Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.jenkins-ci.main/jenkins-core@2.40
purl pkg:maven/org.jenkins-ci.main/jenkins-core@2.40
Next non-vulnerable version 2.45
Latest non-vulnerable version 2.555
Risk 4.5
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-sanw-xj8r-1kbb
Aliases:
CVE-2017-1000362
GHSA-92mr-4w2q-4578
Information Exposure The re-key admin monitor in Jenkins re-encrypts all secrets in `JENKINS_HOME` with a new key. It also created a backup directory with all old secrets, and the key used to encrypt them. These backups are world-readable and not removed.
2.44
Affected by 1 other vulnerability.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-04T14:31:18.536861+00:00 GHSA Importer Affected by VCID-sanw-xj8r-1kbb https://github.com/advisories/GHSA-92mr-4w2q-4578 38.1.0