warnings.json

[
  {
    "id": "SECURITY-208",
    "type": "plugin",
    "name": "google-login",
    "message": "Authentication bypass vulnerability",
    "url": "https://jenkins.io/security/advisory/2015-10-12/",
    "versions": [
      {
        "lastVersion": "1.1",
        "pattern": "1[.][01](|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-136",
    "type": "plugin",
    "name": "extra-columns",
    "message": "Stored XSS vulnerability",
    "url": "https://jenkins.io/security/advisory/2016-04-11/",
    "versions": [
      {
        "lastVersion": "1.16",
        "pattern": "1[.](\\d|1[0123456])(|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-258",
    "type": "plugin",
    "name": "script-security",
    "message": "Groovy sandbox protection incomplete",
    "url": "https://jenkins.io/security/advisory/2016-04-11/",
    "versions": [
      {
        "lastVersion": "1.18",
        "pattern": "1[.](\\d|1[012345678])(|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-278",
    "type": "plugin",
    "name": "image-gallery",
    "message": "Path traversal vulnerability",
    "url": "https://jenkins.io/security/advisory/2016-06-20/",
    "versions": [
      {
        "lastVersion": "1.3",
        "pattern": "(0[.].*|1[.][0123])(|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-290",
    "type": "plugin",
    "name": "build-failure-analyzer",
    "message": "Cross-site scripting vulnerability",
    "url": "https://jenkins.io/security/advisory/2016-06-20/",
    "versions": [
      {
        "lastVersion": "1.15.0",
        "pattern": "1[.](\\d|1[012345])[.]\\d+(|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-305",
    "type": "plugin",
    "name": "async-http-client",
    "message": "Improper certificate validation",
    "url": "https://jenkins.io/security/advisory/2016-06-20/",
    "versions": [
      {
        "lastVersion": "1.7.24",
        "pattern": "1[.]7[.](\\d(|[.-].*)|24)"
      }
    ]
  },
  {
    "id": "SECURITY-85",
    "type": "plugin",
    "name": "tap",
    "message": "Path traversal vulnerability",
    "url": "https://jenkins.io/security/advisory/2016-06-20/",
    "versions": [
      {
        "lastVersion": "1.24",
        "pattern": "1[.](\\d|1\\d|2[01234])(|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-309",
    "type": "plugin",
    "name": "cucumber-reports",
    "message": "Plugin disables Content-Security-Policy for files served by Jenkins",
    "url": "https://jenkins.io/security/advisory/2016-07-27/",
    "versions": [
      {
        "firstVersion": "1.3.0",
        "lastVersion": "2.5.1",
        "pattern": "(1[.][34]|2[.][012345])(|[.-].*)"
      }
    ]
  },
  {
    "id": "core-2_44",
    "type": "core",
    "name": "core",
    "message": "Multiple security vulnerabilities in Jenkins 2.43 and earlier, and LTS 2.32.1 and earlier",
    "url": "https://jenkins.io/security/advisory/2017-02-01/",
    "versions": [
      {
        "lastVersion": "2.43",
        "pattern": "(1[.].*|2[.]\\d|2[.][123]\\d|2[.]4[0123])(|[-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-441",
    "type": "plugin",
    "name": "pipeline-maven",
    "message": "Arbitrary files from Jenkins controller available in Pipeline by using the withMaven step",
    "url": "https://jenkins.io/security/advisory/2017-03-09/",
    "versions": [
      {
        "lastVersion": "0.6",
        "pattern": "0[.][123456](|[.-].*)"
      },
      {
        "lastVersion": "2.0-beta-5",
        "pattern": "2[.]0[-]beta[-][345](|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-161",
    "type": "plugin",
    "name": "ssh-slaves",
    "message": "Man-in-the-middle vulnerability due to missing host key verification",
    "url": "https://jenkins.io/security/advisory/2017-03-20/",
    "versions": [
      {
        "lastVersion": "1.14",
        "pattern": "0[.].*|1[.][0-9](|[.-].*)|1[.]1[01234](|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-251",
    "type": "plugin",
    "name": "active-directory",
    "message": "Man-in-the-middle vulnerability due to missing certificate check",
    "url": "https://jenkins.io/security/advisory/2017-03-20/",
    "versions": [
      {
        "lastVersion": "2.2",
        "pattern": "1[.].*|2[.][012](|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-336",
    "type": "plugin",
    "name": "pipeline-classpath",
    "message": "Script Security sandbox bypass",
    "url": "https://jenkins.io/security/advisory/2017-03-20/",
    "versions": [
      {
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-372-email-ext",
    "type": "plugin",
    "name": "email-ext",
    "message": "Email notifications could be sent to people who are not users of Jenkins",
    "url": "https://jenkins.io/security/advisory/2017-03-20/",
    "versions": [
      {
        "lastVersion": "2.57",
        "pattern": "2[.]([0-9]|[1234][0-9]|5[0123456])(|[.-].*)|2.57(|[-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-372-mailer",
    "type": "plugin",
    "name": "mailer",
    "message": "Email notifications could be sent to people who are not users of Jenkins",
    "url": "https://jenkins.io/security/advisory/2017-03-20/",
    "versions": [
      {
        "lastVersion": "1.19",
        "pattern": "1[.]([0-9]|1[0-9])(|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-386",
    "type": "plugin",
    "name": "distfork",
    "message": "Missing permission checks allowed shell access to anonymous users",
    "url": "https://jenkins.io/security/advisory/2017-03-20/",
    "versions": [
      {
        "lastVersion": "1.5.0",
        "pattern": "1[.][012345](|[.-].*)"
      }
    ]
  },
  {
    "id": "JENKINS-15212",
    "type": "plugin",
    "name": "groovy-postbuild",
    "message": "Arbitrary code execution vulnerability",
    "url": "https://jenkins.io/security/advisory/2017-04-10/",
    "versions": [
      {
        "lastVersion": "1.10",
        "pattern": "1[.].*"
      }
    ]
  },
  {
    "id": "JENKINS-27535",
    "type": "plugin",
    "name": "groovy-label-assignment",
    "message": "Arbitrary code execution vulnerability",
    "url": "https://jenkins.io/security/advisory/2017-04-10/",
    "versions": [
      {
        "lastVersion": "1.1.1",
        "pattern": "1[.][01](|[.-].*)"
      }
    ]
  },
  {
    "id": "JENKINS-28732",
    "type": "plugin",
    "name": "uno-choice",
    "message": "Arbitrary code execution vulnerability",
    "url": "https://jenkins.io/security/advisory/2017-04-10/",
    "versions": [
      {
        "lastVersion": "1.4",
        "pattern": "1[.][01234](|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-123",
    "type": "plugin",
    "name": "extensible-choice-parameter",
    "message": "Arbitrary code execution vulnerability",
    "url": "https://jenkins.io/security/advisory/2017-04-10/",
    "versions": [
      {
        "lastVersion": "1.3.4",
        "pattern": "1[.][0123](|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-176",
    "type": "plugin",
    "name": "integrity-plugin",
    "message": "Arbitrary code execution vulnerability",
    "url": "https://jenkins.io/security/advisory/2017-04-10/",
    "versions": [
      {
        "lastVersion": "2.0.2",
        "pattern": "1[.].*|2[.](0)[.].*"
      }
    ]
  },
  {
    "id": "SECURITY-187",
    "type": "plugin",
    "name": "extended-choice-parameter",
    "message": "Arbitrary code execution vulnerability",
    "url": "https://jenkins.io/security/advisory/2017-04-10/",
    "versions": [
      {
        "lastVersion": "0.61",
        "pattern": "0[.]([12345]|[12345][0-9]|61)(|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-256",
    "type": "plugin",
    "name": "envinject",
    "message": "Arbitrary code execution vulnerability",
    "url": "https://jenkins.io/security/advisory/2017-04-10/",
    "versions": [
      {
        "lastVersion": "1.93.1",
        "pattern": "[01][.].*"
      }
    ]
  },
  {
    "id": "SECURITY-257",
    "type": "plugin",
    "name": "email-ext",
    "message": "Arbitrary code execution vulnerability",
    "url": "https://jenkins.io/security/advisory/2017-04-10/",
    "versions": [
      {
        "lastVersion": "2.57.1",
        "pattern": "2[.]([0-9]|[1234][0-9]|5[0123456])(|[.-].*)|2.57(|[-].*)|2.57.1(|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-292",
    "type": "plugin",
    "name": "groovy",
    "message": "Arbitrary code execution vulnerability",
    "url": "https://jenkins.io/security/advisory/2017-04-10/",
    "versions": [
      {
        "lastVersion": "1.31",
        "pattern": "1[.].*"
      }
    ]
  },
  {
    "id": "SECURITY-293",
    "type": "plugin",
    "name": "build-flow-plugin",
    "message": "Arbitrary code execution vulnerability",
    "url": "https://jenkins.io/security/advisory/2017-04-10/",
    "versions": [
      {
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-294",
    "type": "plugin",
    "name": "artifactdeployer",
    "message": "Arbitrary code execution vulnerability",
    "url": "https://jenkins.io/security/advisory/2017-04-10/",
    "versions": [
      {
        "lastVersion": "0.33",
        "pattern": "0[.].*"
      }
    ]
  },
  {
    "id": "SECURITY-295",
    "type": "plugin",
    "name": "postbuildscript",
    "message": "Arbitrary code execution vulnerability",
