JG
Product
Jenkins GitHub Plugin
2
CVEs
0
On KEV
9.0
Max CVSS
0
New 30D
Severity mix
Critical 1High 0Medium 1Low 0
Watch
Add Jenkins GitHub Plugin to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-42523 | 9.0 | Apr 29 | Jenkins GitHub Plugin 1.46.0 and earlier improperly processes the current job URL as part of JavaScript implementing validation of the feature "GitHub hook trigger for GITScm… Affected: through 1.46.0 |
| CVE-2023-46650 | 5.4 | Oct 25 | Jenkins GitHub Plugin 1.37.3 and earlier does not escape the GitHub project URL on the build page when showing changes, resulting in a stored cross-site scripting (XSS)… Affected: through 1.37.3 |
Showing 2