Search for packages
| purl | pkg:maven/org.jenkins-ci.plugins/script-security@1.30 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-ryww-xu2p-73g4
Aliases: CVE-2017-1000107 GHSA-h7rx-r733-7x7r |
Incorrect Permission Assignment for Critical Resource Script Security Plugin did not apply sandboxing restrictions to constructor invocations via positional arguments list, super constructor invocations, method references, and type coercion expressions. This could be used to invoke arbitrary constructors and methods, bypassing sandbox protection. |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-01T16:01:38.344553+00:00 | GHSA Importer | Affected by | VCID-ryww-xu2p-73g4 | https://github.com/advisories/GHSA-h7rx-r733-7x7r | 38.0.0 |
| 2026-04-01T12:47:23.385429+00:00 | GitLab Importer | Affected by | VCID-ryww-xu2p-73g4 | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.jenkins-ci.plugins/script-security/CVE-2017-1000107.yml | 38.0.0 |