Jenkins Bitbucket Push and Pull Request Plugin

2 results · Clear filters · Feed

• Medium 6.5
  CVE-2026-92139

  Jenkins Bitbucket Push and Pull Request Plugin 4.0.1 and earlier trusts values provided in the webhook payload, includi…

  Jenkins Project Jenkins Bitbucket Push and Pull Request Plugin Web / CMS
  Sep 16, 2026
• Medium 4.8
  CVE-2026-57289

  Jenkins Bitbucket Push and Pull Request Plugin unconditionally disables SSL/TLS certificate validation

  Jenkins Bitbucket Push and Pull Request Plugin 3.3.8 and earlier unconditionally disables SSL/TLS certificate and hostname validation for connections sending Bearer token authenticated requests to the configured Bitbucket Server endpoint, allowing attackers a…

  Jenkins Project Jenkins Bitbucket Push and Pull Request Plugin io.jenkins.plugins:bitbucket-push-and-pull-request Web / CMS Maven
  Jun 24, 2026