jenkins_owasp_dependency-check_plugin vulnerabilities

CVEs whose affected-version data names the jenkins_owasp_dependency-check_plugin package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-92136High· 8.0

6d ago

Jenkins OWASP Dependency-Check Plugin 5.6.4 and earlier does not escape CWE values from Dependency-Check reports on the Jenkins UI, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configu…

Jenkins OWASP Dependency-Check Plugin 5.6.4 and earlier does not escape CWE values from Dependency-Check reports on the Jenkins UI, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configu…

▾ TwilightJenkins Project · Jenkins OWASP Dependency-Check PluginEPSS 0.38%via NVD