Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.jenkins-ci.plugins/script-security@1229.v4880b_b_e905a_6
purl pkg:maven/org.jenkins-ci.plugins/script-security@1229.v4880b_b_e905a_6
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-5bu5-5b6n-nuft Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') A sandbox bypass vulnerability involving map constructors in Jenkins Script Security Plugin 1228.vd93135a_2fb_25 and earlier allows attackers with permission to define and run sandboxed scripts, including Pipelines, to bypass the sandbox protection and execute arbitrary code in the context of the Jenkins controller JVM. CVE-2023-24422
GHSA-76qj-9gwh-pvv3

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T12:50:49.108113+00:00 GitLab Importer Fixing VCID-5bu5-5b6n-nuft https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.jenkins-ci.plugins/script-security/CVE-2023-24422.yml 38.0.0