Jenkins Security Advisory 2026-09-16
Jenkins published a security advisory dated 2026-09-16 listing 13 affected plugins, including Bitbucket Push and Pull Request, Bitbucket Server Integration, Coverage, Gitee, GitLab, Gradle, Keycloak Authentication, OWASP Dependency-Check, Pipeline: Groovy Libraries, Pipeline: Multibranch, Robot Framework, Script Security, and Warnings. The source text does not describe the vulnerabilities, their severity, or the fixed versions.
What changes for platform teams
Teams running Jenkins with any of the listed plugins should check whether they have them installed and consult the full advisory for affected and fixed versions. The source text gives no details to confirm the scope of exposure.
Read the original at Jenkins security advisories ↗
written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules