Jenkins多插件安全公告：含RCE/XSS/反序列化漏洞(CVE-2026-42519至42525)
Security AdvisoryHighJenkins
Affected:
- Credentials Binding Plugin < 720.v3f6dedef43ea_
- GitHub Plugin <= 1.46.0
- GitHub Branch Source Plugin < 1967.1969.v205fd594c821
- HTML Publisher Plugin <= 427
- Matrix Authorization Strategy Plugin >= 2.0-beta-1 AND <= 3.2.9
Fixed in:
- Credentials Binding Plugin 720.v3f6dedef43ea_
- GitHub Plugin 1.46.0.1
- GitHub Branch Source Plugin 1967.1969.v205fd594c821
- HTML Publisher Plugin 427.1
- Matrix Authorization Strategy Plugin 3.2.10
Referenced CVEs: CVE-2026-42523
本文由本平台从 www.jenkins.io 自动抓取，经 LLM 流水线清洗、双语翻译。版权归原作者。查看原文。