    "url": "https://jenkins.io/security/advisory/2017-04-10/",
    "versions": [
      {
        "lastVersion": "0.17",
        "pattern": "0[.]([0-9]|1[0-7])"
      }
    ]
  },
  {
    "id": "SECURITY-298",
    "type": "plugin",
    "name": "svn-tag",
    "message": "Arbitrary code execution vulnerability",
    "url": "https://jenkins.io/security/advisory/2017-04-10/",
    "versions": [
      {
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-333",
    "type": "plugin",
    "name": "scriptler",
    "message": "Persistent cross-site scripting vulnerability",
    "url": "https://jenkins.io/security/advisory/2017-04-10/",
    "versions": [
      {
        "lastVersion": "2.9",
        "pattern": "[12](|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-334",
    "type": "plugin",
    "name": "scriptler",
    "message": "Cross-site request forgery vulnerabilities in Scriptler script management",
    "url": "https://jenkins.io/security/advisory/2017-04-10/",
    "versions": [
      {
        "lastVersion": "2.9",
        "pattern": "[12](|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-348",
    "type": "plugin",
    "name": "envinject",
    "message": "Low privilege users are able to read parts of some files on Jenkins controller",
    "url": "https://jenkins.io/security/advisory/2017-04-10/",
    "versions": [
      {
        "lastVersion": "1.93.1",
        "pattern": "[01][.].*"
      }
    ]
  },
  {
    "id": "SECURITY-363",
    "type": "plugin",
    "name": "job-dsl",
    "message": "Permission check bypass for access and modification of Jenkins model objects",
    "url": "https://jenkins.io/security/advisory/2017-04-10/",
    "versions": [
      {
        "lastVersion": "1.59",
        "pattern": "1[.][0-9](|[.-].*)|1[.][12345][0-9](|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-365",
    "type": "plugin",
    "name": "scriptler",
    "message": "Any user can add Scriptler scripts to build configurations",
    "url": "https://jenkins.io/security/advisory/2017-04-10/",
    "versions": [
      {
        "lastVersion": "2.9",
        "pattern": "[12](|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-366",
    "type": "plugin",
    "name": "scriptler",
    "message": "Any Scriptler script can be executed as part of builds",
    "url": "https://jenkins.io/security/advisory/2017-04-10/",
    "versions": [
      {
        "lastVersion": "2.9",
        "pattern": "[12](|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-368",
    "type": "plugin",
    "name": "lockable-resources",
    "message": "Arbitrary code execution vulnerability",
    "url": "https://jenkins.io/security/advisory/2017-04-10/",
    "versions": [
      {
        "lastVersion": "1.11.2",
        "pattern": "1[.].*(|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-369",
    "type": "plugin",
    "name": "job-dsl",
    "message": "Arbitrary code execution vulnerability",
    "url": "https://jenkins.io/security/advisory/2017-04-10/",
    "versions": [
      {
        "lastVersion": "1.59",
        "pattern": "1[.][0-9](|[.-].*)|1[.][12345][0-9](|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-379",
    "type": "plugin",
    "name": "tcl",
    "message": "Arbitrary code execution vulnerability",
    "url": "https://jenkins.io/security/advisory/2017-04-10/",
    "versions": [
      {
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-405",
    "type": "plugin",
    "name": "warnings",
    "message": "Arbitrary code execution vulnerability",
    "url": "https://jenkins.io/security/advisory/2017-04-10/",
    "versions": [
      {
        "lastVersion": "4.60",
        "pattern": "[123][.].*|4[.]([0-9]|[12345][0-9]|60)(|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-410-matrix-auth",
    "type": "plugin",
    "name": "matrix-auth",
    "message": "Dangerous permissions can be configured independently of Administer permission",
    "url": "https://jenkins.io/security/advisory/2017-04-10/",
    "versions": [
      {
        "lastVersion": "1.4",
        "pattern": "1[.][01234](|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-410-role-strategy",
    "type": "plugin",
    "name": "role-strategy",
    "message": "Dangerous permissions can be configured independently of Administer permission",
    "url": "https://jenkins.io/security/advisory/2017-04-10/",
    "versions": [
      {
        "lastVersion": "2.3.2",
        "pattern": "1[.].*|2[.][0123](|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-456",
    "type": "plugin",
    "name": "scripttrigger",
    "message": "Arbitrary code execution vulnerability",
    "url": "https://jenkins.io/security/advisory/2017-04-10/",
    "versions": [
      {
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-457",
    "type": "plugin",
    "name": "AdaptivePlugin",
    "message": "Arbitrary code execution vulnerability",
    "url": "https://jenkins.io/security/advisory/2017-04-10/",
    "versions": [
      {
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-458",
    "type": "plugin",
    "name": "grails",
    "message": "Arbitrary code execution vulnerability",
    "url": "https://jenkins.io/security/advisory/2017-04-10/",
    "versions": [
      {
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-459",
    "type": "plugin",
    "name": "cvs-tag",
    "message": "Arbitrary code execution vulnerability",
    "url": "https://jenkins.io/security/advisory/2017-04-10/",
    "versions": [
      {
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-460",
    "type": "plugin",
    "name": "groovyaxis",
    "message": "Arbitrary code execution vulnerability",
    "url": "https://jenkins.io/security/advisory/2017-04-10/",
    "versions": [
      {
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-461",
    "type": "plugin",
    "name": "script-scm",
    "message": "Arbitrary code execution vulnerability",
    "url": "https://jenkins.io/security/advisory/2017-04-10/",
    "versions": [
      {
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-462",
    "type": "plugin",
    "name": "dynamicparameter",
    "message": "Arbitrary code execution vulnerability",
    "url": "https://jenkins.io/security/advisory/2017-04-10/",
    "versions": [
      {
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-464",
    "type": "plugin",
    "name": "youtrack-plugin",
    "message": "Arbitrary code execution vulnerability",
    "url": "https://jenkins.io/security/advisory/2017-04-10/",
    "versions": [
      {
        "lastVersion": "0.6.6",
        "pattern": "0[.][0123456][.]\\d+(|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-487",
    "type": "plugin",
    "name": "reactor-plugin",
    "message": "Arbitrary code execution vulnerability",
    "url": "https://jenkins.io/security/advisory/2017-04-10/",
    "versions": [
      {
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-488",
    "type": "plugin",
    "name": "cas-plugin",
    "message": "Arbitrary code execution vulnerability",
    "url": "https://jenkins.io/security/advisory/2017-04-10/",
    "versions": [
      {
        "lastVersion": "1.3.0",
        "pattern": "1[.][0123][.]\\d+(|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-489",
    "type": "plugin",
    "name": "proc-cleaner-plugin",
    "message": "Arbitrary code execution vulnerability",
    "url": "https://jenkins.io/security/advisory/2017-04-10/",
    "versions": [
      {
        "lastVersion": "1.6",
        "pattern": "1[.].*"
      }
    ]
  },
  {
    "id": "SECURITY-491",
    "type": "plugin",
    "name": "cas1",
    "message": "Arbitrary code execution vulnerability",
    "url": "https://jenkins.io/security/advisory/2017-04-10/",
    "versions": [
      {
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-494",
    "type": "plugin",
    "name": "app-detector",
    "message": "Arbitrary code execution vulnerability",
    "url": "https://jenkins.io/security/advisory/2017-04-10/",
    "versions": [
      {
        "lastVersion": "1.0.1",
        "pattern": "1[.]0[.][01](|[-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-495",
    "type": "plugin",
    "name": "ontrack",
    "message": "Arbitrary code execution vulnerability",
    "url": "https://jenkins.io/security/advisory/2017-04-10/",
    "versions": [
      {
        "lastVersion": "2.30.5",
        "pattern": "2\\.([0-2]\\d?|30)\\..*"
      }
    ]
  },
  {
    "id": "SECURITY-496",
    "type": "plugin",
    "name": "splunk-devops-extend",
    "message": "Arbitrary code execution vulnerability",
    "url": "https://jenkins.io/security/advisory/2017-04-10/",
    "versions": [
      {
        "lastVersion": "1.4.3",
        "pattern": "1[.][01234](|[.-].*)"
      }
    ]
  },
  {
    "id": "core-2_57",
    "type": "core",
    "name": "core",
    "message": "Multiple security vulnerabilities in Jenkins 2.56 and earlier, and LTS 2.46.1 and earlier",
    "url": "https://jenkins.io/security/advisory/2017-04-26/",
    "versions": [
      {
        "lastVersion": "2.56",
        "pattern": "(1[.].*|2[.]\\d|2[.][1234]\\d|2[.]5[0123456])(|[-].*)"
      },
      {
        "lastVersion": "2.46.1",
        "pattern": "(2[.]32[.].+|2[.]46[.]1)(|[-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-445",
    "type": "plugin",
    "name": "git-client",
    "message": "Creation of temporary file with insecure permissions",
    "url": "https://jenkins.io/security/advisory/2017-04-27/",
    "versions": [
      {
        "lastVersion": "2.4.2",
        "pattern": "1[.].*|2[.]([0123][.].*|4[.][012])(|[-].*)"
      }
    ]
  },
  {
    "id": "JENKINS-44643",
    "type": "plugin",
    "name": "favorite",
    "message": "Missing permission check allows anyone to change favorites for any other user",
    "url": "https://jenkins.io/security/advisory/2017-06-06/",
    "versions": [
      {
        "lastVersion": "2.1.0",
        "pattern": "1[.].*|2[.]([01])(|[.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-532",
    "type": "plugin",
    "name": "favorite",
    "message": "CSRF vulnerability allows changing another user's favorites",
    "url": "https://jenkins.io/security/advisory/2017-06-06/",
    "versions": [
      {
        "lastVersion": "2.2.0",
        "pattern": "1[.].*|2[.]([012])(|[.].*)"
      }
    ]
  },
  {
    "id": "JENKINS-21436",
    "type": "plugin",
    "name": "ssh",
    "message": "Credentials are stored in unencrypted configuration files",
    "url": "https://jenkins.io/security/advisory/2017-07-10/",
    "versions": [
      {
        "lastVersion": "2.4",
        "pattern": "(1[.].*|2[.][01234])(|[.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-201",
    "type": "plugin",
    "name": "parameterized-trigger",
    "message": "Missing permission check allows building all jobs",
    "url": "https://jenkins.io/security/advisory/2017-07-10/",
    "versions": [
      {
        "lastVersion": "2.34",
        "pattern": "(1[.].*|2[.][0-9]|2[.][12][0-9]|2[.]3[01234])(|[-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-303",
    "type": "plugin",
    "name": "subversion",
    "message": "CSRF vulnerability and insufficient permission checks allow capturing credentials",
    "url": "https://jenkins.io/security/advisory/2017-07-10/",
    "versions": [
      {
        "lastVersion": "2.8",
        "pattern": "(1[.].*|2[.][012345678])(|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-335",
    "type": "plugin",
    "name": "periodicbackup",
    "message": "Missing permission checks and CSRF vulnerability in Periodic Backup Plugin",
    "url": "https://jenkins.io/security/advisory/2017-07-10/",
    "versions": [
      {
        "lastVersion": "1.4",
        "pattern": "1[.][01234](|[-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-342",
    "type": "plugin",
    "name": "github-branch-source",
    "message": "Users with Overall/Read access can enumerate credential IDs",
    "url": "https://jenkins.io/security/advisory/2017-07-10/",
    "versions": [
      {
        "lastVersion": "2.0.7",
        "pattern": "(1[.].*|2[.]0[.][0-7])(|[-].*)"
      },
      {
        "lastVersion": "2.2.0-beta-1",
        "pattern": "2[.]2[.]0[-](alpha[-].*|beta[-]1)"
      }
    ]
  },
  {
    "id": "SECURITY-352",
    "type": "plugin",
    "name": "sidebar-link",
    "message": "Persisted XSS Vulnerability",
    "url": "https://jenkins.io/security/advisory/2017-07-10/",
    "versions": [
      {
        "lastVersion": "1.8",
        "pattern": "1[.][0-8](|[-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-433",
    "type": "plugin",
    "name": "pipeline-build-step",
    "message": "Missing permission check allows building all jobs",
    "url": "https://jenkins.io/security/advisory/2017-07-10/",
    "versions": [
      {
        "lastVersion": "2.5",
        "pattern": "(2[.][0-4]|2[.]5)(|[-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-516",
    "type": "plugin",
    "name": "role-strategy",
    "message": "CSRF vulnerability in security configuration",
    "url": "https://jenkins.io/security/advisory/2017-07-10/",
    "versions": [
      {
        "lastVersion": "2.5.0",
        "pattern": "(1[.].*|2[.][01234][.].*|2[.]5[.]0)(|[-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-527",
    "type": "plugin",
    "name": "github-branch-source",
    "message": "CSRF vulnerability and insufficient permission checks allow capturing credentials",
    "url": "https://jenkins.io/security/advisory/2017-07-10/",
    "versions": [
      {
        "lastVersion": "2.0.7",
        "pattern": "(1[.].*|2[.]0[.][0-7])(|[.].*)"
      },
      {
        "lastVersion": "2.2.0-beta-1",
        "pattern": "2[.]2[.]0[-](alpha[-].*|beta[-]1)"
      }
    ]
  },
  {
    "id": "SECURITY-528",
    "type": "plugin",
    "name": "git",
    "message": "CSRF vulnerability in Git plugin allows capturing credentials",
    "url": "https://jenkins.io/security/advisory/2017-07-10/",
    "versions": [
      {
        "lastVersion": "3.3.1",
        "pattern": "([012][.].*|3[.][012]|3[.]3[.][01])(|[-.].*)"
      },
      {
        "lastVersion": "3.4.0-beta-1",
        "pattern": "3[.]4[.]0[-](alpha.*|beta[-]1)(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-529",
    "type": "plugin",
    "name": "pollscm",
    "message": "CSRF vulnerability allows polling",
    "url": "https://jenkins.io/security/advisory/2017-07-10/",
    "versions": [
      {
        "lastVersion": "1.3",
        "pattern": "1[.][0123](|[-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-533",
    "type": "plugin",
    "name": "docker-commons",
    "message": "Users with Overall/Read access can enumerate credential IDs",
    "url": "https://jenkins.io/security/advisory/2017-07-10/",
    "versions": [
      {
        "lastVersion": "1.7",
        "pattern": "1[.][0-7](|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-538",
    "type": "plugin",
    "name": "script-security",
    "message": "Unsafe methods in the default list of approved signatures",
    "url": "https://jenkins.io/security/advisory/2017-07-10/",
    "versions": [
      {
        "lastVersion": "1.29",
        "pattern": "(1[.][0-9]|1[.]1[0-9]|1[.]2[0-8])(|[.-].*)|1[.]29(|[-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-551",
    "type": "plugin",
    "name": "workflow-cps",
    "message": "Arbitrary code execution due to incomplete sandbox protection",
    "url": "https://jenkins.io/security/advisory/2017-07-10/",
    "versions": [
      {
        "lastVersion": "2.36",
        "pattern": "(1[.].*|2[.][0-9]|2[.][12][0-9]|2[.]3[0-6])(|[-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-467-analysis-core",
    "type": "plugin",
    "name": "analysis-core",
    "message": "Persisted cross-site scripting vulnerability",
    "url": "https://jenkins.io/security/advisory/2017-08-07/",
    "versions": [
      {
        "lastVersion": "1.91",
        "pattern": "(1[.][0-9]|1[.][0-8][0-9]|1[.]9[01])(|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-467-dry",
    "type": "plugin",
    "name": "dry",
    "message": "Persisted cross-site scripting vulnerability",
    "url": "https://jenkins.io/security/advisory/2017-08-07/",
    "versions": [
      {
        "lastVersion": "2.48",
        "pattern": "(1|2[.][0-9]|2[.][0-3][0-9]|2[.]4[0-8])(|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-513",
    "type": "plugin",
    "name": "config-file-provider",
    "message": "Users with Overall/Read access could access configuration files",
    "url": "https://jenkins.io/security/advisory/2017-08-07/",
    "versions": [
      {
        "lastVersion": "2.16.1",
        "pattern": "(1|2[.][0-9]|2[.]1[0-5]|2[.]16[.][01])(|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-559",
    "type": "plugin",
    "name": "deploy",
    "message": "Insecure credential storage",
    "url": "https://jenkins.io/security/advisory/2017-08-07/",
    "versions": [
      {
        "lastVersion": "1.12",
        "pattern": "(1[.][0-9]|1[.]1[012])(|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-564",
    "type": "plugin",
    "name": "blueocean-rest-impl",
    "message": "Artifacts were made available to users lacking the proper permission",
    "url": "https://jenkins.io/security/advisory/2017-08-07/",
    "versions": [
      {
        "lastVersion": "1.1.5",
        "pattern": "(1[.]0[.].*|1[.]1[.][012345])"
      },
      {
        "lastVersion": "1.2.0-beta-3",
        "pattern": "1[.]2[.]0[-]beta[-][123]"
      }
    ]
  },
  {
    "id": "SECURITY-565",
    "type": "plugin",
    "name": "blueocean-github-pipeline",
    "message": "Unauthorized users could read and write GitHub repository data via SCM content API",
    "url": "https://jenkins.io/security/advisory/2017-08-07/",
    "versions": [
      {
        "lastVersion": "1.1.5",
        "pattern": "(1[.]0[.].*|1[.]1[.][012345])"
      },
      {
        "lastVersion": "1.2.0-beta-3",
        "pattern": "1[.]2[.]0[-]beta[-][123]"
      }
    ]
  },
  {
    "id": "SECURITY-565-beta",
    "type": "plugin",
    "name": "blueocean-bitbucket-pipeline",
    "message": "Unauthorized users could read and write Bitbucket repository data via SCM content API",
    "url": "https://jenkins.io/security/advisory/2017-08-07/",
    "versions": [
      {
        "lastVersion": "1.2.0-beta-3",
        "pattern": "1[.]2[.]0[-]beta[-]3"
      }
    ]
  },
  {
    "id": "SECURITY-566-567-580-582",
    "type": "plugin",
    "name": "script-security",
    "message": "Multiple sandbox bypasses",
    "url": "https://jenkins.io/security/advisory/2017-08-07/",
    "versions": [
      {
        "lastVersion": "1.30",
        "pattern": "(1[.][0-9]|1[.][12][0-9]|1[.]30)(|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-576",
    "type": "plugin",
    "name": "pipeline-input-step",
    "message": "Users with read access could interact with input step by default",
    "url": "https://jenkins.io/security/advisory/2017-08-07/",
    "versions": [
      {
        "lastVersion": "2.7",
        "pattern": "(2[.][0-7])(|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-577",
    "type": "plugin",
    "name": "dependency-check-jenkins-plugin",
    "message": "Persisted cross-site scripting vulnerability",
    "url": "https://jenkins.io/security/advisory/2017-08-07/",
    "versions": [
      {
        "lastVersion": "2.0.1.1",
        "pattern": "(?!2.0.1.2)(1|2[.]0)(|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-579",
    "type": "plugin",
    "name": "datadog",
    "message": "API key gets transmitted in unencrypted form",
    "url": "https://jenkins.io/security/advisory/2017-08-07/",
    "versions": [
      {
        "lastVersion": "0.5.6",
        "pattern": "(0[.][1234]|0[.]5[.][0123456])(|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-587",
    "type": "plugin",
    "name": "blueocean-github-pipeline",
    "message": "Users with read access to a pipeline could obtain its associated GitHub access token",
    "url": "https://jenkins.io/security/advisory/2017-08-07/",
    "versions": [
      {
        "lastVersion": "1.1.5",
        "pattern": "(1[.]0[.].*|1[.]1[.][012345])"
      },
      {
        "lastVersion": "1.2.0-beta-3",
        "pattern": "1[.]2[.]0[-]beta[-][123]"
      }
    ]
  },
  {
    "id": "JENKINS-46007",
    "type": "plugin",
    "name": "saml",
    "message": "Keystore and private key passwords stored unencrypted",
    "url": "https://jenkins.io/security/advisory/2017-08-08/",
    "versions": [
      {
        "lastVersion": "1.0.2",
        "pattern": "(0|1[.]0[.][12])(|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-557",
    "type": "plugin",
    "name": "maven-plugin",
    "message": "Maven plugin bundles commons-httpclient library vulnerable to man-in-the-middle attacks",
    "url": "https://jenkins.io/security/advisory/2017-10-11/",
    "versions": [
      {
        "lastVersion": "2.17",
        "pattern": "([12][.].+)(|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-597",
    "type": "plugin",
    "name": "swarm",
    "message": "Swarm Plugin client bundles commons-httpclient library vulnerable to man-in-the-middle attacks",
    "url": "https://jenkins.io/security/advisory/2017-10-11/",
    "versions": [
      {
        "pattern": "([12][.].+|3[.][34])(|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-623",
    "type": "plugin",
    "name": "speaks",
    "message": "Arbitrary code execution vulnerability",
    "url": "https://jenkins.io/security/advisory/2017-10-11/",
    "versions": [
      {
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "core-2_84",
    "type": "core",
    "name": "core",
    "message": "Multiple security vulnerabilities in Jenkins 2.83 and earlier, and LTS 2.73.1 and earlier",
    "url": "https://jenkins.io/security/advisory/2017-10-11/",
    "versions": [
      {
        "lastVersion": "2.83",
        "pattern": "(1[.].*|2[.]\\d|2[.][1234567]\\d|2[.]8[0123])(|[-].*)"
      },
      {
        "lastVersion": "2.73.1",
        "pattern": "(2[.](32|46|60)[.].+|2[.]73[.]1)(|[-].*)"
      }
    ]
  },
  {
    "id": "JENKINS-36333",
    "type": "plugin",
    "name": "jenkins-multijob-plugin",
    "message": "Missing permission check for Resume Build feature",
    "url": "https://jenkins.io/security/advisory/2017-10-23/",
    "versions": [
      {
        "lastVersion": "1.26",
        "pattern": "1[.]([0-9]|1[0-9]|2[0-6])(|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-374",
    "type": "plugin",
    "name": "scp",
    "message": "Insecure credential storage and transmission",
    "url": "https://jenkins.io/security/advisory/2017-10-23/",
    "versions": [
      {
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-378",
    "type": "plugin",
    "name": "build-publisher",
    "message": "Insecure credential storage and transmission",
    "url": "https://jenkins.io/security/advisory/2017-10-23/",
    "versions": [
      {
        "lastVersion": "1.21",
        "pattern": "(1[.][0-9]|1[.]1[0-9]|1[.]2[01])(|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-470",
    "type": "plugin",
    "name": "uno-choice",
    "message": "Stored cross-site scripting vulnerability",
    "url": "https://jenkins.io/security/advisory/2017-10-23/",
    "versions": [
      {
        "lastVersion": "1.5.3",
        "pattern": "1[.].*"
      }
    ]
  },
  {
    "id": "SECURITY-50",
    "type": "plugin",
    "name": "global-build-stats",
    "message": "CSRF and XSS vulnerabilities",
    "url": "https://jenkins.io/security/advisory/2017-10-23/",
    "versions": [
      {
        "lastVersion": "1.4",
        "pattern": "0[.].*|1[.][01234](|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-57",
    "type": "plugin",
    "name": "depgraph-view",
    "message": "Missing permission checks",
    "url": "https://jenkins.io/security/advisory/2017-10-23/",
    "versions": [
      {
        "lastVersion": "0.12",
        "pattern": "0[.]([1-9]|1[012])(|[.-].*)"
      }
    ]
  },
  {
    "id": "core-2_89",
    "type": "core",
    "name": "core",
    "message": "Multiple security vulnerabilities in Jenkins 2.88 and earlier, and LTS 2.73.2 and earlier",
    "url": "https://jenkins.io/security/advisory/2017-11-08/",
    "versions": [
      {
        "lastVersion": "2.88",
        "pattern": "(1[.].*|2[.]\\d|2[.][1234567]\\d|2[.]8[012345678])(|[-].*)"
      },
      {
        "lastVersion": "2.73.2",
        "pattern": "(2[.](32|46|60)[.].+|2[.]73[.][12])(|[-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-640",
    "type": "plugin",
    "name": "delivery-pipeline-plugin",
    "message": "Reflected cross-site scripting vulnerability",
    "url": "https://jenkins.io/security/advisory/2017-11-16/",
    "versions": [
      {
        "lastVersion": "1.0.7",
        "pattern": "(0[.].*|1[.]0[.][0-7])(|[-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-643",
    "type": "plugin",
    "name": "ec2",
    "message": "Arbitrary shell command execution vulnerability",
    "url": "https://jenkins.io/security/advisory/2017-12-06/",
    "versions": [
      {
        "lastVersion": "1.37",
        "pattern": "(1[.]([0-9]|[12][0-9]|3[0-7]))(|[-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-663",
    "type": "plugin",
    "name": "script-security",
    "message": "Arbitrary file read vulnerability",
    "url": "https://jenkins.io/security/advisory/2017-12-11/",
    "versions": [
      {
        "lastVersion": "1.36",
        "pattern": "(1[.]([0-9]|[12][0-9]|3[0-6]))(|[.-].*)"
      }
    ]
  },
  {
    "id": "core-2_95",
    "type": "core",
    "name": "core",
    "message": "Multiple security vulnerabilities in Jenkins 2.94 and earlier, and LTS 2.89.1 and earlier",
    "url": "https://jenkins.io/security/advisory/2017-12-14/",
    "versions": [
      {
        "lastVersion": "2.94",
        "pattern": "(1[.].*|2[.]\\d|2[.][1-8]\\d|2[.]9[0-4])(|[-].*)"
      },
      {
        "lastVersion": "2.89.1",
        "pattern": "(2[.](32|46|60|73)[.].+|2[.]89[.]1)(|[-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-507",
    "type": "plugin",
    "name": "translation",
    "message": "Cross-site request forgery (CSRF) vulnerability",
    "url": "https://jenkins.io/security/advisory/2018-01-22/",
    "versions": [
      {
        "lastVersion": "1.15",
        "pattern": "1[.]([0-9]|1[0-5])(|[-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-607",
    "type": "plugin",
    "name": "release",
    "message": "Cross-site request forgery (CSRF) vulnerability",
    "url": "https://jenkins.io/security/advisory/2018-01-22/",
    "versions": [
      {
        "lastVersion": "2.9",
        "pattern": "(1[.].*|2[.]([0-9]))(|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-655",
    "type": "plugin",
    "name": "pmd",
    "message": "XML External Entity (XXE) processing vulnerability",
    "url": "https://jenkins.io/security/advisory/2018-01-22/",
    "versions": [
      {
        "lastVersion": "3.49",
        "pattern": "3[.][1-4][0-9](|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-656",
    "type": "plugin",
    "name": "checkstyle",
    "message": "XML External Entity (XXE) processing vulnerability",
    "url": "https://jenkins.io/security/advisory/2018-01-22/",
    "versions": [
      {
        "lastVersion": "3.49",
        "pattern": "3[.][1-4][0-9](|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-657",
    "type": "plugin",
    "name": "dry",
    "message": "XML External Entity (XXE) processing vulnerability",
    "url": "https://jenkins.io/security/advisory/2018-01-22/",
    "versions": [
      {
        "lastVersion": "2.49",
        "pattern": "2[.][1-4][0-9](|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-658",
    "type": "plugin",
    "name": "findbugs",
    "message": "XML External Entity (XXE) processing vulnerability",
    "url": "https://jenkins.io/security/advisory/2018-01-22/",
    "versions": [
