jenkins_coverage_plugin vulnerabilities

CVEs whose affected-version data names the jenkins_coverage_plugin package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-92135High· 8.0

6d ago

Jenkins Coverage Plugin 3.3358.v9487dde48783 and earlier does not validate the coverage results ID when a job configuration is submitted through the REST API, allowing attackers with Item/Configure permission to use a javascript: scheme …

Jenkins Coverage Plugin 3.3358.v9487dde48783 and earlier does not validate the coverage results ID when a job configuration is submitted through the REST API, allowing attackers with Item/Configure permission to use a javascript: scheme …

▾ TwilightJenkins Project · Jenkins Coverage PluginEPSS 0.38%via NVD