jenkins_bitbucket_push_and_pull_request_plugin vulnerabilities

CVEs whose affected-version data names the jenkins_bitbucket_push_and_pull_request_plugin package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-92139Medium· 6.5

1w ago

Jenkins Bitbucket Push and Pull Request Plugin 4.0.1 and earlier trusts values provided in the webhook payload, including certain URLs, and uses configured Bitbucket credentials to connect to those URLs, allowing attackers to capture Bit…

Jenkins Bitbucket Push and Pull Request Plugin 4.0.1 and earlier trusts values provided in the webhook payload, including certain URLs, and uses configured Bitbucket credentials to connect to those URLs, allowing attackers to capture Bit…

▾ SunlitJenkins Project · Jenkins Bitbucket Push and Pull Request PluginEPSS 0.29%via NVD