      {
        "lastVersion": "4.71",
        "pattern": "4[.]([0-6][0-9]|7[01])(|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-675",
    "type": "plugin",
    "name": "workflow-durable-task-step",
    "message": "Incorrect permission checks allow executing builds on agents without Computer/Build permission",
    "url": "https://jenkins.io/security/advisory/2018-01-22/",
    "versions": [
      {
        "lastVersion": "2.17",
        "pattern": "(1[.].*|2[.]([0-9]|1[0-7]))(|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-694",
    "type": "plugin",
    "name": "ant",
    "message": "Cross-site scripting (XSS) vulnerability",
    "url": "https://jenkins.io/security/advisory/2018-01-22/",
    "versions": [
      {
        "lastVersion": "1.7",
        "pattern": "1[.][0-7](|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-695",
    "type": "plugin",
    "name": "warnings",
    "message": "XML External Entity (XXE) processing vulnerability",
    "url": "https://jenkins.io/security/advisory/2018-01-22/",
    "versions": [
      {
        "lastVersion": "4.64",
        "pattern": "(3[.].*|4[.]([0-9]|[1-5][0-9]|6[0-4]))(|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-521",
    "type": "plugin",
    "name": "junit",
    "message": "XML External Entity (XXE) processing vulnerability",
    "url": "https://jenkins.io/security/advisory/2018-02-05/",
    "versions": [
      {
        "lastVersion": "1.23",
        "pattern": "(1[.]([0-9]|1[0-9]|2[0-3]))(|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-659",
    "type": "plugin",
    "name": "ccm",
    "message": "XML External Entity (XXE) processing vulnerability",
    "url": "https://jenkins.io/security/advisory/2018-02-05/",
    "versions": [
      {
        "lastVersion": "3.1",
        "pattern": "([12]|3[.][01])(|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-660",
    "type": "plugin",
    "name": "android-lint",
    "message": "XML External Entity (XXE) processing vulnerability",
    "url": "https://jenkins.io/security/advisory/2018-02-05/",
    "versions": [
      {
        "lastVersion": "2.5",
        "pattern": "(1|2[.][0-5])(|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-698",
    "type": "plugin",
    "name": "credentials-binding",
    "message": "Improper masking of secrets in rare circumstances",
    "url": "https://jenkins.io/security/advisory/2018-02-05/",
    "versions": [
      {
        "lastVersion": "1.14",
        "pattern": "1[.]([0-9]|1[0-4])(|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-699",
    "type": "plugin",
    "name": "workflow-support",
    "message": "Arbitrary code execution due to incomplete sandbox protection",
    "url": "https://jenkins.io/security/advisory/2018-02-05/",
    "versions": [
      {
        "lastVersion": "2.17",
        "pattern": "([1]|2[.]([0-9]|1[0-7]))(|[.-].*)"
      }
    ]
  },
  {
    "id": "core-2_107",
    "type": "core",
    "name": "core",
    "message": "Multiple security vulnerabilities in Jenkins 2.106 and earlier, and LTS 2.89.3 and earlier",
    "url": "https://jenkins.io/security/advisory/2018-02-14/",
    "versions": [
      {
        "lastVersion": "2.106",
        "pattern": "(1[.].*|2[.][0-9]|2[.][0-9][0-9]|2[.]10[0-6])(|[-].*)"
      },
      {
        "lastVersion": "2.89.3",
        "pattern": "(2[.](32|46|60|73)[.].+|2[.]89[.][123])(|[-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-248",
    "type": "plugin",
    "name": "envinject",
    "message": "Exposure of sensitive build variables stored by EnvInject 1.90 and earlier",
    "url": "https://jenkins.io/security/advisory/2018-02-26/#SECURITY-248",
    "versions": [
      {
        "lastVersion": "1.90",
        "pattern": "(0|1[.][0-9]|1[.][1-8][0-9]|1[.]90)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-260",
    "type": "plugin",
    "name": "coverity",
    "message": "Keystore and private key passwords stored in plain text",
    "url": "https://jenkins.io/security/advisory/2018-02-26/#SECURITY-260",
    "versions": [
      {
        "lastVersion": "1.10.0",
        "pattern": "1[.]([0-9]|10[.]0)(|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-402",
    "type": "plugin",
    "name": "gerrit-trigger",
    "message": "Unauthorized access to some Gerrit Trigger server configuration",
    "url": "https://jenkins.io/security/advisory/2018-02-26/#SECURITY-402",
    "versions": [
      {
        "lastVersion": "2.27.4",
        "pattern": "2[.]([0-9]|1[0-9]|2[0-6]|27[.][0-4])(|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-403",
    "type": "plugin",
    "name": "gerrit-trigger",
    "message": "Unauthorized users were able to change Gerrit Trigger server configuration",
    "url": "https://jenkins.io/security/advisory/2018-02-26/#SECURITY-403",
    "versions": [
      {
        "lastVersion": "2.27.4",
        "pattern": "2[.]([0-9]|1[0-9]|2[0-6]|27[.][0-4])(|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-498",
    "type": "plugin",
    "name": "ownership",
    "message": "Users without ManageOwnership permissions able to change job and node ownership metadata",
    "url": "https://jenkins.io/security/advisory/2018-02-26/#SECURITY-498",
    "versions": [
      {
        "lastVersion": "0.11.0",
        "pattern": "0[.]([0-9]|1[01])(|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-554",
    "type": "plugin",
    "name": "azure-slave-plugin",
    "message": "Bundled httpclient library vulnerable to DoS",
    "url": "https://jenkins.io/security/advisory/2018-02-26/#SECURITY-554",
    "versions": [
      {
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-712",
    "type": "plugin",
    "name": "cppncss",
    "message": "Reflected cross-site-scripting vulnerability",
    "url": "https://jenkins.io/security/advisory/2018-02-26/#SECURITY-712",
    "versions": [
      {
        "lastVersion": "1.1",
        "pattern": "1[.][01](|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-715",
    "type": "plugin",
    "name": "google-play-android-publisher",
    "message": "Users with Overall/Read access can enumerate credential IDs",
    "url": "https://jenkins.io/security/advisory/2018-02-26/#SECURITY-715",
    "versions": [
      {
        "lastVersion": "1.6",
        "pattern": "1[.][0-6](|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-723",
    "type": "plugin",
    "name": "git",
    "message": "Users without Overall/Read are able to access lists of user names and node names",
    "url": "https://jenkins.io/security/advisory/2018-02-26/#SECURITY-723",
    "versions": [
      {
        "lastVersion": "3.7.0",
        "pattern": "([012][.].*|3[.][0-7])(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-724",
    "type": "plugin",
    "name": "subversion",
    "message": "Users without Overall/Read are able to access lists of user names and node names",
    "url": "https://jenkins.io/security/advisory/2018-02-26/#SECURITY-724",
    "versions": [
      {
        "lastVersion": "2.10.2",
        "pattern": "((1|2[.][0-9]|2[.]10[.][12])(|[-.].*)|2[.]10)"
      }
    ]
  },
  {
    "id": "SECURITY-726",
    "type": "plugin",
    "name": "mercurial",
    "message": "Users without Overall/Read are able to access lists of user names and node names",
    "url": "https://jenkins.io/security/advisory/2018-02-26/#SECURITY-726",
    "versions": [
      {
        "lastVersion": "2.2",
        "pattern": "(1|2[.][0-2])(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-731",
    "type": "plugin",
    "name": "testlink",
    "message": "Stored cross-site scripting vulnerability",
    "url": "https://jenkins.io/security/advisory/2018-02-26/#SECURITY-731",
    "versions": [
      {
        "lastVersion": "3.12",
        "pattern": "([12]|3[.][0-9]|3[.]1[0-2])(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-746",
    "type": "plugin",
    "name": "promoted-builds",
    "message": "Unauthorized users are able to run some promotion processes",
    "url": "https://jenkins.io/security/advisory/2018-02-26/#SECURITY-746",
    "versions": [
      {
        "lastVersion": "2.31.1",
        "pattern": "([12])(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-261",
    "type": "plugin",
    "name": "ghprb",
    "message": "GitHub access tokens stored in build.xml",
    "url": "https://jenkins.io/security/advisory/2018-03-26/#SECURITY-261",
    "versions": [
      {
        "lastVersion": "1.40.0",
        "pattern": "(1[.]([0-9]|[1-3][0-9]|40))(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-262",
    "type": "plugin",
    "name": "ghprb",
    "message": "Webhook secret stored in plain text",
    "url": "https://jenkins.io/security/advisory/2018-03-26/#SECURITY-262",
    "versions": [
      {
        "lastVersion": "1.32.0",
        "pattern": "1[.]([0-9]|[12][0-9]|3[01]|32[.]0)(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-308",
    "type": "plugin",
    "name": "cucumber-living-documentation",
    "message": "Plugin disables Jenkins Cross-Site Scripting protection",
    "url": "https://jenkins.io/security/advisory/2018-03-26/#SECURITY-308",
    "versions": [
      {
        "lastVersion": "1.0.12",
        "pattern": "1[.]0(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-373",
    "type": "plugin",
    "name": "perforce",
    "message": "Ineffective credentials encryption",
    "url": "https://jenkins.io/security/advisory/2018-03-26/#SECURITY-373",
    "versions": [
      {
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-504",
    "type": "plugin",
    "name": "vsphere-cloud",
    "message": "Plugin disables SSL/TLS certificate validation",
    "url": "https://jenkins.io/security/advisory/2018-03-26/#SECURITY-504",
    "versions": [
      {
        "pattern": "([01]|2[.]([0-9]|1[0-6]))(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-519",
    "type": "plugin",
    "name": "liquibase-runner",
    "message": "Plugin allows users to load arbitrary Java code into Jenkins controller JVM",
    "url": "https://jenkins.io/security/advisory/2018-03-26/#SECURITY-519",
    "versions": [
      {
        "lastVersion": "1.4.4",
        "pattern": "(1[.][0123]|1[.]4[.][234])(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-536",
    "type": "plugin",
    "name": "perforce",
    "message": "Job-specific credentials can be obtained by users with Job/Extended Read permission",
    "url": "https://jenkins.io/security/advisory/2018-03-26/#SECURITY-536",
    "versions": [
      {
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-545",
    "type": "plugin",
    "name": "copy-to-slave",
    "message": "Plugin allows access to arbitrary files on the Jenkins controller file system",
    "url": "https://jenkins.io/security/advisory/2018-03-26/#SECURITY-545",
    "versions": [
      {
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-630",
    "type": "plugin",
    "name": "ansible",
    "message": "Host key verification disabled by default",
    "url": "https://jenkins.io/security/advisory/2018-03-26/#SECURITY-630",
    "versions": [
      {
        "lastVersion": "0.8",
        "pattern": "0(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-736",
    "type": "plugin",
    "name": "reverse-proxy-auth-plugin",
    "message": "Authorities cache persisted on disk",
    "url": "https://jenkins.io/security/advisory/2018-03-26/#SECURITY-736",
    "versions": [
      {
        "lastVersion": "1.5",
        "pattern": "1[.][0-5](|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-745",
    "type": "plugin",
    "name": "vsphere-cloud",
    "message": "CSRF vulnerability and insufficient permission checks allow capturing credentials, vSphere denial of service",
    "url": "https://jenkins.io/security/advisory/2018-03-26/#SECURITY-745",
    "versions": [
      {
        "pattern": "([01]|2[.]([0-9]|1[0-6]))(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-774",
    "type": "plugin",
    "name": "mailer",
    "message": "Unauthorized users able to send test emails",
    "url": "https://jenkins.io/security/advisory/2018-03-26/#SECURITY-774",
    "versions": [
      {
        "lastVersion": "1.20",
        "pattern": "1[.]([0-9]|1[0-9]|20)(|[-.].*)"
      }
    ]
  },
  {
    "id": "core-2_116",
    "type": "core",
    "name": "core",
    "message": "Multiple security vulnerabilities in Jenkins 2.115 and earlier, and LTS 2.107.1 and earlier",
    "url": "https://jenkins.io/security/advisory/2018-04-11/",
    "versions": [
      {
        "lastVersion": "2.115",
        "pattern": "(1[.].*|2[.][0-9]|2[.][0-9][0-9]|2[.]10[0-9]|2[.]11[0-5])(|[-].*)"
      },
      {
        "lastVersion": "2.107.1",
        "pattern": "(2[.][0-9]{1,2}[.].+|2[.]107[.]1)(|[-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-442",
    "type": "plugin",
    "name": "google-login",
    "message": "Session fixation vulnerability",
    "url": "https://jenkins.io/security/advisory/2018-04-16/#SECURITY-442",
    "versions": [
      {
        "lastVersion": "1.3",
        "pattern": "1[.][012](|[-.].*)|1.3"
      }
    ]
  },
  {
    "id": "SECURITY-684",
    "type": "plugin",
    "name": "google-login",
    "message": "Open redirect vulnerability",
    "url": "https://jenkins.io/security/advisory/2018-04-16/#SECURITY-684",
    "versions": [
      {
        "lastVersion": "1.3",
        "pattern": "1[.][012](|[-.].*)|1.3"
      }
    ]
  },
  {
    "id": "SECURITY-729",
    "type": "plugin",
    "name": "email-ext",
    "message": "SMTP password gets transmitted in unencrypted form",
    "url": "https://jenkins.io/security/advisory/2018-04-16/#SECURITY-729",
    "versions": [
      {
        "lastVersion": "2.61",
        "pattern": "2[.]([0-9]|[12345][0-9]|6[01])(|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-730",
    "type": "plugin",
    "name": "s3",
    "message": "Cross-site scripting vulnerability in artifact file names",
    "url": "https://jenkins.io/security/advisory/2018-04-16/#SECURITY-730",
    "versions": [
      {
        "lastVersion": "0.10.12",
        "pattern": "0[.]([0-9]|10)(|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-784",
    "type": "plugin",
    "name": "htmlpublisher",
    "message": "Path traversal vulnerability allows arbitrary file writing",
    "url": "https://jenkins.io/security/advisory/2018-04-16/#SECURITY-784",
    "versions": [
      {
        "lastVersion": "1.15",
        "pattern": "(0|1[.][0-9]|1[.]1[0-5])(|[-.].*)"
      }
    ]
  },
  {
    "id": "core-2_121",
    "type": "core",
    "name": "core",
    "message": "Multiple security vulnerabilities in Jenkins 2.120 and earlier, and LTS 2.107.2 and earlier",
    "url": "https://jenkins.io/security/advisory/2018-05-09/",
    "versions": [
      {
        "lastVersion": "2.120",
        "pattern": "(1[.].*|2[.][0-9]|2[.][0-9][0-9]|2[.]1[01][0-9]|2[.]120)(|[-].*)"
      },
      {
        "lastVersion": "2.107.2",
        "pattern": "(2[.][0-9]{1,2}[.].+|2[.]107[.][12])(|[-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-263",
    "type": "plugin",
    "name": "gitlab-hook",
    "message": "Gitlab API token stored and displayed in plain text",
    "url": "https://jenkins.io/security/advisory/2018-05-09/#SECURITY-263",
    "versions": [
      {
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-670",
    "type": "plugin",
    "name": "blackduck-hub",
    "message": "Users with Overall/Read permission able to read and write plugin configuration",
    "url": "https://jenkins.io/security/advisory/2018-05-09/#SECURITY-670",
    "versions": [
      {
        "lastVersion": "3.0.3",
        "pattern": "(2|3[.]0)(|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-671",
    "type": "plugin",
    "name": "blackduck-hub",
    "message": "XML External Entity processing vulnerability",
    "url": "https://jenkins.io/security/advisory/2018-05-09/#SECURITY-671",
    "versions": [
      {
        "lastVersion": "3.1.0",
        "pattern": "([23])(|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-821",
    "type": "plugin",
    "name": "groovy-postbuild",
    "message": "Persisted cross-site scripting vulnerability in build badges",
    "url": "https://jenkins.io/security/advisory/2018-05-09/#SECURITY-821",
    "versions": [
      {
        "lastVersion": "2.3.1",
        "pattern": "(1|2[.][0123])(|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-799",
    "type": "plugin",
    "name": "github",
    "message": "Server-side request forgery",
    "url": "https://jenkins.io/security/advisory/2018-06-04/#SECURITY-799",
    "versions": [
      {
        "lastVersion": "1.29.0",
        "pattern": "(0|1[.][0-9]|1[.]1[0-9]|1[.]2[0-8]|1[.]29[.]0)(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-804",
    "type": "plugin",
    "name": "github",
    "message": "CSRF vulnerability and lack of permission checks allows capturing credentials",
    "url": "https://jenkins.io/security/advisory/2018-06-04/#SECURITY-804",
    "versions": [
      {
        "lastVersion": "1.29.0",
        "pattern": "(0|1[.][0-9]|1[.]1[0-9]|1[.]2[0-8]|1[.]29[.]0)(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-805",
    "type": "plugin",
    "name": "ghprb",
    "message": "CSRF vulnerability and lack of permission checks allows capturing credentials",
    "url": "https://jenkins.io/security/advisory/2018-06-04/#SECURITY-805",
    "versions": [
      {
        "lastVersion": "1.41.0",
        "pattern": "(0|1[.][0-9]|1[.][123][0-9]|1[.]40|1[.]41[.]0)(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-806",
    "type": "plugin",
    "name": "github-branch-source",
    "message": "Server-side request forgery",
    "url": "https://jenkins.io/security/advisory/2018-06-04/#SECURITY-806",
    "versions": [
      {
        "lastVersion": "2.3.4",
        "pattern": "(1|2[.][012]|2[.]3[.][01234])(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-807",
    "type": "plugin",
    "name": "absint-astree",
    "message": "Arbitrary file execution vulnerability",
    "url": "https://jenkins.io/security/advisory/2018-06-04/#SECURITY-807",
    "versions": [
      {
        "lastVersion": "1.0.5",
        "pattern": "(1[.]0[.][0-6])(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-809",
    "type": "plugin",
    "name": "cas-plugin",
    "message": "Server-side request forgery",
    "url": "https://jenkins.io/security/advisory/2018-06-04/#SECURITY-809",
    "versions": [
      {
        "lastVersion": "1.4.1",
        "pattern": "([1][.][0123]|1[.]4[.][01])(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-810",
    "type": "plugin",
    "name": "git",
    "message": "Server-side request forgery",
    "url": "https://jenkins.io/security/advisory/2018-06-04/#SECURITY-810",
    "versions": [
      {
        "lastVersion": "3.9.0",
        "pattern": "([012][.].*|3[.][0-8]|3[.]9[.]0)(|[-.].*)"
      },
      {
        "lastVersion": "4.0.0-beta1",
        "pattern": "4[.]0[.]0[-]beta1"
      }
    ]
  },
  {
    "id": "SECURITY-865",
    "type": "plugin",
    "name": "blackduck-hub",
    "message": "CSRF vulnerability and lack of permission checks allows capturing credentials",
    "url": "https://jenkins.io/security/advisory/2018-06-04/#SECURITY-865",
    "versions": [
      {
        "lastVersion": "4.0.0",
        "pattern": "([23]|4[.]0[.]0)(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-866",
    "type": "plugin",
    "name": "blackduck-detect",
    "message": "CSRF vulnerability and lack of permission checks allows capturing credentials",
    "url": "https://jenkins.io/security/advisory/2018-06-04/#SECURITY-866",
    "versions": [
      {
        "lastVersion": "1.4.0",
        "pattern": "(1[.][0123]|1[.]4[.]0)(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-883",
    "type": "plugin",
    "name": "kubernetes",
    "message": "Lack of masking of secrets in build log",
    "url": "https://jenkins.io/security/advisory/2018-06-04/#SECURITY-883",
    "versions": [
      {
        "lastVersion": "1.7.0",
        "pattern": "(0|1[.][0-6]|1[.]7[.]0)(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-440",
    "type": "plugin",
    "name": "ssh-credentials",
    "message": "Arbitrary file read vulnerability with Credentials Binding Plugin 1.13 or newer",
    "url": "https://jenkins.io/security/advisory/2018-06-25/#SECURITY-440",
    "versions": [
      {
        "lastVersion": "1.13",
        "pattern": "(0|1[.]([0-9]|1[0-3]))(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-808",
    "type": "plugin",
    "name": "openstack-cloud",
    "message": "CSRF vulnerability and insufficient permission checks allow capturing credentials",
    "url": "https://jenkins.io/security/advisory/2018-06-25/#SECURITY-808",
    "versions": [
      {
        "lastVersion": "2.35",
        "pattern": "(1|2[.]([0-9]|[12][0-9]|3[0-5]))(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-819",
    "type": "plugin",
    "name": "urltrigger",
    "message": "Server-side request forgery vulnerability",
    "url": "https://jenkins.io/security/advisory/2018-06-25/#SECURITY-819",
    "versions": [
      {
        "lastVersion": "0.41",
        "pattern": "(0[.]([0-9]|[123][0-9]|4[01]))(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-825",
    "type": "plugin",
    "name": "codedeploy",
    "message": "Serialization of potentially sensitive build variables",
    "url": "https://jenkins.io/security/advisory/2018-06-25/#SECURITY-825",
    "versions": [
      {
        "lastVersion": "1.19",
        "pattern": "(1[.]([0-9]|1[0-9]))(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-833",
    "type": "plugin",
    "name": "codedeploy",
    "message": "AWS Secret Key stored in plain text",
    "url": "https://jenkins.io/security/advisory/2018-06-25/#SECURITY-833",
    "versions": [
      {
        "lastVersion": "1.19",
        "pattern": "(1[.]([0-9]|1[0-9]))(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-834",
    "type": "plugin",
    "name": "aws-codebuild",
    "message": "AWS Secret Key stored in plain text",
    "url": "https://jenkins.io/security/advisory/2018-06-25/#SECURITY-834",
    "versions": [
      {
        "lastVersion": "0.26",
        "pattern": "(0[.]([0-9]|1[0-9]|2[0-6]))(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-870",
    "type": "plugin",
    "name": "fortify-cloudscan-jenkins-plugin",
    "message": "Arbitrary file write vulnerability",
    "url": "https://jenkins.io/security/advisory/2018-06-25/#SECURITY-870",
    "versions": [
      {
        "lastVersion": "1.5.1",
        "pattern": "(1[.][0-4]|1[.]5[.][01])(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-906",
    "type": "plugin",
    "name": "badge",
    "message": "Persisted cross-site scripting vulnerability",
    "url": "https://jenkins.io/security/advisory/2018-06-25/#SECURITY-906",
    "versions": [
      {
        "lastVersion": "1.4",
        "pattern": "(1[.][0-4])(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-915",
    "type": "plugin",
    "name": "github",
    "message": "CSRF vulnerability and insufficient permission checks allow capturing credentials",
    "url": "https://jenkins.io/security/advisory/2018-06-25/#SECURITY-915",
    "versions": [
      {
        "lastVersion": "1.29.1",
        "pattern": "(0|1[.][0-9]|1[.]1[0-9]|1[.]2[0-8]|1[.]29[.][01])(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-916",
    "type": "plugin",
    "name": "saml",
    "message": "HTTP session fixation vulnerability",
    "url": "https://jenkins.io/security/advisory/2018-06-25/#SECURITY-916",
    "versions": [
      {
        "lastVersion": "1.0.6",
        "pattern": "(0|1[.]0[.][0-6])(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-927",
    "type": "plugin",
    "name": "configuration-as-code",
    "message": "Missing permission check allowed anyone to export Jenkins configuration",
    "url": "https://jenkins.io/security/advisory/2018-06-25/#SECURITY-927",
    "versions": [
      {
        "lastVersion": "0.7-alpha",
        "pattern": "(0[.][0-7])(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-929",
    "type": "plugin",
    "name": "configuration-as-code",
    "message": "Plain text logging of sensitive configuration variables",
    "url": "https://jenkins.io/security/advisory/2018-06-25/#SECURITY-929",
    "versions": [
      {
        "lastVersion": "0.7-alpha",
        "pattern": "(0[.][0-7])(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-941",
    "type": "plugin",
    "name": "collabnet",
    "message": "Plugin globally disables SSL/TLS certification validation in Jenkins",
    "url": "https://jenkins.io/security/advisory/2018-06-25/#SECURITY-941",
    "versions": [
      {
        "lastVersion": "2.0.4",
        "pattern": "(1|2[.]0[.][0-4])(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-950",
    "type": "plugin",
    "name": "zos-connector",
    "message": "Password stored in plain text",
    "url": "https://jenkins.io/security/advisory/2018-06-25/#SECURITY-950",
    "versions": [
      {
        "lastVersion": "1.2.6.1",
        "pattern": "1(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-967",
    "type": "plugin",
    "name": "aws-codepipeline",
    "message": "AWS Secret Key stored in plain text",
    "url": "https://jenkins.io/security/advisory/2018-06-25/#SECURITY-967",
    "versions": [
      {
        "lastVersion": "0.36",
        "pattern": "(0[.]([0-9]|[12][0-9]|3[0-6]))(|[-.].*)"
      }
    ]
  },
  {
    "id": "core-2_133",
    "type": "core",
    "name": "core",
    "message": "Multiple security vulnerabilities in Jenkins 2.132 and earlier, and LTS 2.121.1 and earlier",
    "url": "https://jenkins.io/security/advisory/2018-07-18/",
    "versions": [
      {
        "lastVersion": "2.132",
        "pattern": "(1[.].*|2[.][0-9]|2[.][0-9][0-9]|2[.]1[012][0-9]|2[.]13[012])(|[-].*)"
      },
      {
        "lastVersion": "2.121.1",
        "pattern": "(2[.][0-9]{1,2}[.].+|2[.]107[.].+|2[.]121[.][1])(|[-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1001",
    "type": "plugin",
    "name": "shelve-project-plugin",
    "message": "Stored Cross-Site Scripting Vulnerability",
    "url": "https://jenkins.io/security/advisory/2018-07-30/#SECURITY-1001",
    "versions": [
      {
        "lastVersion": "1.5",
        "pattern": "1(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1009",
    "type": "plugin",
    "name": "saltstack",
    "message": "CSRF vulnerability and missing permission checks allowed capturing credentials",
    "url": "https://jenkins.io/security/advisory/2018-07-30/#SECURITY-1009",
    "versions": [
      {
        "lastVersion": "3.1.6",
        "pattern": "([12]|3[.]0|3[.]1[.][0-6])(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1016",
    "type": "plugin",
    "name": "kubernetes",
    "message": "CSRF vulnerability and missing permission checks allowed capturing credentials",
    "url": "https://jenkins.io/security/advisory/2018-07-30/#SECURITY-1016",
    "versions": [
      {
        "lastVersion": "1.10.1",
        "pattern": "(0|1[.]([0-9]|10[.][01]))(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1021",
    "type": "plugin",
    "name": "accurev",
    "message": "CSRF vulnerability and missing permission checks allowed capturing credentials",
    "url": "https://jenkins.io/security/advisory/2018-07-30/#SECURITY-1021",
    "versions": [
      {
        "lastVersion": "0.7.16",
        "pattern": "0[.](6|7[.]([0-9]|1[0-6]))(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1022",
    "type": "plugin",
    "name": "maven-artifact-choicelistprovider",
    "message": "CSRF vulnerability and missing permission checks allowed capturing credentials",
    "url": "https://jenkins.io/security/advisory/2018-07-30/#SECURITY-1022",
    "versions": [
      {
        "lastVersion": "1.3.1",
        "pattern": "1[.]([012]|3[.][01])(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1039",
