Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.jenkins-ci.plugins/git-client@6.4.1
purl pkg:maven/org.jenkins-ci.plugins/git-client@6.4.1
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-hjya-xwek-gffk Jenkins Git client Plugin has an OS command injection vulnerability on agents in Git client Plugin Jenkins Git client Plugin 6.4.0 and earlier does not not correctly escape the path to the workspace directory as part of an argument in a temporary shell script generated by the plugin, allowing attackers able to control the workspace directory name to inject arbitrary OS commands. CVE-2025-67640
GHSA-v8hg-m323-jvjq

Date Actor Action Vulnerability Source VulnerableCode Version
2026-05-29T17:36:21.336544+00:00 GitLab Importer Fixing VCID-hjya-xwek-gffk https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.jenkins-ci.plugins/git-client/CVE-2025-67640.yml 38.6.0
2026-05-29T14:34:00.955106+00:00 GHSA Importer Fixing VCID-hjya-xwek-gffk https://github.com/advisories/GHSA-v8hg-m323-jvjq 38.6.0
2026-05-29T08:59:52.612652+00:00 GithubOSV Importer Fixing VCID-hjya-xwek-gffk https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2025/12/GHSA-v8hg-m323-jvjq/GHSA-v8hg-m323-jvjq.json 38.6.0