VulertSecurity VulertSecurity

Vulnerability Database · Maven · Package report

org.jenkins-ci.plugins:cloudbees-folder: vulnerability history, versions and safety

org.jenkins-ci.plugins:cloudbees-folder is a package in the Maven ecosystem. Vulert records 3 vulnerabilities for it across 74 releases, first recorded in Aug 2023. Each vulnerability names the versions it affects, the fixed version to move to, and a workaround where no fix has been published.

i
3 vulnerabilities recorded H1 M2
i
0 with no fix published

Every vulnerability has a patched version to move to.

i
0 in the last 12 months

Nothing new recorded in the last year.

See the disclosure history →
i
0 malicious-package vulnerabilities

No published version shipped hostile code.

See all org.jenkins-ci.plugins:cloudbees-folder vulnerabilities

Vulert verdict on org.jenkins-ci.plugins:cloudbees-folder 6.1106.v3a_d9a_6d2465e i

Updated on 23 Oct 2026

Good news: 6.1106.v3a_d9a_6d2465e, the version you would install today, has no known vulnerabilities. Older releases do — the table below lists all 3.

Package health score 80/100
  • Security No known security issues
  • Maintenance Sustainable
  • Popularity Niche
  • Community Moderate

What to do: Stay on 6.1106.v3a_d9a_6d2465e or newer. This can change: a vulnerability disclosed tomorrow can affect 6.1106.v3a_d9a_6d2465e too — Vulert watches the package and alerts you if that happens. Monitor it with Vulert →

  • Current release 6.1106.v3a_d9a_6d2465e — unaffected i
  • Vulnerabilities on record 3 over 1 year · 0 in the last year i
  • Latest disclosure 16 Aug 2023 i
  • Highest CVSS 8.0 i
  • With no published fix 0 i
  • Depended on by 5 packages i
  • Stars 59 i
  • Last release 2 months ago i
  • Licence MIT i

Version list, release dates, licence and dependants published by Maven Central, refreshed 23 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Versions

Which versions are affected

Every version Vulert tracks for org.jenkins-ci.plugins:cloudbees-folder, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

i
Version Released Vulert vulnerabilities Licence Fix published Details
6.1106.v3a_d9a_6d2465e 03 Aug 2026 none MIT — Details →
6.1100.ve9eed61d16c4 16 Apr 2026 none MIT — Details →
6.1098.vb_9a_23a_b_c566a_ 15 Apr 2026 none MIT — Details →
6.1079.vc0975c2de294 04 Feb 2026 none MIT — Details →
6.1073.va_7888eb_dd514 05 Nov 2025 none MIT — Details →
6.1062.v2877b_d6b_b_eeb_ 06 Oct 2025 none MIT — Details →
6.1053.vd62fb_b_f7367b_ 01 Oct 2025 none MIT — Details →
6.1045.vb_ddd55e2d03f 23 Sep 2025 none MIT — Details →
6.1042.v37b_8229708e4 19 Sep 2025 none MIT — Details →
6.1040.v8a_e6330a_54e3 05 Sep 2025 none MIT — Details →
6.1037.v4cb_8573b_72a_a_ 30 Jul 2025 none MIT — Details →
6.1036.vb_94fd035b_287 09 Jul 2025 none MIT — Details →
6.1035.v059a_a_f946868 09 Jul 2025 none MIT — Details →
6.1034.v4159e5986617 09 Jul 2025 none MIT — Details →
6.1033.v7a_d11b_20c8df 09 Jul 2025 none MIT — Details →
6.1026.ve06dfa_cf31c3 19 Jun 2025 none MIT — Details →
6.1023.v4fcb_72152519 29 May 2025 none MIT — Details →
6.1021.v98130a_a_71a_94 28 May 2025 none MIT — Details →
6.1012.v79a_86a_1ea_c1f 11 Apr 2025 none MIT — Details →
6.1008.v5ed27a_3a_e475 10 Apr 2025 none MIT — Details →
6.1005.v99ff3482d1ff 10 Apr 2025 none MIT — Details →
6.1003.v5338b_c4d6992 08 Apr 2025 none MIT — Details →
6.999.v42253c105443 26 Mar 2025 none MIT — Details →
6.995.v6ea_28196da_93 26 Mar 2025 none MIT — Details →
6.991.v1d5f531726d0 21 Mar 2025 none MIT — Details →
6.989.v1070f3a_b_0752 21 Mar 2025 none MIT — Details →
6.985.va_f1635030cc5 05 Mar 2025 none MIT — Details →
6.982.vf165a_16c9507 11 Feb 2025 none MIT — Details →
6.980.v5a_cc0cb_25881 15 Jan 2025 none MIT — Details →
6.976.v4dc79fb_c458d 10 Jan 2025 none MIT — Details →
6.975.v4161e479479f 16 Dec 2024 none MIT — Details →
6.973.vc9b_85a_61e4fc 12 Dec 2024 none MIT — Details →
6.971.v9a_984fd08864 11 Dec 2024 none MIT — Details →
6.969.v7d22c6eb_fde1 10 Dec 2024 none MIT — Details →
6.963.v6edc0fc71472 04 Dec 2024 none MIT — Details →
6.959.v4ed5cc9e2dd4 16 Nov 2024 none MIT — Details →
6.955.v81e2a_35c08d3 26 Sep 2024 none MIT — Details →
6.951.v5f91d88d76b_b_ 10 Sep 2024 none MIT — Details →
6.942.vb_43318a_156b_2 28 May 2024 none MIT — Details →
6.940.v7fa_03b_f14759 01 May 2024 none MIT — Details →
6.936.v3c5cd2190e9e 30 Apr 2024 none MIT — Details →
6.928.v7c780211d66e 26 Feb 2024 none MIT — Details →
6.921.vfb_b_224371fb_4 13 Feb 2024 none MIT — Details →
5.13 13 Feb 2024 H1 M2 MIT Yes Details →
5.16 13 Feb 2024 H1 M2 MIT Yes Details →
6.897.vb_943ea_6b_a_08b_ 13 Feb 2024 none MIT — Details →
6.0.2 13 Feb 2024 H1 M2 MIT Yes Details →
6.7 13 Feb 2024 H1 M2 MIT Yes Details →
6.714.v79e858ef76a_2 13 Feb 2024 H1 M2 MIT Yes Details →
5.7 13 Feb 2024 H1 M2 MIT Yes Details →
6.16 13 Feb 2024 H1 M2 MIT Yes Details →
6.815.v0dd5a_cb_40e0e 13 Feb 2024 H1 M2 MIT Yes Details →
4.1 13 Feb 2024 H1 M2 MIT Yes Details →
6.1.1 13 Feb 2024 H1 M2 MIT Yes Details →
6.13 13 Feb 2024 H1 M2 MIT Yes Details →
6.758.vfd75d09eea_a_1 13 Feb 2024 H1 M2 MIT Yes Details →
6.773.vd2dcc704ee7e 13 Feb 2024 H1 M2 MIT Yes Details →
5.2.2 13 Feb 2024 H1 M2 MIT Yes Details →
5.9 13 Feb 2024 H1 M2 MIT Yes Details →
5.1-beta-1 13 Feb 2024 H1 M2 MIT Yes Details →
5.8 13 Feb 2024 H1 M2 MIT Yes Details →
4.9 13 Feb 2024 H1 M2 MIT Yes Details →
6.11.1 13 Feb 2024 H1 M2 MIT Yes Details →
6.846.v23698686f0f6 13 Feb 2024 H1 M2 MIT Yes Details →
6.5.1 13 Feb 2024 H1 M2 MIT Yes Details →
6.722.v8165b_a_cf25e9 13 Feb 2024 H1 M2 MIT Yes Details →
6.0.0 13 Feb 2024 H1 M2 MIT Yes Details →
5.5 13 Feb 2024 H1 M2 MIT Yes Details →
6.0.1 13 Feb 2024 H1 M2 MIT Yes Details →
6.10.0 13 Feb 2024 H1 M2 MIT Yes Details →
6.15 13 Feb 2024 H1 M2 MIT Yes Details →
4.3 13 Feb 2024 H1 M2 MIT Yes Details →
6.6 13 Feb 2024 H1 M2 MIT Yes Details →
6.848.ve3b_fd7839a_81 13 Feb 2024 H1 M2 MIT Yes Details →
5.0 13 Feb 2024 H1 M2 MIT Yes Details →
5.12 13 Feb 2024 H1 M2 MIT Yes Details →
6.736.v5f554b_b_a_52b_3 13 Feb 2024 H1 M2 MIT Yes Details →
4.0 13 Feb 2024 H1 M2 MIT Yes Details →
5.2.1 13 Feb 2024 H1 M2 MIT Yes Details →
6.17 13 Feb 2024 H1 M2 MIT Yes Details →
6.2.1 13 Feb 2024 H1 M2 MIT Yes Details →
6.792.v495e640810da 13 Feb 2024 H1 M2 MIT Yes Details →
6.858.v898218f3609d 13 Feb 2024 none MIT — Details →
6.901.vb_4c7a_da_75da_3 13 Feb 2024 none MIT — Details →
4.10 13 Feb 2024 H1 M2 MIT Yes Details →
6.10.1 13 Feb 2024 H1 M2 MIT Yes Details →
6.2.0 13 Feb 2024 H1 M2 MIT Yes Details →
5.10 13 Feb 2024 H1 M2 MIT Yes Details →
6.14 13 Feb 2024 H1 M2 MIT Yes Details →
6.800.v71307ca_b_986b 13 Feb 2024 H1 M2 MIT Yes Details →
6.12 13 Feb 2024 H1 M2 MIT Yes Details →
4.7 13 Feb 2024 H1 M2 MIT Yes Details →
5.1 13 Feb 2024 H1 M2 MIT Yes Details →
6.0.3 13 Feb 2024 H1 M2 MIT Yes Details →
4.6 13 Feb 2024 H1 M2 MIT Yes Details →
6.708.ve61636eb_65a_5 13 Feb 2024 H1 M2 MIT Yes Details →
6.797.v8df9950d783b 13 Feb 2024 H1 M2 MIT Yes Details →
4.0.1 13 Feb 2024 H1 M2 MIT Yes Details →
4.5 13 Feb 2024 H1 M2 MIT Yes Details →
4.8 13 Feb 2024 H1 M2 MIT Yes Details →
5.2 13 Feb 2024 H1 M2 — Yes Details →
5.3 13 Feb 2024 H1 M2 — Yes Details →
6.3 13 Feb 2024 H1 M2 — Yes Details →
6.770.ve57b_a_fb_6a_67c 13 Feb 2024 H1 M2 — Yes Details →
5.6 13 Feb 2024 H1 M2 — Yes Details →
4.6.1 13 Feb 2024 H1 M2 — Yes Details →
5.18 13 Feb 2024 H1 M2 — Yes Details →
6.11 13 Feb 2024 H1 M2 — Yes Details →
5.17 13 Feb 2024 H1 M2 — Yes Details →
6.0.4 13 Feb 2024 H1 M2 — Yes Details →
5.14 13 Feb 2024 H1 M2 — Yes Details →
6.1.2 13 Feb 2024 H1 M2 — Yes Details →
6.5 13 Feb 2024 H1 M2 — Yes Details →
5.17-beta-1 13 Feb 2024 H1 M2 — Yes Details →
4.2.3 13 Feb 2024 H1 M2 — Yes Details →
4.2.1 13 Feb 2024 H1 M2 — Yes Details →
5.15 13 Feb 2024 H1 M2 — Yes Details →
6.9 13 Feb 2024 H1 M2 — Yes Details →
6.740.ve4f4ffa_dea_54 13 Feb 2024 H1 M2 — Yes Details →
5.4 13 Feb 2024 H1 M2 — Yes Details →

The newest 120 of 137 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

  • 2023 3

Counted by the year Vulert recorded each vulnerability — the same date the table below shows as disclosed. 0 of the 3 were recorded in the last 12 months.

03 Vulnerabilities

Recorded vulnerabilities for org.jenkins-ci.plugins:cloudbees-folder

The 3 most severe of 3 vulnerabilities recorded for this package

Search all 3 in the database →
Vulnerability Severity Fixed version ↓ Disclosed ↓
CVE-2023-40336: Jenkins Folders Plugin cross-site request forgery vulnerability 8.0 high 6.848.ve3b 16 Aug 2023
CVE-2023-40337: Jenkins Folders Plugin cross-site request forgery vulnerability 4.3 medium 6.848.ve3b 16 Aug 2023
CVE-2023-40338: Jenkins Folders Plugin information disclosure vulnerability 4.3 medium 6.848.ve3b 16 Aug 2023

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About org.jenkins-ci.plugins:cloudbees-folder

Is org.jenkins-ci.plugins:cloudbees-folder safe to use?

Vulert records 3 vulnerabilities for org.jenkins-ci.plugins:cloudbees-folder in Maven: 0 critical, 1 high, 2 medium and 0 low. Every one of them has a published fix, so the practical answer is to run a supported release and keep it patched.

What is org.jenkins-ci.plugins:cloudbees-folder's Vulert package health score?

Vulert scores org.jenkins-ci.plugins:cloudbees-folder 80/100, which reads as in good shape. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).

Is the latest version of org.jenkins-ci.plugins:cloudbees-folder affected?

No. 6.1106.v3a_d9a_6d2465e, the version you would install today, has no vulnerabilities on record against it. Earlier releases do — the version table above lists each release with what affects it.

Which version of org.jenkins-ci.plugins:cloudbees-folder should I use?

6.1106.v3a_d9a_6d2465e is the version Vulert recommends for the affected releases. The version table above lists every release with the vulnerabilities recorded against it, so you can confirm the range you actually run.

How many vulnerabilities does org.jenkins-ci.plugins:cloudbees-folder have?

3 vulnerabilities are recorded for org.jenkins-ci.plugins:cloudbees-folder in the Maven ecosystem: 0 critical, 1 high, 2 medium and 0 low. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new org.jenkins-ci.plugins:cloudbees-folder vulnerabilities disclosed?

0 vulnerabilities were recorded for org.jenkins-ci.plugins:cloudbees-folder in the last 12 months, and the oldest entry in this database dates to 16 Aug 2023. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of org.jenkins-ci.plugins:cloudbees-folder are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor org.jenkins-ci.plugins:cloudbees-folder for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the org.jenkins-ci.plugins:cloudbees-folder version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.