Package · Maven

io.jenkins.plugins:bitbucket-push-and-pull-request

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 4.8

CVE-2026-57289

Jenkins Bitbucket Push and Pull Request Plugin unconditionally disables SSL/TLS certificate validation

Jenkins Bitbucket Push and Pull Request Plugin 3.3.8 and earlier unconditionally disables SSL/TLS certificate and hostname validation for connections sending Bearer token authenticated requests to the configured Bitbucket Server endpoint, allowing attackers a…

Jenkins Project Jenkins Bitbucket Push and Pull Request Plugin io.jenkins.plugins:bitbucket-push-and-pull-request Web / CMS Maven

Jun 24, 2026