Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.jenkins-ci.plugins/bigpanda-jenkins@1.4.0
purl pkg:maven/org.jenkins-ci.plugins/bigpanda-jenkins@1.4.0
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score 1.5
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
GHSA-cpm5-cqr9-7p79
Aliases:
CVE-2022-41248
Jenkins BigPanda Notifier Plugin Missing Password Field Masking BigPanda Notifier Plugin 1.4.0 and earlier stores the BigPanda API key unencrypted … There are no reported fixed by versions.
GHSA-j7xv-fc46-hgpg
Aliases:
CVE-2022-41247
Jenkins BigPanda Notifier Plugin stores BigPanda API key unencrypted BigPanda Notifier Plugin 1.4.0 and earlier stores the BigPanda API key … There are no reported fixed by versions.
This package is not known to fix any advisories.