GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,285
Erlang
31
GitHub Actions
21
Go
2,056
Maven
5,000+
npm
3,741
NuGet
668
pip
3,422
Pub
12
RubyGems
892
Rust
875
Swift
36
Unreviewed advisories
All unreviewed
5,000+
176 advisories
Filter by severity
Jenkins Build-Publisher plugin has Insufficiently Protected Credentials
High
CVE-2017-1000387
was published
for
org.jenkins-ci.plugins:build-publisher
(Maven)
May 13, 2022
Jenkins SSH Plugin user passwords for encrypted SSH keys stored in plaintext
Critical
CVE-2017-1000245
was published
for
org.jenkins-ci.plugins:ssh
(Maven)
May 13, 2022
Jenkins Crowd Integration Plugin stores credentials in plain text
Moderate
CVE-2019-1003097
was published
for
com.ds.tools.hudson:crowd
(Maven)
May 13, 2022
Jenkins TestFairy Plugin stores credentials in plain text
Moderate
CVE-2019-1003096
was published
for
org.jenkins-ci.plugins:TestFairy
(Maven)
May 13, 2022
Jenkins Artifactory Plugin stored old directly entered credentials unencrypted on disk
High
CVE-2018-1000424
was published
for
org.jenkins-ci.plugins:artifactory
(Maven)
May 13, 2022
Jenkins SonarQube Scanner Plugin stored server authentication token in plain text
High
CVE-2018-1000425
was published
for
org.jenkins-ci.plugins:sonar
(Maven)
May 13, 2022
Jenkins Crowd 2 Integration Plugin stored credentials in plain text
High
CVE-2018-1000423
was published
for
org.jenkins-ci.plugins:crowd2
(Maven)
May 13, 2022
Jenkins AppDynamics Dashboard Plugin has insufficiently protected credentials
Moderate
CVE-2019-1003039
was published
for
org.jenkins-ci.plugins:appdynamics-dashboard
(Maven)
May 13, 2022
ECS Publisher Plugin stored and displayed API token in plain text
Moderate
CVE-2019-1003045
was published
for
de.eacg:ecs-publisher
(Maven)
May 13, 2022
Jenkins Repository Connector Plugin has insufficiently protected credentials
Low
CVE-2019-1003038
was published
for
org.jenkins-ci.plugins:repository-connector
(Maven)
May 13, 2022
Jenkins youtrack-plugin Plugin stored credentials in plain text
Low
CVE-2019-10287
was published
for
org.jenkins-ci.plugins:youtrack-plugin
(Maven)
May 13, 2022
Jenkins Jabber Server Plugin stores credentials in plain text
Low
CVE-2019-10288
was published
for
de.e-nexus:jabber-server-plugin
(Maven)
May 13, 2022
Jenkins Diawi Upload Plugin stores credentials in plain text
Moderate
CVE-2019-10284
was published
for
org.jenkins-ci.plugins:diawi-upload
(Maven)
May 13, 2022
Jenkins mabl Plugin stores credentials in plain text
Moderate
CVE-2019-10283
was published
for
com.mabl.integration.jenkins:mabl-integration
(Maven)
May 13, 2022
Jenkins DeployHub Plugin stores credentials in plain text
Moderate
CVE-2019-10286
was published
for
com.openmake:deployhub
(Maven)
May 13, 2022
Jenkins Minio Storage Plugin stores credentials in plain text
Low
CVE-2019-10285
was published
for
org.jenkins-ci.plugins:minio-storage
(Maven)
May 13, 2022
Jenkins CloudCoreo DeployTime Plugin stores credentials in plain text
Low
CVE-2019-10299
was published
for
com.cloudcoreo.plugins:cloudcoreo-deploytime
(Maven)
May 13, 2022
Jenkins Netsparker Enterprise Scan Plugin stored credentials in plain text
Low
CVE-2019-10291
was published
for
org.jenkins-ci.plugins:netsparker-cloud-scan
(Maven)
May 13, 2022
Jenkins Koji Plugin stores credentials in plain text
Low
CVE-2019-10298
was published
for
org.jenkins-ci.plugins:koji
(Maven)
May 13, 2022
Jenkins Sametime Plugin stores credentials in plain text
Low
CVE-2019-10297
was published
for
org.jenkins-ci.plugins:sametime
(Maven)
May 13, 2022
Jenkins Serena SRA Deploy Plugin stores credentials in plain text
Low
CVE-2019-10296
was published
for
com.urbancode.ds.jenkins.plugins:sra-deploy
(Maven)
May 13, 2022
Jenkins Relution Enterprise Appstore Publisher Plugin stores credentials in plain text
Low
CVE-2019-10281
was published
for
org.jenkins-ci.plugins:relution-publisher
(Maven)
May 13, 2022
Jenkins Klaros-Testmanagement Plugin stores credentials in plain text
Moderate
CVE-2019-10282
was published
for
hudson.plugins.klaros:klaros-testmanagement
(Maven)
May 13, 2022
Jenkins crittercism-dsym Plugin stores API key in plain text
Moderate
CVE-2019-10295
was published
for
org.jenkins-ci.plugins:crittercism-dsym
(Maven)
May 13, 2022
Jenkins Kmap Plugin stores credentials in plain text
High
CVE-2019-10294
was published
for
org.jenkins-ci.plugins:kmap-jenkins
(Maven)
May 13, 2022
ProTip!
Advisories are also available from the
GraphQL API