Jenkins Project Jenkins Script Security Plugin

11 known vulnerabilities in Jenkins Project Jenkins Script Security Plugin, 1 critical, 1 actively exploited, with patch priority, exploit likelihood and the…

Recently exploited

  • CVE-2019-1003029 CVSS 9.9 critical · actively exploited Jenkins Script Security Plugin Sandbox Bypass Vulnerability

Latest vulnerabilities

  • CVE-2026-92129 CVSS 7.5 high Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier does not check calls from sandboxed scripts to methods added dynamically…
  • CVE-2026-92128 CVSS 7.5 high Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier downloads a JAR file specified by URL twice, confirming the approval of…
  • CVE-2026-92127 CVSS 8.0 high Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier automatically approves the classpath entries in an item configuration…
  • CVE-2026-92126 CVSS 8.5 high Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier does not reject @Builder annotations whose builderStrategy member names…
  • CVE-2026-92125 CVSS 8.8 high Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier does not reject the @GroovyASTTransformationClass annotation, allowing…
  • CVE-2026-92124 CVSS 8.8 high Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier checks the operations Groovy will perform with the elements it reads from…
  • CVE-2026-92123 CVSS 8.8 high Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier does not intercept operations performed on a null receiver (method calls…
  • CVE-2026-92122 CVSS 8.8 high Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier does not check the method called through the proxy created when a…
  • CVE-2026-84659 CVSS 4.3 medium Jenkins Script Security Plugin 1412.v7737b_3405f86 and earlier does not enforce a permission check in the method that controls the "Force…
  • CVE-2026-84658 CVSS 4.3 medium Jenkins Script Security Plugin 1412.v7737b_3405f86 and earlier uses the `@DataBoundConstructor` annotation on a constructor that loads…
  • CVE-2019-1003029 CVSS 9.9 critical · actively exploited Jenkins Script Security Plugin Sandbox Bypass Vulnerability