Browse CVEs

HIGH 7.5 CVE-2025-68698 Jervis is a library for Job DSL plugin scripts and shared Jenkins pipeline libraries. Prior to 2.2, Jervis uses PKCS1Encoding which is vulnerable to … Jervis 2.2+ Fix from $1,9502026-01-13 HIGH 7.5 CVE-2025-68701 Jervis is a library for Job DSL plugin scripts and shared Jenkins pipeline libraries. Prior to 2.2, Jervis uses deterministic AES IV derivation from … Jervis 2.2+ Fix from $1,9502026-01-13 HIGH 7.5 CVE-2025-68702 Jervis is a library for Job DSL plugin scripts and shared Jenkins pipeline libraries. Prior to 2.2, Jervis uses padLeft(32, '0') when it should use … Jervis 2.2+ Fix from $1,9502026-01-13 HIGH 7.5 CVE-2025-68703 Jervis is a library for Job DSL plugin scripts and shared Jenkins pipeline libraries. Prior to 2.2, the salt is derived from sha256Sum(passphrase). T… Jervis 2.2+ Fix from $1,9502026-01-13 HIGH 7.5 CVE-2025-68704 Jervis is a library for Job DSL plugin scripts and shared Jenkins pipeline libraries. Prior to 2.2, Jervis uses java.util.Random() which is not crypt… Jervis 2.2+ Fix from $1,9502026-01-13 HIGH 7.5 CVE-2025-68931 Jervis is a library for Job DSL plugin scripts and shared Jenkins pipeline libraries. Prior to 2.2, AES/CBC/PKCS5Padding lacks authentication, making… Jervis 2.2+ Fix from $1,9502026-01-13 MEDIUM 5.3 CVE-2025-68925 Jervis is a library for Job DSL plugin scripts and shared Jenkins pipeline libraries. Prior to 2.2, the code doesn't validate that the JWT header spe… Jervis 2.2+ Fix from $1,6002026-01-13