Jenkins 多插件安全公告：权限缺失/反序列化/XSS等漏洞修复
Security AdvisorySA-CORE-2026-04-29HighJenkins
Affected:
- Script Security Plugin <= 1399.ve6a_6654776e1
- Credentials Binding Plugin <= 719.v80e905ef14eb_
- Matrix Authorization Strategy Plugin 2.0-beta-1 to 3.2.9
- GitHub Branch Source Plugin <= 1967.vdea_d580c1a_b_a_
- GitHub Plugin <= 1.46.0
Fixed in:
- Script Security Plugin >= 1402.v94c9ce464861
- Credentials Binding Plugin >= 720.v3f6dcef43ea_
- Matrix Authorization Strategy Plugin >= 3.2.10
- GitHub Branch Source Plugin >= 1967.1969.v205fd594c821
- GitHub Plugin >= 1.46.0.1
Referenced CVEs: CVE-2026-42522
本文由本平台从 www.jenkins.io 自动抓取，经 LLM 流水线清洗、双语翻译。版权归原作者。查看原文。