Jenkins Security Advisory 2026-04-29
Jenkins published a security advisory dated 2026-04-29 listing seven affected plugins: Credentials Binding, GitHub, GitHub Branch Source, HTML Publisher, Matrix Authorization Strategy, Microsoft Entra ID, and Script Security. The source text does not describe the vulnerabilities, their severity, or the fixed versions.
What changes for platform teams
Platform teams running Jenkins should check whether any of these plugins are installed and apply the fixed versions from the full advisory. The source text does not state which versions are affected or fixed.
Read the original at Jenkins security advisories ↗
written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules