Known vulnerabilities in External Workspace Manager
Vendor:
Jenkins
Software:
External Workspace Manager
Software CPE:
cpe:2.3:a:jenkins:external_workspace_manager:*:*:*:*:*:*:*:*
Website:
https://jenkins.io/
Total vulnerabilities:
2
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.7
Breakdown by Severity Chart
Vulnerabilities (2)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU141162 - Exposure of sensitive information to an unauthorized actor CVE-2026-70436 |
CWE-200 | Medium | 1.4.2 | 06.08.2026 |
SB20260806106 |
||
| #VU135791 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2026-57296 |
CWE-22 | Medium | 1.4.0 | 29.06.2026 |
SB2026062998 |