org.jenkins-ci.plugins:assembla vulnerabilities
CVEs whose affected-version data names the org.jenkins-ci.plugins:assembla package (maven). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
CVE-2026-57303High· 7.1Jenkins Assembla Plugin has an XXE vulnerability
Jenkins Assembla Plugin has an XXE vulnerability
▾ Twilightjenkins-ci · org.jenkins-ci.plugins:assemblaEPSS 0.36%via GHSA
CVE-2026-57305Medium· 5.4Jenkins Assembla Plugin has a cross-site request forgery (CSRF) vulnerability
Jenkins Assembla Plugin has a cross-site request forgery (CSRF) vulnerability
▾ Sunlitjenkins-ci · org.jenkins-ci.plugins:assemblaEPSS 0.22%via GHSA
CVE-2026-57304Medium· 5.4Jenkins Assembla Plugin has a missing permission check
Jenkins Assembla Plugin has a missing permission check
▾ Sunlitjenkins-ci · org.jenkins-ci.plugins:assemblaEPSS 0.25%via GHSA