Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.jenkins-ci.plugins/config-file-provider@953.v0432a
purl pkg:maven/org.jenkins-ci.plugins/config-file-provider@953.v0432a
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-h9yg-u3jh-mbfq Jenkins Config File Provider Plugin improper credential masking vulnerability Jenkins Config File Provider Plugin 952.va_544a_6234b_46 and earlier does not mask (i.e., replace with asterisks) credentials specified in configuration files when they're written to the build log. CVE-2023-40339
GHSA-pv2g-vm98-vjxf

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-02T17:00:06.539563+00:00 GHSA Importer Fixing VCID-h9yg-u3jh-mbfq https://github.com/advisories/GHSA-pv2g-vm98-vjxf 38.1.0
2026-04-01T12:58:27.799846+00:00 GithubOSV Importer Fixing VCID-h9yg-u3jh-mbfq https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2023/08/GHSA-pv2g-vm98-vjxf/GHSA-pv2g-vm98-vjxf.json 38.0.0
2026-04-01T12:51:42.156342+00:00 GitLab Importer Fixing VCID-h9yg-u3jh-mbfq https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.jenkins-ci.plugins/config-file-provider/CVE-2023-40339.yml 38.0.0