com.amazon.jenkins.fleet:ec2-fleet vulnerabilities
CVEs whose affected-version data names the com.amazon.jenkins.fleet:ec2-fleet package (maven). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-57295Medium· 5.4Jenkins EC2 Fleet Plugin has a cross-site request forgery (CSRF) vulnerability
Jenkins EC2 Fleet Plugin has a cross-site request forgery (CSRF) vulnerability
▾ Sunlitamazon · com.amazon.jenkins.fleet:ec2-fleetEPSS 0.22%via GHSA
CVE-2026-57294Medium· 5.4Jenkins EC2 Fleet Plugin has a missing permission check
Jenkins EC2 Fleet Plugin has a missing permission check
▾ Sunlitamazon · com.amazon.jenkins.fleet:ec2-fleetEPSS 0.25%via GHSA