jenkins | Snyk

Direct Vulnerabilities

Known vulnerabilities in the jenkins package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
H Integer Overflow or Wraparound	*
H Creation of Temporary File With Insecure Permissions	*
M Cross-site Scripting (XSS)	*
L Creation of Temporary File With Insecure Permissions	*
M Permissive Regular Expression	*
L Creation of Temporary File With Insecure Permissions	*
M Allocation of Resources Without Limits or Throttling	*
H Cross-site Scripting (XSS)	*
M Files or Directories Accessible to External Parties	*
H Cross-site Request Forgery (CSRF)	*
M Resource Exhaustion	*
M Incorrect Privilege Assignment	*
M Improper Resource Shutdown or Release	*
M Improper Resource Shutdown or Release	*
M Information Exposure	*
M Cross-site Scripting (XSS)	*
M Cross-site Request Forgery (CSRF)	*
M Origin Validation Error	*
M Cross-site Request Forgery (CSRF)	*
H Directory Traversal	*
H Directory Traversal	*
L Improper Input Validation	*
H Incorrect Default Permissions	*
H Link Following	*
M Session Fixation	*
H Incorrect Default Permissions	*
M Improper Preservation of Permissions	*
H Link Following	*
H Directory Traversal	*
H Incorrect Authorization	*
H Incorrect Default Permissions	*
H Directory Traversal	*
H Improper Preservation of Permissions	*
L Improper Input Validation	*
H Incorrect Default Permissions	*
M Directory Traversal	*
H Improper Input Validation	*
M Improper Check for Dropped Privileges	*
M Incorrect Authorization	*
H Link Following	*
H Cross-site Scripting (XSS)	*
L Incorrect Authorization	*
M Allocation of Resources Without Limits or Throttling	*
M Improper Input Validation	*
H Cross-site Scripting (XSS)	*
H Deserialization of Untrusted Data	*
H Cross-site Scripting (XSS)	*
M Link Following	*
H Cross-site Scripting (XSS)	*
H Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Information Exposure	*
H Cross-site Request Forgery (CSRF)	*
M Directory Traversal	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
L Improper Restriction of Rendered UI Layers or Frames	*
L Information Exposure	*
M Information Exposure	*
M Covert Timing Channel	*
M Covert Timing Channel	*
M Incorrectly Specified Destination in a Communication Channel	*
H Authentication Bypass by Primary Weakness	*
M Permissive Regular Expression	*
H Cross-site Scripting (XSS)	*
H Cross-site Scripting (XSS)	*
H Cross-site Scripting (XSS)	*
H Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Information Exposure	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Insufficient Resource Pool	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
H Cross-site Request Forgery (CSRF)	*
M Allocation of Resources Without Limits or Throttling	*
M Allocation of Resources Without Limits or Throttling	*
M Out-of-bounds Write	*
M Out-of-bounds Write	*
M Out-of-bounds Write	*
M Out-of-bounds Write	*
M Out-of-bounds Write	*
M Out-of-bounds Write	*
M Allocation of Resources Without Limits or Throttling	*
H CVE-2019-17638	*
M Information Exposure	*
L Allocation of Resources Without Limits or Throttling	*
L Allocation of Resources Without Limits or Throttling	*
M Improper Validation of Certificate with Host Mismatch	*
M Information Exposure	*
L Information Exposure	*
M Insecure Temporary File	*
L Insufficient Session Expiration	*
M Information Exposure	*
M Resource Exhaustion	*
L Creation of Temporary File in Directory with Incorrect Permissions	*
M Resource Exhaustion	*
M Sensitive Information Uncleared Before Release	*
M Insecure Temporary File	*
M Insecure Temporary File	*

Vulnerability

Vulnerable Version

Integer Overflow or Wraparound