Skip to content
OpenAdvisories

Vendor

samrocketman

7 known vulnerabilities.

Products

jervis 7
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.9
    CVE-2025-68925

    Jervis has a JWT Algorithm Confusion Vulnerability

    Jervis is a library for Job DSL plugin scripts and shared Jenkins pipeline libraries. Prior to 2.2, the code doesn't validate that the JWT header specifies "alg":"RS256". This vulnerability is fixed in 2.2.

    samrocketman jervis net.gleske:jervis Maven