Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.jenkins-ci.ruby-plugins/gitlab-hook@1.4.2
purl pkg:maven/org.jenkins-ci.ruby-plugins/gitlab-hook@1.4.2
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score 10.0
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
GHSA-8696-836p-c8qp
Aliases:
CVE-2020-2096
Reflected XSS vulnerability in Jenkins gitlab-hook Plugin Jenkins Gitlab Hook Plugin 1.4.2 and earlier does not escape project names in … There are no reported fixed by versions.
GHSA-7p4p-v6hr-gp3m
Aliases:
CVE-2018-1000196
Jenkins Gitlab Hook Plugin stores and displays GitLab API token in plain text A exposure of sensitive information vulnerability exists … There are no reported fixed by versions.
This package is not known to fix any advisories.