JH
Product
Jenkins HashiCorp Vault Plugin
by Jenkins Project · last CVE Dec 10, 2025
2
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 1Low 0
Watch

Add Jenkins HashiCorp Vault Plugin to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-33001
7.5
1%
May 16
Jenkins HashiCorp Vault Plugin 360.v0a_1c04cf807d and earlier does not properly mask (i.e., replace with asterisks) credentials in the build log when push mode for durable task…
Affected: through 360.v0a_1c04cf807d
CVE-2025-67642
4.3
0%
Dec 10
Jenkins HashiCorp Vault Plugin 371.v884a_4dd60fb_6 and earlier does not set the appropriate context for Vault credentials lookup, allowing attackers with Item/Configure permission…
Affected: through 371.v884a_4dd60fb_6
Showing 2