Where
-Infinity
0

Jenkins JenkinsJenkins 2.442 through 2.554 (both inclusive), LTS 2.426.3 through LTS 2.541.2 (both inclusive) perfo…

Risk 52
Severity
7.5
EPSS
0.05%
First published (updated )

Jenkins JenkinsJenkins 2.554 and earlier, LTS 2.541.2 and earlier does not safely handle symbolic links during the …

Risk 58
Severity
8.8
EPSS
0.12%
First published (updated )

oss-secMultiple vulnerabilities in Jenkins and Jenkins plugins

Jenkins JenkinsInfoleak

Risk 17
Severity
4.3
EPSS
0.12%
First published (updated )

Jenkins JenkinsXSS

Risk 54
Severity
8
EPSS
0.04%
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Jenkins JenkinsCSRF

Risk 20
Severity
3.5
First published (updated )

Jenkins JenkinsJenkins 2.540 and earlier, LTS 2.528.2 and earlier does not mask build authorization tokens displaye…

Risk 24
Severity
4.3
First published (updated )

Jenkins JenkinsJenkins 2.540 and earlier, LTS 2.528.2 and earlier stores build authorization tokens unencrypted in …

Risk 24
Severity
4.3
First published (updated )

Jenkins JenkinsA missing permission check in Jenkins 2.540 and earlier, LTS 2.528.2 and earlier allows attackers wi…

Risk 24
Severity
4.3
First published (updated )

Jenkins JenkinsJenkins 2.540 and earlier, LTS 2.528.2 and earlier does not properly close HTTP-based CLI connection…

Risk 46
Severity
7.5
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

oss-secMultiple vulnerabilities in Jenkins and Jenkins plugins

Jenkins Jenkins 2.541End of life details

First published (updated )

Jenkins Jenkins 2.528Reached end of life

EOL
Jan 21, 2026
First published (updated )

Jenkins Jenkins 2End of life details

First published (updated )

Jenkins Jenkins 2End of life details

First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Jenkins JenkinsJenkins-image: sensitive data disclosure when using openshift jenkins image

Risk 38
Severity
6.5
First published (updated )

maven/org.eclipse.jetty.http2:http2-hpackHTTP/2 HPACK integer overflow and buffer allocation

Risk 46
Severity
7.5
First published (updated )

Apache Tomcat- Rapid Reset HTTP/2 vulnerability

Risk 65
Severity
7.5
First published (updated )

maven/org.eclipse.jetty:jetty-serverIn Eclipse Jetty 7.2.2 to 9.4.38, 10.0.0.alpha0 to 10.0.1, and 11.0.0.alpha0 to 11.0.1, CPU usage ca…

Risk 46
Severity
7.8
First published (updated )

Jenkins JenkinsXSS

Risk 38
Severity
6.1
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Jenkins JenkinsXSS

Risk 38
Severity
6.1
First published (updated )

Jenkins JenkinsXSS

Risk 38
Severity
6.1
First published (updated )

Jenkins JenkinsInput Validation

Risk 79
Severity
8.8
First published (updated )

maven/org.jenkins-ci.main:jenkins-coreA vulnerability exists in Jenkins 2.137 and earlier, 2.121.2 and earlier in XStream2.java that allow…

Risk 27
Severity
5.3
First published (updated )

Jenkins JenkinsA denial of service vulnerability exists in Jenkins 2.137 and earlier, 2.121.2 and earlier in CronTa…

Risk 39
Severity
6.5
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Jenkins JenkinsA denial of service vulnerability exists in Jenkins 2.137 and earlier, 2.121.2 and earlier in BasicA…

Risk 43
Severity
7.5
First published (updated )

maven/org.jenkins-ci.main:jenkins-coreInfoleak

Risk 23
Severity
4.3
First published (updated )

Jenkins JenkinsXSS

Risk 31
Severity
4.7
First published (updated )

maven/org.jenkins-ci.main:jenkins-coreThe remoting module in Jenkins before 2.32 and LTS before 2.19.3 allows remote attackers to execute …

Risk 89
Severity
9.8
First published (updated )

Jenkins JenkinsJenkins User Interface (UI) Information Disclosure Vulnerability

Risk 65
Severity
7.5
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203