active_directory vulnerabilities
CVEs whose affected-version data names the active_directory package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-48919Medium· 6.6Jenkins Active Directory Plugin 2.41 and earlier deserializes data from LDAP referrals without validation.
Jenkins Active Directory Plugin 2.41 and earlier deserializes data from LDAP referrals without validation.
▾ Sunlitjenkins · active_directoryEPSS 0.43%via NVD
CVE-2026-48918Medium· 6.6Jenkins Active Directory Plugin 2.41 and earlier follows LDAP referrals by default.
Jenkins Active Directory Plugin 2.41 and earlier follows LDAP referrals by default.
▾ Sunlitjenkins · active_directoryEPSS 0.37%via NVD