| CVE-2026-120461 |
Jpom through 2.11.12 contains a cross-workspace authorization bypass in POST /node/ssh_command/batch that resolves…
|
8.7
High
|
Nov 2, 2026 |
| CVE-2026-120460 |
Jpom through 2.11.12 contains a cross-workspace authorization bypass vulnerability that allows authenticated users to…
|
8.7
High
|
Nov 2, 2026 |
| CVE-2026-120201 |
Jpom 2.10.0 through 2.11.12 contains an authentication bypass vulnerability that allows unauthenticated attackers to…
|
9.3
Critical
|
Oct 31, 2026 |
| CVE-2026-111605 |
Jpom through 2.11.12 contains an authorization bypass vulnerability in SshFileController that allows authenticated…
|
8.6
High
|
Oct 16, 2026 |
| CVE-2026-91993 |
Jpom through 2.11.12 fails to validate workspace ownership when resolving repositoryId on the /build/branch-list…
|
5.3
Medium
|
Sep 15, 2026 |