com.coravy.hudson.plugins.github:github

v0.2Maven· Java

The verdict

Has 5 high-severity advisories. Verify a patched version exists before using. Check the OSV link for the fixed-in version.

Check the OSV link for the fixed-in version.

Live from the Maven registry · derived rules, not AI

How it scores

MaintenanceAbandoned

PopularityUnknown

Security5 advisories

LicenseUnknown

DepsZero deps

Maintenance

Last published 16 years ago.

Popularity

Download count unavailable.

Security

5 known advisories (worst: high severity).

License

No license declared.

Dependencies

No runtime dependencies

Security advisories

Live from OSV.dev · cached 24h

HIGH
CSRF vulnerability and missing permission checks in GitHub Plugin allowed capturing credentials
GHSA-6cvm-v6qj-hjq9 Fixed in 1.29.2Published 2022-05-13
HIGH
Stored XSS vulnerability in Jenkins GitHub Plugin
GHSA-mv77-fj63-q5w8 Fixed in 1.37.3.1Published 2023-10-25
MEDIUM
Jenkins GitHub Plugin server-side request forgery vulnerability exists
GHSA-gh85-mq87-r7v3 Fixed in 1.29.1Published 2022-05-14
MEDIUM
Jenkins GitHub Plugin exposure of sensitive information vulnerability exists
GHSA-v7g7-cmxx-wxw9 Fixed in 1.29.1Published 2022-05-14
LOW
Jenkins GitHub plugin uses weak webhook signature function
GHSA-mxcc-7h5m-x57r Fixed in 1.34.5Published 2022-07-28

Recent releases