13 Total advisories
13 Vulnerabilities
0 Malware
Dependency scanning
Check whether org.jenkins-ci.plugins.workflow:workflow-cps is in your codebase
Corgea flags malicious and compromised dependencies with reachability analysis, so you fix the packages that actually run in your application instead of working through the whole lockfile.
Vulnerabilities
CRITICAL 9.9
CVE-2019-1003030
Sandbox bypass in Jenkins Pipeline: Groovy Plugin
HIGH 8.0
CVE-2024-52550
Rebuilding a run with revoked script approval allowed by Jenkins Pipeline: Groovy Plugin
HIGH 8.8
CVE-2017-1000096
Arbitrary code execution due to incomplete sandbox protection in Jenkins Pipeline
HIGH 8.8
CVE-2020-2109
Improper Input Validation in Jenkins Pipeline: Groovy Plugin
HIGH 8.8
CVE-2022-25173
Improper Neutralization of Special Elements used in an OS Command in Jenkins Pipeline: Groovy Plugin
MEDIUM 4.3
CVE-2022-25180
Jenkins Pipeline: Groovy Plugin has Insufficiently Protected Credentials
HIGH 8.8
CVE-2018-1000866
Jenkins Script Security and Pipeline Groovy Plugins Sandbox Bypass
CRITICAL 9.8
CVE-2019-1003041
Sandbox bypass vulnerability in Jenkins Pipeline: Groovy Plugin
HIGH 8.8
CVE-2022-43404
Sandbox bypass vulnerabilities in Jenkins Script Security Plugin and in Pipeline: Groovy Plugin
CRITICAL 9.9
CVE-2022-43402
Jenkins Pipeline: Groovy Plugin allows sandbox protection bypass and arbitrary code execution
HIGH 8.8
CVE-2022-43401
Sandbox bypass vulnerabilities in Jenkins Script Security Plugin and in Pipeline: Groovy Plugin
HIGH 7.5
CVE-2022-30945
Sandbox bypass vulnerability through implicitly allowlisted platform Groovy files in Jenkins Pipeline: Groovy Plugin
MEDIUM 6.5
CVE-2022-25176
Improper Link Resolution Before File Access in Jenkins Pipeline: Groovy Plugin
Browse more Maven advisories
Learn What is SAST?
Static Application Security Testing finds vulnerabilities like this one in source code before it ships. Read the guide →
Ready to move
Start Securing
Free, no credit card | First findings in minutes