Product
jenkins credentials binding
8 known vulnerabilities across versions
Vulnerabilities are listed by affected version. Select any CVE for the full briefing and its intelligence graph.
CVE-2026-48922
CVE-2026-42520
CVE-2025-53650
CVE-2022-20616
CVE-2020-2182
CVE-2020-2181
CVE-2019-1010241
CVE-2018-1000057
< 725.ve52b_2328a_fde
Jenkins Credentials Binding Plugin 720.v3f6decef43ea_ and earlier does not properly sanitize file names for file and zip file cred
<= 719.v80e905ef14eb
Jenkins Credentials Binding Plugin 719.v80e905ef14eb_ and earlier does not sanitize file names for file and zip file credentials,
<= 687.689.v1a_f775332fc
Jenkins Credentials Binding Plugin 687.v619cb_15e923f and earlier does not properly mask (i.e., replace with asterisks) credential
<= 1.27
Jenkins Credentials Binding Plugin 1.27 and earlier does not perform a permission check in a method implementing form validation,
<= 1.22
Jenkins Credentials Binding Plugin 1.22 and earlier does not mask (i.e., replace with asterisks) secrets containing a
$ characte<= 1.22
Jenkins Credentials Binding Plugin 1.22 and earlier does not mask (i.e., replace with asterisks) secrets in the build log when the
all versions
Jenkins Credentials Binding Plugin Jenkins 1.17 is affected by: CWE-257: Storing Passwords in a Recoverable Format. The impact is:
<= 1.14
Jenkins Credentials Binding Plugin 1.14 and earlier masks passwords it provides to build processes in their build logs. Jenkins ho