Staging Environment: Content and features may be unstable or change without notice.

Advisory Summary

gitlab/maven/io.jenkins.plugins/eggplant-runner/CVE-2025-64135

Jenkins Eggplant Runner Plugin protection mechanism disabled Jenkins Eggplant Runner Plugin 0.0.1.301.v963cffe8ddb_8 and earlier sets the Java system property `jdk.http.auth.tunneling.disabledSchemes` to an empty value as part of applying a proxy configuration. This disables a protection mechanism of the Java runtime addressing CVE-2016-5597. As of publication of this advisory, there is no fix.
Mitigation Type Mitigation Data Mitigation Note