins Pipeline: Deprecated Groovy Libraries Plugin Protection Mechanism Failure
Jenkins Pipeline: Deprecated Groovy Libraries Plugin Protection Mechanism Failure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.