Skip to content
OpenAdvisories

Package · Maven

org.jenkins-ci.plugins.workflow:workflow-support

2 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.8

    Arbitrary code execution due to incomplete sandbox protection in Pipeline: Supporting APIs Plugin

    Jenkins Pipeline: Supporting APIs Plugin 2.17 and earlier have an arbitrary code execution due to incomplete sandbox protection: Methods related to Java deserialization like readResolve implemented in Pipeline scripts were not subject to sandbox protection, a…