Known vulnerabilities in Pipeline: Groovy 4331.v9d06ed4658ff

Vendor: Jenkins
Version: 4331.v9d06ed4658ff
Software CPE: cpe:2.3:a:jenkins:workflow-cps:*:*:*:*:*:jenkins:*:*
Total vulnerabilities: 2
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 5.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Pipeline: Groovy version 4331.v9d06ed4658ff Pipeline: Groovy 4331.v9d06ed4658ff is affected by 2 vulnerabilities: 1 medium, 1 low Critical High Medium Low

Vulnerabilities (2)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU135704 - Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')
CVE-2026-57284
CWE-470 Medium
No
No
4331.4333.v50a_b_076c5199 29.06.2026 SB2026062911
#VU135703 - Cross-Site Request Forgery (CSRF)
CVE-2026-57283
CWE-352 Low
No
No
4331.4333.v50a_b_076c5199 29.06.2026 SB2026062911