Jenkins Security Advisory 2024-11-13
Jenkins published a security advisory dated 2024-11-13 listing seven affected plugins: Authorize Project, IvyTrigger, OpenId Connect Authentication, Pipeline: Declarative, Pipeline: Groovy, Script Security, and Shared Library Version Override. The source text does not include vulnerability descriptions, severity, or fixed versions.
What changes for platform teams
Teams running Jenkins with any of these plugins should check installed versions against the advisory and update to the fixed releases. The source text does not state which versions are fixed or what the vulnerabilities allow.
Read the original at Jenkins security advisories ↗
written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules