Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.jenkins-ci.plugins/koji@0.3
purl pkg:maven/org.jenkins-ci.plugins/koji@0.3
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score 3.0
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
GHSA-x464-r7f4-gj3m
Aliases:
CVE-2019-10298
Jenkins Koji Plugin stores credentials in plain text Jenkins Koji Plugin stores credentials unencrypted in its global configuration file `org.jenkinsci.plugins.koji.KojiBuilder.xml` … There are no reported fixed by versions.
GHSA-3qf7-9xhj-qcfj
Aliases:
CVE-2019-10314
Jenkins Koji Plugin globally and unconditionally disables SSL/TLS certificate validation Jenkins Koji Plugin unconditionally disables SSL/TLS certificate validation for the … There are no reported fixed by versions.
This package is not known to fix any advisories.