Login Request a demo
JG
Product
Jenkins Gitee Plugin
by Jenkins Project · last CVE Sep 16, 2026
4
CVEs
0
On KEV
6.8
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 0High 0Medium 4Low 0
Severity
All severities4Critical0High0Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Jenkins Gitee Plugin to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-92140
6.8
0%
Sep 16
Jenkins Gitee Plugin 1301.v8957053c7902 and earlier does not escape the sender name from Gitee push webhook payloads in build causes, resulting in a stored cross-site scripting…
Affected: through 1301.v8957053c7902
CVE-2026-57292
5.4
0%
Jun 24
A cross-site request forgery (CSRF) vulnerability in Jenkins Gitee Plugin 1288.v18b_deb_c9069b_ and earlier allows attackers to connect to an attacker-specified URL using…
Affected: through 1288.v18b_deb_c9069b_
CVE-2026-57291
5.4
0%
Jun 24
Missing permission checks in Jenkins Gitee Plugin 1288.v18b_deb_c9069b_ and earlier allow attackers with Overall/Read permission to connect to an attacker-specified URL using…
Affected: through 1288.v18b_deb_c9069b_
CVE-2026-57293
4.3
0%
Jun 24
An incorrect permission check in Jenkins Gitee Plugin 1288.v18b_deb_c9069b_ and earlier allows attackers with global Item/Configure permission (while lacking Item/Configure…
Affected: through 1288.v18b_deb_c9069b_
Showing 4