VulertSecurity VulertSecurity

Vulnerability Database · Maven · Package report

org.jenkins-ci.plugins:role-strategy: vulnerability history, versions and safety

org.jenkins-ci.plugins:role-strategy is a package in the Maven ecosystem. Vulert records 4 vulnerabilities for it across 48 releases, from May 2022 to Apr 2023. Each vulnerability names the versions it affects, the fixed version to move to, and a workaround where no fix has been published.

i
4 vulnerabilities recorded H2 M2
i
0 with no fix published

Every vulnerability has a patched version to move to.

i
0 in the last 12 months

Nothing new recorded in the last year.

See the disclosure history →
i
0 malicious-package vulnerabilities

No published version shipped hostile code.

See all org.jenkins-ci.plugins:role-strategy vulnerabilities

Vulert verdict on org.jenkins-ci.plugins:role-strategy 928.vc60b_edb_fea_e1 i

Updated on 23 Oct 2026

Good news: 928.vc60b_edb_fea_e1, the version you would install today, has no known vulnerabilities. Older releases do — the table below lists all 4.

Package health score 78/100
  • Security No known security issues
  • Maintenance Sustainable
  • Popularity Little adoption
  • Community Moderate

What to do: Stay on 928.vc60b_edb_fea_e1 or newer. This can change: a vulnerability disclosed tomorrow can affect 928.vc60b_edb_fea_e1 too — Vulert watches the package and alerts you if that happens. Monitor it with Vulert →

  • Current release 928.vc60b_edb_fea_e1 — unaffected i
  • Vulnerabilities on record 4 over 1 year · 0 in the last year i
  • Latest disclosure 02 Apr 2023 i
  • Highest CVSS 8.8 i
  • With no published fix 0 i
  • Stars 145 i
  • Last release this month i
  • Licence MIT i

Version list, release dates, licence and dependants published by Maven Central, refreshed 23 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Versions

Which versions are affected

Every version Vulert tracks for org.jenkins-ci.plugins:role-strategy, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

i
Version Released Vulert vulnerabilities Licence Fix published Details
928.vc60b_edb_fea_e1 21 Oct 2026 none MIT — Details →
927.v9cf5527c4085 03 Oct 2026 none MIT — Details →
918.v91e5468d8db_2 20 Sep 2026 none MIT — Details →
898.vc050ed2424ca_ 21 Jul 2026 none MIT — Details →
878.v6f1d3b_3a_0769 04 Jun 2026 none MIT — Details →
867.vd09254229f9b_ 29 May 2026 none MIT — Details →
861.v4f04587b_b_7e9 28 May 2026 none MIT — Details →
848.va_a_ea_673cf0b_c 02 Dec 2025 none MIT — Details →
840.v206ff7f7312e 15 Oct 2025 none MIT — Details →
799.v5b_e7b_ecc231e 04 Aug 2025 none MIT — Details →
785.v8d262df0f607 03 Jul 2025 none MIT — Details →
783.ve14e9f60fc26 30 Jun 2025 none MIT — Details →
777.v4fe2599cb_f48 02 Jun 2025 none MIT — Details →
775.vf7c4a_97194dd 01 Jun 2025 none MIT — Details →
773.vfb_b_5a_ec97335 01 Jun 2025 none MIT — Details →
771.v3fa_85a_df2c50 25 May 2025 none MIT — Details →
767.v4ffe48a_50303 22 May 2025 none MIT — Details →
764.v3c95b_fcb_32ee 14 May 2025 none MIT — Details →
756.v978cb_392eb_d3 27 Jan 2025 none MIT — Details →
743.v142ea_b_d5f1d3 07 Aug 2024 none MIT — Details →
727.vd344b_eec783d 05 May 2024 none MIT — Details →
717.v6a_69a_fe98974 10 Apr 2024 none MIT — Details →
713.vb_3837801b_8cc 16 Mar 2024 none MIT — Details →
711.vf33a_d2c994b_a_ 29 Feb 2024 none MIT — Details →
506.v13f908ee1fc9 13 Feb 2024 M1 MIT Yes Details →
2.8.2 13 Feb 2024 M2 MIT Yes Details →
664.ve141973c58b_5 13 Feb 2024 none MIT — Details →
2.2.0 13 Feb 2024 H1 M2 MIT Yes Details →
2.3.0 13 Feb 2024 H1 M2 MIT Yes Details →
633.v836e5b_3e80a_5 13 Feb 2024 none MIT — Details →
2.12 13 Feb 2024 H1 M2 MIT Yes Details →
2.4.0 13 Feb 2024 H1 M2 MIT Yes Details →
2.14 13 Feb 2024 H1 M2 MIT Yes Details →
3.1.1 13 Feb 2024 M1 MIT Yes Details →
546.ve16648865996 13 Feb 2024 M1 MIT Yes Details →
510.v909834359ec2 13 Feb 2024 M1 MIT Yes Details →
680.v3a_6a_1698b_864 13 Feb 2024 none MIT — Details →
3.0 13 Feb 2024 H1 M2 MIT Yes Details →
526.v859673312a_14 13 Feb 2024 M1 MIT Yes Details →
587.v2872c41fa_e51 13 Feb 2024 M1 MIT Yes Details →
3.2.0 13 Feb 2024 M1 MIT Yes Details →
548.vb_60076577ec7 13 Feb 2024 M1 MIT Yes Details →
2.5.1 13 Feb 2024 M2 MIT Yes Details →
675.va_5f27678f6d6 13 Feb 2024 none MIT — Details →
2.10 13 Feb 2024 M2 MIT Yes Details →
584.vf8e515397ecd 13 Feb 2024 M1 MIT Yes Details →
631.va_dd0d500b_fc5 13 Feb 2024 none MIT — Details →
521.vcf7a_3a_8dde42 13 Feb 2024 M1 MIT Yes Details →
2.7.0 13 Feb 2024 M2 MIT Yes Details →
2.9.0 13 Feb 2024 M2 MIT Yes Details →
2.11 13 Feb 2024 M2 MIT Yes Details →
2.5.0 13 Feb 2024 H1 M2 MIT Yes Details →
2.8.0 13 Feb 2024 M2 MIT Yes Details →
562.v44e9a_e828d0e 13 Feb 2024 M1 MIT Yes Details →
561.v9846c7351a_41 13 Feb 2024 M1 MIT Yes Details →
2.15 13 Feb 2024 H1 M2 MIT Yes Details →
2.3.2 13 Feb 2024 H1 M2 MIT Yes Details →
3.1 13 Feb 2024 M2 MIT Yes Details →
666.va_e39b_132a_519 13 Feb 2024 none MIT — Details →
670.vc71a_a_c00039e 13 Feb 2024 none MIT — Details →
2.3.1 13 Feb 2024 H1 M2 MIT Yes Details →
575.v4d286a_03e6d7 13 Feb 2024 M1 MIT Yes Details →
484.v8a_a_e4b_d785fd 13 Feb 2024 M1 MIT Yes Details →
552.v14cb_85499b_89 13 Feb 2024 M1 MIT Yes Details →
483.v17281966f5c3 13 Feb 2024 M1 MIT Yes Details →
625.vb_00565139872 13 Feb 2024 none MIT — Details →
587.588.v850a_20a_30162 13 Feb 2024 none MIT — Details →
555.v8d194cc85b_30 13 Feb 2024 M1 MIT Yes Details →
1.1.2 13 Feb 2024 H1 M2 — Yes Details →
488.v0634ce149b_8c 13 Feb 2024 M1 MIT Yes Details →
689.v731678c3e0eb_ 13 Feb 2024 none MIT — Details →
508.v2a_f05b_05e9d8 13 Feb 2024 M1 MIT Yes Details →
623.vd82f51a_21937 13 Feb 2024 none MIT — Details →
2.8.1 13 Feb 2024 M2 MIT Yes Details →
627.ve8b_b_4c71293b_ 13 Feb 2024 none MIT — Details →
501.v88fe53d65c80 13 Feb 2024 M1 MIT Yes Details →
657.v398b_8a_279c49 13 Feb 2024 none MIT — Details →
2.13 13 Feb 2024 H1 M2 MIT Yes Details →
530.ved5445d4875a_ 13 Feb 2024 M1 MIT Yes Details →
2.16 13 Feb 2024 H1 M2 MIT Yes Details →
2.6.1 13 Feb 2024 M2 MIT Yes Details →
2.1.0 13 Feb 2024 H1 M2 MIT Yes Details →
665.v4d4f871dc768 13 Feb 2024 none MIT — Details →
1.1.3 13 Feb 2024 H1 M2 — Yes Details →
2.6.0 13 Feb 2024 M2 MIT Yes Details →
569.v7476f8e4fe29 13 Feb 2024 M1 MIT Yes Details →
667.vd7f94d9fddf9 13 Feb 2024 none MIT — Details →

All 87 versions Vulert tracks for this package. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

  • 2022 3
  • 2023 1

Counted by the year Vulert recorded each vulnerability — the same date the table below shows as disclosed. 0 of the 4 were recorded in the last 12 months.

03 Vulnerabilities

Recorded vulnerabilities for org.jenkins-ci.plugins:role-strategy

The 4 most severe of 4 vulnerabilities recorded for this package

Search all 4 in the database →
Vulnerability Severity Fixed version ↓ Disclosed ↓
CVE-2020-2286: Improper authorization due to caching in Jenkins Role-based Authorization Strategy Plugin 8.8 high 3.1 24 May 2022
CVE-2017-1000090: CSRF vulnerability in Jenkins Role-based Authorization Strategy Plugin configuration 8.8 high 2.5.1 17 May 2022
CVE-2023-28668: Jenkins Role-based Authorization Strategy Plugin Grants Permissions Even After They've Been Disabled 5.9 medium 587.588.v850a_20a_30162 02 Apr 2023
CVE-2021-21624: Incorrect permission checks in Jenkins Role-based Authorization Strategy Plugin may allow accessing some items 4.3 medium 3.1.1 24 May 2022

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About org.jenkins-ci.plugins:role-strategy

Is org.jenkins-ci.plugins:role-strategy safe to use?

Vulert records 4 vulnerabilities for org.jenkins-ci.plugins:role-strategy in Maven: 0 critical, 2 high, 2 medium and 0 low. Every one of them has a published fix, so the practical answer is to run a supported release and keep it patched.

What is org.jenkins-ci.plugins:role-strategy's Vulert package health score?

Vulert scores org.jenkins-ci.plugins:role-strategy 78/100, which reads as in good shape. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).

Is the latest version of org.jenkins-ci.plugins:role-strategy affected?

No. 928.vc60b_edb_fea_e1, the version you would install today, has no vulnerabilities on record against it. Earlier releases do — the version table above lists each release with what affects it.

How many vulnerabilities does org.jenkins-ci.plugins:role-strategy have?

4 vulnerabilities are recorded for org.jenkins-ci.plugins:role-strategy in the Maven ecosystem: 0 critical, 2 high, 2 medium and 0 low. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new org.jenkins-ci.plugins:role-strategy vulnerabilities disclosed?

0 vulnerabilities were recorded for org.jenkins-ci.plugins:role-strategy in the last 12 months, and the oldest entry in this database dates to 17 May 2022. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of org.jenkins-ci.plugins:role-strategy are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor org.jenkins-ci.plugins:role-strategy for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the org.jenkins-ci.plugins:role-strategy version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.