Search for packages
| purl | pkg:maven/com.coravy.hudson.plugins.github/github@1.29.0 |
| Tags | Ghost |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 10.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-cqz5-3btv-3fbq
Aliases: CVE-2018-1000184 GHSA-gh85-mq87-r7v3 |
Server-Side Request Forgery (SSRF) A server-side request forgery vulnerability exists in the Jenkins GitHub Plugin in `GitHubPluginConfig.java` that allows attackers with Overall/Read access to cause Jenkins to send a GET request to a specified URL. |
Affected by 1 other vulnerability. |
|
VCID-g6yv-hh51-mfak
Aliases: CVE-2018-1000183 GHSA-v7g7-cmxx-wxw9 |
Information Exposure A vulnerability exists in the Jenkins GitHub Plugin in `GitHubServerConfig.java` that allows attackers with Overall/Read IDs obtained through another method, to capture credentials stored in Jenkins. |
Affected by 1 other vulnerability. |
|
VCID-tkye-gc3b-n3c5
Aliases: CVE-2018-1000600 GHSA-6cvm-v6qj-hjq9 |
Information Exposure A vulnerability exists in the Jenkins GitHub Plugin in `GitHubTokenCredentialsCreator.java` that allows attackers to capture credentials stored in Jenkins. |
Affected by 1 other vulnerability. Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-04T14:30:54.127489+00:00 | GHSA Importer | Affected by | VCID-cqz5-3btv-3fbq | https://github.com/advisories/GHSA-gh85-mq87-r7v3 | 38.1.0 |
| 2026-04-04T14:30:54.098777+00:00 | GHSA Importer | Affected by | VCID-g6yv-hh51-mfak | https://github.com/advisories/GHSA-v7g7-cmxx-wxw9 | 38.1.0 |
| 2026-04-01T12:47:48.614797+00:00 | GitLab Importer | Affected by | VCID-tkye-gc3b-n3c5 | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/com.coravy.hudson.plugins.github/github/CVE-2018-1000600.yml | 38.0.0 |
| 2026-04-01T12:47:43.643022+00:00 | GitLab Importer | Affected by | VCID-cqz5-3btv-3fbq | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/com.coravy.hudson.plugins.github/github/CVE-2018-1000184.yml | 38.0.0 |
| 2026-04-01T12:47:43.531079+00:00 | GitLab Importer | Affected by | VCID-g6yv-hh51-mfak | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/com.coravy.hudson.plugins.github/github/CVE-2018-1000183.yml | 38.0.0 |