Jenkins Security Advisory 2026-09-02
Jenkins published a security advisory dated 2026-09-02 that lists affected components: Jenkins core, update-center2, and about 18 plugins including GitLab, LDAP, SAML, Microsoft Entra ID, Script Security, and Pipeline: Groovy Libraries. The source text lists only the affected components and does not describe the vulnerabilities, severity, or fixed versions.
What changes for platform teams
Platform teams running Jenkins controllers should check the advisory for fixed Jenkins core and plugin versions and review which installed plugins are affected. The source text does not give the fixed versions, so the advisory itself must be consulted before deciding on upgrades.
Read the original at Jenkins security advisories ↗
written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules