Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.jenkins-ci.plugins.workflow/workflow-cps@2.36.1
purl pkg:maven/org.jenkins-ci.plugins.workflow/workflow-cps@2.36.1
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-vnwr-bpsd-fff7 Incorrect Permission Assignment for Critical Resource Arbitrary code execution due to incomplete sandbox protection: Constructors, instance variable initializers, and instance initializers in Pipeline scripts were not subject to sandbox protection, and could therefore execute arbitrary code. This could be exploited e.g. by regular Jenkins users with the permission to configure Pipelines in Jenkins, or by trusted committers to repositories containing Jenkinsfiles. CVE-2017-1000096
GHSA-mhwq-4mh7-fv7c

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T16:01:38.217279+00:00 GHSA Importer Fixing VCID-vnwr-bpsd-fff7 https://github.com/advisories/GHSA-mhwq-4mh7-fv7c 38.0.0
2026-04-01T13:09:13.308358+00:00 GithubOSV Importer Fixing VCID-vnwr-bpsd-fff7 https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-mhwq-4mh7-fv7c/GHSA-mhwq-4mh7-fv7c.json 38.0.0
2026-04-01T12:50:20.461232+00:00 GitLab Importer Fixing VCID-vnwr-bpsd-fff7 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.jenkins-ci.plugins.workflow/workflow-cps/CVE-2017-1000096.yml 38.0.0