Package · Maven

io.jenkins.plugins:dingding-notifications

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 5.9

CVE-2025-47888

Jenkins DingTalk Plugin Unconditionally Disables SSL/TLS Certificate and Hostname Validation

Jenkins DingTalk Plugin 2.7.3 and earlier unconditionally disables SSL/TLS certificate and hostname validation for connections to the configured DingTalk webhooks.

Jenkins Project Jenkins DingTalk Plugin io.jenkins.plugins:dingding-notifications Web / CMS Maven

May 14, 2025