mend-for-github-com[bot]

CVE-2025-27625 (Medium) detected in jenkins-core-2.426.3.jar

1

## CVE-2025-27625 - Medium Severity Vulnerability Vulnerable Library - jenkins-core-2.426.3.jar Jenkins core code and view files to render HTML. Library home page: https://github.com/jenkinsci/jenkins Path to dependency file: /build.gradle Path to...

CVE-2022-1471 (High) detected in snakeyaml-1.29.jar

4

## CVE-2022-1471 - High Severity Vulnerability Vulnerable Library - snakeyaml-1.29.jar YAML 1.1 parser and emitter for Java Library home page: http://www.snakeyaml.org Path to dependency file: /build.gradle Path to vulnerable library:...

CVE-2022-37866 (High) detected in ivy-2.4.0.jar, ivy-2.5.0.jar

1

## CVE-2022-37866 - High Severity Vulnerability Vulnerable Libraries - ivy-2.4.0.jar, ivy-2.5.0.jar ivy-2.4.0.jar The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are...

## CVE-2024-47554 - Medium Severity Vulnerability Vulnerable Library - commons-io-2.13.0.jar The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more....

WS-2022-0468 (High) detected in jackson-core-2.13.4.jar

1

## WS-2022-0468 - High Severity Vulnerability Vulnerable Library - jackson-core-2.13.4.jar Core Jackson processing abstractions (aka Streaming API), implementation for JSON Library home page: http://fasterxml.com/ Path to dependency file: /build.gradle Path...

CVE-2022-41854 (Medium) detected in snakeyaml-1.29.jar

4

## CVE-2022-41854 - Medium Severity Vulnerability Vulnerable Library - snakeyaml-1.29.jar YAML 1.1 parser and emitter for Java Library home page: http://www.snakeyaml.org Path to dependency file: /build.gradle Path to vulnerable library:...

CVE-2022-43409 (Medium) detected in workflow-support-838.va_3a_087b_4055b.jar

3

## CVE-2022-43409 - Medium Severity Vulnerability Vulnerable Library - workflow-support-838.va_3a_087b_4055b.jar The Jenkins Plugins Parent POM Project Library home page: https://github.com/jenkinsci/workflow-support-plugin Path to dependency file: /build.gradle Path to vulnerable library: /tmp/containerbase/cache/.gradle/caches/modules-2/files-2.1/org.jenkins-ci.plugins.workflow/workflow-support/838.va_3a_087b_4055b/88ac7419e2d20c1432ffe92d94ca070286021a8e/workflow-support-838.va_3a_087b_4055b.jar...

CVE-2024-38827 (Medium) detected in multiple libraries

1

## CVE-2024-38827 - Medium Severity Vulnerability Vulnerable Libraries - spring-security-crypto-5.8.7.jar, spring-security-web-5.8.7.jar, spring-security-core-5.8.7.jar spring-security-crypto-5.8.7.jar Spring Security Library home page: https://spring.io Path to dependency file: /build.gradle Path to vulnerable library: /tmp/containerbase/cache/.gradle/caches/modules-2/files-2.1/org.springframework.security/spring-security-crypto/5.8.7/d69ea3cac23fa4c567f342180cd7150d06de5e6b/spring-security-crypto-5.8.7.jar Dependency...

CVE-2024-38821 (Critical) detected in spring-security-web-5.8.7.jar

1

## CVE-2024-38821 - Critical Severity Vulnerability Vulnerable Library - spring-security-web-5.8.7.jar Spring Security Library home page: https://spring.io Path to dependency file: /build.gradle Path to vulnerable library: /tmp/containerbase/cache/.gradle/caches/modules-2/files-2.1/org.springframework.security/spring-security-web/5.8.7/b28db4ea3fb69adf99d2a10e61b55c5869518193/spring-security-web-5.8.7.jar Dependency Hierarchy: - jenkins-core-2.426.3.jar...

CVE-2024-47072 (High) detected in xstream-1.4.20.jar

1

## CVE-2024-47072 - High Severity Vulnerability Vulnerable Library - xstream-1.4.20.jar Library home page: http://x-stream.github.io Path to dependency file: /build.gradle Path to vulnerable library: /tmp/containerbase/cache/.gradle/caches/modules-2/files-2.1/com.thoughtworks.xstream/xstream/1.4.20/e2315b8b2e95e9f21697833c8e56cdd9c98a5ee/xstream-1.4.20.jar Dependency Hierarchy: - jenkins-core-2.426.3.jar (Root Library)...