Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.jenkins.plugin.templateWorkflows/template-workflows@41.v32d86a
purl pkg:maven/org.jenkins.plugin.templateWorkflows/template-workflows@41.v32d86a
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 4.0
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-bp1m-hbxe-z7ch
Aliases:
CVE-2023-35146
GHSA-62v2-xwh3-5gvx
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Jenkins Template Workflows Plugin 41.v32d86a_313b_4a and earlier does not escape names of jobs used as buildings blocks for Template Workflow Job, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to create jobs. There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-07T20:49:21.202890+00:00 GHSA Importer Affected by VCID-bp1m-hbxe-z7ch https://github.com/advisories/GHSA-62v2-xwh3-5gvx 38.6.0
2026-06-02T04:45:00.637315+00:00 GitLab Importer Affected by VCID-bp1m-hbxe-z7ch https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.jenkins.plugin.templateWorkflows/template-workflows/CVE-2023-35146.yml 38.6.0