Maven io.jenkins.plugins:pipeline-groovy-lib

Name: Maven io.jenkins.plugins:pipeline-groovy-lib
Brand: Maven

productUS

pkg:maven/io.jenkins.plugins/pipeline-groovy-lib

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

unpatched

by severity

2critical0high0medium0low

updated 2026-10-28

vulnerabilities (5)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2022-43405US	critical9.9	1.47% (74th)	—	613.v9c41a_160233f	2022-10-19	< 613.v9c41a_160233f
CVE-2022-43406US	critical9.9	1.39% (72nd)	—	613.v9c41a_160233f	2022-10-19	< 613.v9c41a_160233f
CVE-2026-57284US	—	0.34% (27th)	—	4331.4333	2026-06-24	< 4331.4333
CVE-2026-48921US	—	0.29% (21st)	—	798.v5cc688825312	2026-05-27	< 798.v5cc688825312
CVE-2026-57283US	—	0.24% (15th)	—	4331.4333	2026-06-24	< 4331.4333

The flaw types (CWEs) most of these CVEs share.

CWE-693Protection Mechanism Failure2 CVEs
CWE-352Cross-Site Request Forgery (CSRF)1 CVEs
CWE-470Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')1 CVEs
CWE-59Improper Link Resolution Before File Access ('Link Following')1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.