Dependency scanning
Check whether org.jenkins-ci.plugins:script-security is in your codebase
Corgea flags malicious and compromised dependencies with reachability analysis, so you fix the packages that actually run in your application instead of working through the whole lockfile.
Vulnerabilities
CVE-2026-57281
Jenkins Script Security Plugin has a script security bypass vulnerability
CVE-2026-57280
Jenkins Script Security Plugin sandbox bypass vulnerability
CVE-2026-42519
Jenkins Script Security Plugin: Missing permission checks allow enumeration of pending and approved classpaths
CVE-2024-34144
Jenkins Script Security Plugin has sandbox bypass vulnerability involving crafted constructor bodies
CVE-2024-52549
Missing permission check in Jenkins Script Security Plugin
CVE-2024-34145
Jenkins Script Security Plugin sandbox bypass vulnerability
CVE-2019-1003029
Sandbox bypass in Script Security Plugin
CVE-2020-2135
Sandbox bypass vulnerability in Script Security Plugin
CVE-2016-3102
Jenkins Script Security Plugin allows for Bypass of Groovy Sandbox Protection
CVE-2019-1003024
Jenkins Script Security Plugin sandbox bypass vulnerability
CVE-2017-1000107
Sandbox bypass in Jenkins Script Security Plugin sandbox bypass
CVE-2019-1003001
Jenkins Groovy Plugin sandbox bypass vulnerability
CVE-2019-10393
Sandbox bypass vulnerability in Script Security Plugin
CVE-2019-10399
Sandbox bypass vulnerability in Jenkins Script Security Plugin
CVE-2019-10394
Sandbox bypass vulnerability in Jenkins Script Security Plugin
CVE-2019-10400
Sandbox bypass vulnerability in Jenkins Script Security Plugin
CVE-2019-1003000
Protection Mechanism Failure in Jenkins Script Security Plugin
CVE-2017-1000505
Exposure of Sensitive Information to an Unauthorized Actor Jenkins Script Security Plugin
CVE-2022-43403
Jenkins Script Security Plugin sandbox bypass vulnerability
CVE-2017-1000095
Unsafe methods in the default list of approved signatures in Jenkins Script Security Plugin
CVE-2019-1003040
Sandbox bypass vulnerability in Jenkins Script Security Plugin
CVE-2023-24422
Sandbox bypass in Jenkins Script Security Plugin
CVE-2018-1000865
Improper Privilege Management in Jenkins
CVE-2020-2110
Improper Input Validation in Jenkins Script Security Plugin
CVE-2019-1003005
Sandbox Bypass in Script Security Plugin
CVE-2022-45379
Whole-script approval in Jenkins Script Security Plugin vulnerable to SHA-1 collisions
CVE-2020-2134
Sandbox bypass vulnerability in Script Security Plugin
CVE-2020-2190
Improper Neutralization of Input During Web Page Generation in Jenkins Script Security Plugin
CVE-2020-2279
Sandbox bypass vulnerability in Jenkins Script Security Plugin
CVE-2019-10355
Incorrect Privilege Assignment in Jenkins Script Security Plugin
CVE-2019-10431
Improper Control of Generation of Code in Jenkins Script Security Plugin
CVE-2018-1000866
Jenkins Script Security and Pipeline Groovy Plugins Sandbox Bypass
CVE-2019-16538
Incorrect Authorization in Jenkins Script Security Plugin
CVE-2022-43404
Sandbox bypass vulnerabilities in Jenkins Script Security Plugin and in Pipeline: Groovy Plugin
CVE-2022-43401
Sandbox bypass vulnerabilities in Jenkins Script Security Plugin and in Pipeline: Groovy Plugin
CVE-2022-30946
CSRF vulnerability in Jenkins Script Security Plugin
CVE-2019-10356
Return of Pointer Value Outside of Expected Rang in Jenkins Script Security Plugin
Browse more Maven advisories
Static Application Security Testing finds vulnerabilities like this one in source code before it ships. Read the guide →
Ready to move
Start Securing
Free, no credit card | First findings in minutes