The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Jenkins before 1.583 and LTS before 1.565.3 allows remote authenticated users with the Job/CONFIGURE permission to bypass intended restrictions and create or destroy arbitrary jobs via unspecified vectors.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade jenkins-ltsUpgrade jenkins | Dec 10, 2025 | Oct 1, 2014 |
| Jenkins 2014 10 01 | — | Upgrade Jenkins to the latest versionUpgrade Jenkins LTS to version 1.565.3Upgrade Jenkins to version 1.583Upgrade Jenkins LTS to the latest version | Nov 13, 2017 | Oct 16, 2014 |
| Redhat Openshift | — | Upgrade nodejs-is-redirectUpgrade nodejs-glob-parentUpgrade nodejs-lodash.getnativeUpgrade nodejs-bracesUpgrade nodejs-anymatchUpgrade nodejs-lodash.defaultsUpgrade nodejs-stream-combinerUpgrade nodejs-iniUpgrade heapsterUpgrade openvswitchUpgrade nodejs-array-uniqueUpgrade nodejs-rcUpgrade nodejs-for-ownUpgrade nodejs-is-extendableUpgrade nodejs-expand-bracketsUpgrade origin-kibanaUpgrade nodejs-osenvUpgrade nodejs-success-symbolUpgrade nodejs-pause-streamUpgrade nodejs-lodash.restparamUpgrade nodejs-graceful-fsUpgrade nodejs-arr-diffUpgrade nodejs-timed-outUpgrade nodejs-duplexerUpgrade nodejs-chokidarUpgrade nodejs-align-textUpgrade nodejs-es6-promiseUpgrade nodejs-expand-rangeUpgrade nodejs-lodash.bindcallbackUpgrade nodejs-mkdirpUpgrade nodejs-string-lengthUpgrade nodejs-preserveUpgrade nodejs-fill-rangeUpgrade nodejs-event-streamUpgrade nodejs-node-status-codesUpgrade nodejs-ps-treeUpgrade nodejs-read-all-streamUpgrade nodejs-error-exUpgrade nodejs-pinkieUpgrade nodejs-touchUpgrade nodejs-uuidUpgrade nodejs-object-assignUpgrade nodejs-ansi-wrapUpgrade nodejs-for-inUpgrade nodejs-xdg-basedirUpgrade nodejs-lodash.keysUpgrade nodejs-semver-diffUpgrade nodejs-end-of-streamUpgrade nodejs-os-tmpdirUpgrade jenkinsUpgrade nodejs-extglobUpgrade nodejs-is-dotfileUpgrade nodejs-latest-versionUpgrade openshift-ansibleUpgrade nodejs-async-eachUpgrade nodejs-slideUpgrade nodejs-is-binary-pathUpgrade nodejs-repeat-elementUpgrade nodejs-is-npmUpgrade nodejs-normalize-pathUpgrade nodejs-lowercase-keysUpgrade nodejs-parse-jsonUpgrade nodejs-undefsafeUpgrade nodejs-optimistUpgrade nodejs-pinkie-promiseUpgrade atomic-openshiftUpgrade nodejs-configstoreUpgrade nodejs-create-error-classUpgrade nodejs-lodash.isarrayUpgrade nodejs-parse-globUpgrade nodejs-arr-flattenUpgrade nodejs-regex-cacheUpgrade openshift-origin-cartridge-jenkinsUpgrade nodejs-is-numberUpgrade nodejs-package-jsonUpgrade nodejs-semverUpgrade nodejs-is-extglobUpgrade nss_wrapperUpgrade nodejs-micromatchUpgrade nodejs-fromUpgrade nodejs-is-plain-objUpgrade nodejs-os-homedirUpgrade nodejs-url-parse-laxUpgrade nodejs-prepend-httpUpgrade nodejs-gotUpgrade nodejs-map-streamUpgrade nodejs-capture-stack-traceUpgrade nodejs-lazy-cacheUpgrade nodejs-ansi-greenUpgrade nodejs-lodash.isargumentsUpgrade nodejs-object.omitUpgrade nodejs-is-primitiveUpgrade nodejs-isobjectUpgrade nodejs-deep-extendUpgrade nodejs-filename-regexUpgrade nodejs-readdirpUpgrade nodejs-registry-urlUpgrade nodejs-throughUpgrade nodejs-lodash.isiterateecallUpgrade nodejs-randomaticUpgrade nodejs-is-streamUpgrade nodejs-splitUpgrade nodejs-kind-ofUpgrade nodejs-lodash.assignUpgrade nodejs-nodemonUpgrade nodejs-lodash.basecopyUpgrade nodejs-binary-extensionsUpgrade nodejs-update-notifierUpgrade jenkins-plugin-openshiftUpgrade nodejs-lodash.createassignerUpgrade nodejs-is-globUpgrade nodejs-strip-json-commentsUpgrade nodejs-unzip-responseUpgrade nodejs-is-equal-shallowUpgrade nodejs-duplexifyUpgrade nodejs-write-file-atomicUpgrade nodejs-glob-baseUpgrade nodejs-arrifyUpgrade nodejs-lodash.baseassign | Jun 18, 2018 | Oct 2, 2014 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub