VulertSecurity VulertSecurity

Vulnerability Database · Maven · Package report

org.jenkins-ci.plugins:script-security: vulnerability history, versions and safety

org.jenkins-ci.plugins:script-security is a package in the Maven ecosystem. Vulert records 35 vulnerabilities for it across 113 releases, from May 2022 to Jun 2026. Each vulnerability names the versions it affects, the fixed version to move to, and a workaround where no fix has been published.

i
35 vulnerabilities recorded C5 H20 M10
i
0 with no fix published

Every vulnerability has a patched version to move to.

i
3 in the last 12 months

Most recent disclosure 24 Jun 2026.

See the disclosure history →
i
0 malicious-package vulnerabilities

No published version shipped hostile code.

See all org.jenkins-ci.plugins:script-security vulnerabilities

Vulert verdict on org.jenkins-ci.plugins:script-security 1436.v1082791135e4 i

Updated on 23 Oct 2026

Good news: 1436.v1082791135e4, the version you would install today, has no known vulnerabilities. Older releases do — the table below lists all 35.

Package health score 63/100
  • Security Some issues to review
  • Maintenance Sustainable
  • Popularity Little adoption
  • Community Moderate

What to do: Stay on 1436.v1082791135e4 or newer. This can change: a vulnerability disclosed tomorrow can affect 1436.v1082791135e4 too — Vulert watches the package and alerts you if that happens. Monitor it with Vulert →

  • Current release 1436.v1082791135e4 — unaffected i
  • Vulnerabilities on record 35 over 4 years · 3 in the last year i
  • Latest disclosure 24 Jun 2026 i
  • Highest CVSS 9.9 i
  • With no published fix 0 i
  • Stars 77 i
  • Last release this month i
  • Licence MIT i

Version list, release dates, licence and dependants published by Maven Central, refreshed 22 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Versions

Which versions are affected

Every version Vulert tracks for org.jenkins-ci.plugins:script-security, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

i
Version Released Vulert vulnerabilities Licence Fix published Details
1436.v1082791135e4 14 Oct 2026 none MIT — Details →
1433.v17c58a_e45cc1 06 Oct 2026 none MIT — Details →
1429.v0810f1b_530f5 17 Sep 2026 none MIT — Details →
1422.v06869826dd9b_ 09 Sep 2026 none MIT — Details →
1415.v9a_f9b_3a_c253d 28 Aug 2026 none MIT — Details →
1412.v7737b_3405f86 07 Aug 2026 none MIT — Details →
1402.1405.vc96e74964250 16 Jun 2026 none MIT — Details →
1402.v94c9ce464861 22 Apr 2026 H2 MIT Yes Details →
1399.ve6a_66547f6e1 04 Feb 2026 H2 M1 MIT Yes Details →
1385.v7d2d9ec4d909 27 Oct 2025 H2 M1 MIT Yes Details →
1378.vf25626395f49 30 Jul 2025 H2 M1 MIT Yes Details →
1373.vb_b_4a_a_c26fa_00 10 Feb 2025 H2 M1 MIT Yes Details →
1369.v9b_98a_4e95b_2d 13 Nov 2024 H2 M1 MIT Yes Details →
1365.1367.va_3b_b_89f8a_95b_ 04 Nov 2024 H2 M2 MIT Yes Details →
1362.1364.v4cf2dc5d8776 04 Nov 2024 H2 M2 MIT Yes Details →
1368.vb_b_402e3547e7 04 Nov 2024 H2 M1 MIT Yes Details →
1367.vdf2fc45f229c 29 Oct 2024 H2 M2 MIT Yes Details →
1366.vd44b_49a_5c85c 25 Oct 2024 H2 M2 MIT Yes Details →
1365.v4778ca_84b_de5 14 Oct 2024 H2 M2 MIT Yes Details →
1362.v67dc1f0e1b_b_3 16 Sep 2024 H2 M2 MIT Yes Details →
1361.v913100720139 11 Sep 2024 H2 M2 MIT Yes Details →
1358.vb_26663c13537 03 Sep 2024 H2 M2 MIT Yes Details →
1354.va_70a_fe478c7f 13 Aug 2024 H2 M2 MIT Yes Details →
1341.va_2819b_414686 30 May 2024 H2 M2 MIT Yes Details →
1336.vf33a_a_9863911 09 May 2024 H2 M2 MIT Yes Details →
1335.vf07d9ce377a_e 08 Apr 2024 H4 M2 MIT Yes Details →
1326.vdb_c154de8669 14 Feb 2024 H4 M2 MIT Yes Details →
1.2 13 Feb 2024 C4 H20 M10 MIT Yes Details →
1.54.3 13 Feb 2024 C3 H13 M8 MIT Yes Details →
1.49 13 Feb 2024 C4 H16 M8 MIT Yes Details →
1.71 13 Feb 2024 C2 H8 M4 MIT Yes Details →
1140.vf967fb_efa_55a_ 13 Feb 2024 C1 H8 M3 MIT Yes Details →
1190.v65867a_a_47126 13 Feb 2024 H5 M2 MIT Yes Details →
1244.ve463715a_f89c 13 Feb 2024 H4 M2 MIT Yes Details →
1275.v23895f409fb_d 13 Feb 2024 H4 M2 MIT Yes Details →
1.44 13 Feb 2024 C4 H17 M8 MIT Yes Details →
1.50 13 Feb 2024 C4 H15 M8 MIT Yes Details →
1.7 13 Feb 2024 C4 H20 M10 MIT Yes Details →
1.53 13 Feb 2024 C4 H13 M8 MIT Yes Details →
1.54.4 13 Feb 2024 C3 H13 M8 MIT Yes Details →
1.70 13 Feb 2024 C2 H9 M4 MIT Yes Details →
1175.1179.vea_f7532629e1 13 Feb 2024 C1 H8 M2 MIT Yes Details →
1271.vdede89739a_81 13 Feb 2024 H4 M2 MIT Yes Details →
1.15 13 Feb 2024 C4 H19 M10 MIT Yes Details →
1.36 13 Feb 2024 C4 H17 M9 MIT Yes Details →
1.38 13 Feb 2024 C4 H17 M8 MIT Yes Details →
1.54 13 Feb 2024 C3 H13 M8 MIT Yes Details →
1.57.4 13 Feb 2024 C2 H13 M8 MIT Yes Details →
1.67 13 Feb 2024 C2 H11 M4 MIT Yes Details →
1145.1148.vf6d17a_a_a_eef6 13 Feb 2024 C1 H8 M3 MIT Yes Details →
1172.v35f6a_0b_8207e 13 Feb 2024 C1 H8 M2 MIT Yes Details →
1269.v639888f5e366 13 Feb 2024 H4 M2 MIT Yes Details →
1.13 13 Feb 2024 C4 H19 M10 MIT Yes Details →
1.5 13 Feb 2024 C4 H20 M10 MIT Yes Details →
1.57.6 13 Feb 2024 C2 H13 M8 MIT Yes Details →
1.9 13 Feb 2024 C4 H19 M10 MIT Yes Details →
1175.v4b_d517d6db_f0 13 Feb 2024 C1 H8 M2 MIT Yes Details →
1.0-beta-6 13 Feb 2024 C4 H20 M10 MIT Yes Details →
1.10 13 Feb 2024 C4 H19 M10 MIT Yes Details →
1.37 13 Feb 2024 C4 H17 M8 MIT Yes Details →
1.48 13 Feb 2024 C4 H16 M8 MIT Yes Details →
1.54.2 13 Feb 2024 C3 H13 M8 MIT Yes Details →
1.75 13 Feb 2024 C1 H8 M3 MIT Yes Details →
1.46.1 13 Feb 2024 C4 H17 M8 MIT Yes Details →
1.57 13 Feb 2024 C2 H13 M8 MIT Yes Details →
1.66.5 13 Feb 2024 C1 H11 M4 MIT Yes Details →
1.72 13 Feb 2024 C2 H8 M4 MIT Yes Details →
1.74 13 Feb 2024 C2 H8 M3 MIT Yes Details →
1118.vba21ca2e3286 13 Feb 2024 C1 H8 M3 MIT Yes Details →
1321.va_73c0795b_923 13 Feb 2024 H4 M2 MIT Yes Details →
1.16 13 Feb 2024 C4 H19 M10 MIT Yes Details →
1.21 13 Feb 2024 C4 H18 M10 MIT Yes Details →
1.4 13 Feb 2024 C4 H20 M10 MIT Yes Details →
1.51 13 Feb 2024 C4 H14 M8 MIT Yes Details →
1.52 13 Feb 2024 C4 H14 M8 MIT Yes Details →
1.57.3 13 Feb 2024 C2 H13 M8 MIT Yes Details →
1.6 13 Feb 2024 C4 H20 M10 MIT Yes Details →
1.73 13 Feb 2024 C2 H8 M3 MIT Yes Details →
1273.v66c1964f0dfd 13 Feb 2024 H4 M2 MIT Yes Details →
1.0-beta-5 13 Feb 2024 C4 H20 M10 MIT Yes Details →
1.12 13 Feb 2024 C4 H19 M10 MIT Yes Details →
1.30 13 Feb 2024 C4 H18 M9 MIT Yes Details →
1.46 13 Feb 2024 C4 H17 M8 MIT Yes Details →
1.54.1 13 Feb 2024 C3 H13 M8 MIT Yes Details →
1.68 13 Feb 2024 C2 H10 M4 MIT Yes Details →
1146.vdf547f19a_473 13 Feb 2024 C1 H8 M3 MIT Yes Details →
1281.v22fb_899df1a_e 13 Feb 2024 H4 M2 MIT Yes Details →
1294.v99333c047434 13 Feb 2024 H4 M2 MIT Yes Details →
1310.vf24a_dfce068b_ 13 Feb 2024 H4 M2 MIT Yes Details →
1.0-beta-3 13 Feb 2024 C4 H20 M10 MIT Yes Details →
1.20 13 Feb 2024 C4 H18 M10 MIT Yes Details →
1.39 13 Feb 2024 C4 H17 M8 MIT Yes Details →
1.41 13 Feb 2024 C4 H17 M8 MIT Yes Details →
1.61 13 Feb 2024 C2 H13 M8 MIT Yes Details →
1.66.2 13 Feb 2024 C1 H11 M4 MIT Yes Details →
1138.v8e727069a_025 13 Feb 2024 C1 H8 M3 MIT Yes Details →
1251.1253.v4e638b_e3b_221 13 Feb 2024 H4 M2 MIT Yes Details →
1301.v0079b_cd0cdfa_ 13 Feb 2024 H4 M2 MIT Yes Details →
1.0 13 Feb 2024 C4 H20 M10 MIT Yes Details →
1.27 13 Feb 2024 C4 H18 M10 MIT Yes Details →
1.45 13 Feb 2024 C4 H17 M8 — Yes Details →
1.56 13 Feb 2024 C2 H13 M8 — Yes Details →
1.57.5 13 Feb 2024 C2 H13 M8 — Yes Details →
1228.vd93135a_2fb_25 13 Feb 2024 H5 M2 — Yes Details →
1229.v4880b_b_e905a_6 13 Feb 2024 H4 M2 — Yes Details →
1.0-beta-1 13 Feb 2024 C4 H20 M10 — Yes Details →
1.17 13 Feb 2024 C4 H19 M10 — Yes Details →
1.22 13 Feb 2024 C4 H18 M10 — Yes Details →
1131.v8b_b_5eda_c328e 13 Feb 2024 C1 H8 M3 — Yes Details →
1158.v7c1b_73a_69a_08 13 Feb 2024 C1 H8 M3 — Yes Details →
1.43 13 Feb 2024 C4 H17 M8 — Yes Details →
1.66.3 13 Feb 2024 C1 H11 M4 — Yes Details →
1.78 13 Feb 2024 C1 H8 M3 — Yes Details →
1209.v50b_005db_19db 13 Feb 2024 H5 M2 — Yes Details →
1.1 13 Feb 2024 C4 H20 M10 — Yes Details →
1.62 13 Feb 2024 C2 H11 M8 — Yes Details →
1.66 13 Feb 2024 C1 H11 M4 — Yes Details →
1.23 13 Feb 2024 C4 H18 M10 — Yes Details →
1.25 13 Feb 2024 C4 H18 M10 — Yes Details →
1.34 13 Feb 2024 C4 H17 M9 — Yes Details →

The newest 120 of 172 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

  • 2022 28
  • 2023 1
  • 2024 3
  • 2026 3

Counted by the year Vulert recorded each vulnerability — the same date the table below shows as disclosed. 3 of the 35 were recorded in the last 12 months.

03 Vulnerabilities

Recorded vulnerabilities for org.jenkins-ci.plugins:script-security

The 5 most severe of 35 vulnerabilities recorded for this package

Search all 35 in the database →
Vulnerability Severity Fixed version ↓ Disclosed ↓
CVE-2019-1003029: Sandbox bypass in Script Security Plugin 9.9 critical 1.54 13 May 2022
CVE-2020-2279: Sandbox bypass vulnerability in Jenkins Script Security Plugin 9.9 critical 1.75 24 May 2022
CVE-2019-10431: Improper Control of Generation of Code in Jenkins Script Security Plugin 9.9 critical 1.65 24 May 2022
CVE-2022-43403: Jenkins Script Security Plugin sandbox bypass vulnerability 9.9 critical 1184.v85d16b_d851b_3 19 Oct 2022
CVE-2019-1003040: Sandbox bypass vulnerability in Jenkins Script Security Plugin 9.8 critical 1.56 13 May 2022

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About org.jenkins-ci.plugins:script-security

Is org.jenkins-ci.plugins:script-security safe to use?

Vulert records 35 vulnerabilities for org.jenkins-ci.plugins:script-security in Maven: 5 critical, 20 high, 10 medium and 0 low. Every one of them has a published fix, so the practical answer is to run a supported release and keep it patched.

What is org.jenkins-ci.plugins:script-security's Vulert package health score?

Vulert scores org.jenkins-ci.plugins:script-security 63/100, which reads as usable, but worth attention. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).

Is the latest version of org.jenkins-ci.plugins:script-security affected?

No. 1436.v1082791135e4, the version you would install today, has no vulnerabilities on record against it. Earlier releases do — the version table above lists each release with what affects it.

How many vulnerabilities does org.jenkins-ci.plugins:script-security have?

35 vulnerabilities are recorded for org.jenkins-ci.plugins:script-security in the Maven ecosystem: 5 critical, 20 high, 10 medium and 0 low. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new org.jenkins-ci.plugins:script-security vulnerabilities disclosed?

3 vulnerabilities were recorded for org.jenkins-ci.plugins:script-security in the last 12 months, and the oldest entry in this database dates to 13 May 2022. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of org.jenkins-ci.plugins:script-security are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor org.jenkins-ci.plugins:script-security for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the org.jenkins-ci.plugins:script-security version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.