Search for packages
| purl | pkg:maven/org.jenkins-ci.plugins.workflow/workflow-cps@2.79 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-5h17-3b63-s7gr | Improper Input Validation in Jenkins Pipeline: Groovy Plugin Sandbox protection in Jenkins Pipeline: Groovy Plugin 2.78 and earlier can be circumvented through default parameter expressions in CPS-transformed methods. |
CVE-2020-2109
GHSA-99mf-f3qh-wqrp |
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-04T14:32:28.768505+00:00 | GHSA Importer | Fixing | VCID-5h17-3b63-s7gr | https://github.com/advisories/GHSA-99mf-f3qh-wqrp | 38.1.0 |
| 2026-04-03T21:26:23.476836+00:00 | GitLab Importer | Fixing | VCID-5h17-3b63-s7gr | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.jenkins-ci.plugins.workflow/workflow-cps/CVE-2020-2109.yml | 38.1.0 |
| 2026-04-01T13:11:58.157157+00:00 | GithubOSV Importer | Fixing | VCID-5h17-3b63-s7gr | https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-99mf-f3qh-wqrp/GHSA-99mf-f3qh-wqrp.json | 38.0.0 |