Jenkins插件安全漏洞公告（含沙箱绕过/命令注入）
Security AdvisoryHighJenkins
Affected:
- Jenkins Script Security Plugin <= 1402.v94c9ce464861
- Jenkins Git client Plugin <= 6.6.0
- Jenkins Pipeline: Groovy Plugin <= 4331.vd056d44658ff
- Jenkins GitHub Branch Source Plugin <= 1967.1969.v205fd594c821
- Jenkins Git Parameter Plugin <= 462.vdcf3df2ed2ca_
Fixed in:
- 1402.vc96e74964250
- 6.6.1
- 4331.4333.v50a_b_076c5199
- 1967.1970.v8d6979736546
- 462.463.v496a_59f698e5
Referenced CVEs: CVE-2026-57295 CVE-2026-57294
文章内图片已隐藏以节省流量 · 升级 Pro 后可见图片及离线存档
本文由本平台从 www.jenkins.io 自动抓取，经 LLM 流水线清洗、双语翻译。版权归原作者。查看原文。