Vulnerabilities of Jenkins project Jenkins Git Client Plugin
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-57282 | Jenkins Git client Plugin 6.6.0 and earlier does not correctly escape the workspace directory name when it is embedded… | 5.0 Medium | Jun 24, 2026 |
| CVE-2025-67640 | Jenkins Git client Plugin 6.4.0 and earlier does not not correctly escape the path to the workspace directory as part of… | 5.0 Medium | Dec 10, 2025 |
| CVE-2025-58458 | In Jenkins Git client Plugin 6.3.2 and earlier, except 6.1.4 and 6.2.1, Git URL field form validation responses differ… | 4.3 Medium | Sep 3, 2025 |
| CVE-2022-36881 | Jenkins Git client Plugin 3.11.0 and earlier does not perform SSH host key verification when connecting to Git… | Not rated | Jul 27, 2022 |
| CVE-2019-10392 | Jenkins Git Client Plugin 2.8.4 and earlier and 3.0.0-rc did not properly restrict values passed as URL argument to an… | Not rated | Sep 12, 2019 |
Other Jenkins project products
Jenkins 153
Jenkins Script Security Plugin 39
Jenkins Pipeline: Groovy Plugin 11
Jenkins Active Directory Plugin 11
Jenkins Email Extension Plugin 9
Jenkins GitLab Plugin 8
Jenkins Build Failure Analyzer Plugin 8
Jenkins Job Configuration History Plugin 8
Jenkins OpenId Connect Authentication Plugin 8
Jenkins NS-ND Integration Performance Publisher Plugin 8
Jenkins Pipeline: Shared Groovy Libraries Plugin 8
Jenkins Amazon EC2 Plugin 7