Login Request a demo
JG
Product
Jenkins GitLab Plugin
by Jenkins project · last CVE Sep 16, 2026
4
CVEs
0
On KEV
5.4
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 0High 0Medium 4Low 0
Severity
All severities4Critical0High0Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Jenkins GitLab Plugin to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-92133
5.4
0%
Sep 16
Jenkins GitLab Plugin 1.2149.vcfc32c82b_f7f and earlier caches the GitLab API client built for alternative GitLab API token credentials under a cache key derived from the…
Affected: through 1.2149.vcfc32c82b_f7f
CVE-2026-84664
5.4
0%
Sep 2
Jenkins GitLab Plugin 1.9.16 and earlier allows overwriting the global GitLab connection configuration through Stapler data binding, allowing attackers to connect to an…
Affected: through 1.9.16
CVE-2022-43411
5.3
1%
Oct 19
Jenkins GitLab Plugin 1.5.35 and earlier uses a non-constant time comparison function when checking whether the provided and expected webhook token are equal, potentially allowing…
Affected: through 1.5.35
CVE-2025-24397
4.3
0%
Jan 22
An incorrect permission check in Jenkins GitLab Plugin 1.9.6 and earlier allows attackers with global Item/Configure permission (while lacking Item/Configure permission on any…
Affected: through 1.9.6
Showing 4