Known vulnerabilities in Allure 2.20

Vendor: Jenkins
Software: Allure
Version: 2.20
Software CPE: cpe:2.3:a:jenkins:allure:*:*:*:*:*:*:*:*
Website: https://jenkins.io/
Total vulnerabilities: 1
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Allure version 2.20 Allure 2.20 is affected by 1 vulnerabilities: 1 medium Critical High Medium Low

Vulnerabilities (1)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU147218 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-84669		 CWE-22 Medium
No
No
 2.36.0 07.09.2026 SB2026090724