    "type": "plugin",
    "name": "anchore-container-scanner",
    "message": "Password stored in plain text",
    "url": "https://jenkins.io/security/advisory/2018-07-30/#SECURITY-1039",
    "versions": [
      {
        "lastVersion": "1.0.16",
        "pattern": "1[.]0[.]([0-9]|1[0-6])(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-704",
    "type": "plugin",
    "name": "ssh-agent",
    "message": "Plugin could reveal SSH key passphrase when used inside pipeline",
    "url": "https://jenkins.io/security/advisory/2018-07-30/#SECURITY-704",
    "versions": [
      {
        "lastVersion": "1.15",
        "pattern": "(0|1[.]([0-9]|1[0-5]))(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-840",
    "type": "plugin",
    "name": "tinfoil-scan",
    "message": "Plugin stored API Secret Key in plain text",
    "url": "https://jenkins.io/security/advisory/2018-07-30/#SECURITY-840",
    "versions": [
      {
        "lastVersion": "1.6.1",
        "pattern": "1[.]([0-5]|6[.]1)(|[-.].*)|1[.]6"
      }
    ]
  },
  {
    "id": "SECURITY-847",
    "type": "plugin",
    "name": "meliora-testlab",
    "message": "API Key stored in plain text",
    "url": "https://jenkins.io/security/advisory/2018-07-30/#SECURITY-847",
    "versions": [
      {
        "lastVersion": "1.14",
        "pattern": "1[.]([0-9]|1[0-4])(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-932",
    "type": "plugin",
    "name": "ecutest",
    "message": "Plugin globally and unconditionally disables SSL/TLS certificate validation",
    "url": "https://jenkins.io/security/advisory/2018-07-30/#SECURITY-932",
    "versions": [
      {
        "lastVersion": "2.3",
        "pattern": "(1|2[.][0123])(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-933",
    "type": "plugin",
    "name": "inedo-proget",
    "message": "Plugin globally and unconditionally disables SSL/TLS certificate validation",
    "url": "https://jenkins.io/security/advisory/2018-07-30/#SECURITY-933",
    "versions": [
      {
        "lastVersion": "0.8",
        "pattern": "0(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-935",
    "type": "plugin",
    "name": "inedo-buildmaster",
    "message": "Plugin globally and unconditionally disables SSL/TLS certificate validation",
    "url": "https://jenkins.io/security/advisory/2018-07-30/#SECURITY-935",
    "versions": [
      {
        "lastVersion": "1.3",
        "pattern": "1(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-975",
    "type": "plugin",
    "name": "publish-over-cifs",
    "message": "CSRF vulnerability and missing permission checks",
    "url": "https://jenkins.io/security/advisory/2018-07-30/#SECURITY-975",
    "versions": [
      {
        "lastVersion": "0.10",
        "pattern": "(0[.]([0-9]|10))(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-982",
    "type": "plugin",
    "name": "confluence-publisher",
    "message": "CSRF vulnerability and missing permission checks",
    "url": "https://jenkins.io/security/advisory/2018-07-30/#SECURITY-982",
    "versions": [
      {
        "lastVersion": "2.0.1",
        "pattern": "(1|2[.]0[.]1)(|[-.].*)|2[.]0"
      }
    ]
  },
  {
    "id": "SECURITY-994",
    "type": "plugin",
    "name": "ecutest",
    "message": "CSRF vulnerability and missing permission checks allowed server-side request forgery",
    "url": "https://jenkins.io/security/advisory/2018-07-30/#SECURITY-994",
    "versions": [
      {
        "lastVersion": "2.3",
        "pattern": "(1|2[.][0123])(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-995",
    "type": "plugin",
    "name": "pangolin-testrail-connector",
    "message": "CSRF vulnerability and missing permission checks allowed overriding plugin configuration",
    "url": "https://jenkins.io/security/advisory/2018-07-30/#SECURITY-995",
    "versions": [
      {
        "lastVersion": "2.1",
        "pattern": "2[.]1"
      }
    ]
  },
  {
    "id": "SECURITY-997",
    "type": "plugin",
    "name": "resource-disposer",
    "message": "CSRF vulnerability and missing permission checks",
    "url": "https://jenkins.io/security/advisory/2018-07-30/#SECURITY-997",
    "versions": [
      {
        "lastVersion": "0.11",
        "pattern": "(0[.]([0-9]|1[01]))(|[-.].*)"
      }
    ]
  },
  {
    "id": "core-2_138",
    "type": "core",
    "name": "core",
    "message": "Multiple security vulnerabilities in Jenkins 2.137 and earlier, and LTS 2.121.2 and earlier",
    "url": "https://jenkins.io/security/advisory/2018-08-15/",
    "versions": [
      {
        "lastVersion": "2.137",
        "pattern": "(1[.].*|2[.][0-9]|2[.][0-9][0-9]|2[.]1[012][0-9]|2[.]13[0-7])(|[-].*)"
      },
      {
        "lastVersion": "2.121.2",
        "pattern": "(2[.][0-9]{1,2}[.].+|2[.]107[.].+|2[.]121[.][12])(|[-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1011-1",
    "type": "plugin",
    "name": "argus-notifier",
    "message": "CSRF vulnerability and missing permission checks allowed capturing credentials",
    "url": "https://jenkins.io/security/advisory/2018-09-25/#SECURITY-1011%20%281%29",
    "versions": [
      {
        "lastVersion": "1.0.1",
        "pattern": "(1[.]0[.][01])(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1011-2",
    "type": "plugin",
    "name": "argus-notifier",
    "message": "Unprivileged users with Overall/Read access are able to enumerate credential IDs",
    "url": "https://jenkins.io/security/advisory/2018-09-25/#SECURITY-1011%20%282%29",
    "versions": [
      {
        "lastVersion": "1.0.1",
        "pattern": "(1[.]0[.][01])(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1013-1",
    "type": "plugin",
    "name": "mesos",
    "message": "Unprivileged users with Overall/Read access are able to enumerate credential IDs",
    "url": "https://jenkins.io/security/advisory/2018-09-25/#SECURITY-1013%20%281%29",
    "versions": [
      {
        "lastVersion": "0.17.1",
        "pattern": "(0[.]([0-9]|1[0-7]))(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1013-2",
    "type": "plugin",
    "name": "mesos",
    "message": "Server-side request forgery vulnerability",
    "url": "https://jenkins.io/security/advisory/2018-09-25/#SECURITY-1013%20%282%29",
    "versions": [
      {
        "lastVersion": "0.17.1",
        "pattern": "(0[.]([0-9]|1[0-7]))(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1029",
    "type": "plugin",
    "name": "jira",
    "message": "CSRF vulnerability and missing permission checks allowed capturing credentials",
    "url": "https://jenkins.io/security/advisory/2018-09-25/#SECURITY-1029",
    "versions": [
      {
        "lastVersion": "3.0.1",
        "pattern": "([12]|3[.]0[.][01])(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1050-1",
    "type": "plugin",
    "name": "chatter-notifier",
    "message": "CSRF vulnerability and missing permission checks allowed capturing credentials",
    "url": "https://jenkins.io/security/advisory/2018-09-25/#SECURITY-1050%20%281%29",
    "versions": [
      {
        "lastVersion": "2.0.4",
        "pattern": "(2[.]0[.][01234])(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1050-2",
    "type": "plugin",
    "name": "chatter-notifier",
    "message": "Unprivileged users with Overall/Read access are able to enumerate credential IDs",
    "url": "https://jenkins.io/security/advisory/2018-09-25/#SECURITY-1050%20%282%29",
    "versions": [
      {
        "lastVersion": "2.0.4",
        "pattern": "(2[.]0[.][01234])(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1065",
    "type": "plugin",
    "name": "dimensionsscm",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2018-09-25/#SECURITY-1065",
    "versions": [
      {
        "lastVersion": "0.8.14",
        "pattern": "(0[.](7|8[.]([0-9]|1[0-4])))(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1067",
    "type": "plugin",
    "name": "crowd2",
    "message": "SSRF vulnerability",
    "url": "https://jenkins.io/security/advisory/2018-09-25/#SECURITY-1067",
    "versions": [
      {
        "lastVersion": "2.0.0",
        "pattern": "(1|2[.]0[.]0)(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1068",
    "type": "plugin",
    "name": "crowd2",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2018-09-25/#SECURITY-1068",
    "versions": [
      {
        "lastVersion": "2.0.0",
        "pattern": "(1|2[.]0[.]0)(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1075",
    "type": "plugin",
    "name": "metadata",
    "message": "Cross-Site Scripting vulnerability",
    "url": "https://jenkins.io/security/advisory/2018-09-25/#SECURITY-1075",
    "versions": [
      {
        "lastVersion": "1.1.0b",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1080",
    "type": "plugin",
    "name": "config-file-provider",
    "message": "Cross Site Scripting vulnerability",
    "url": "https://jenkins.io/security/advisory/2018-09-25/#SECURITY-1080",
    "versions": [
      {
        "lastVersion": "3.1",
        "pattern": "([12]|3[.][01])(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1101",
    "type": "plugin",
    "name": "junit",
    "message": "CSRF vulnerability",
    "url": "https://jenkins.io/security/advisory/2018-09-25/#SECURITY-1101",
    "versions": [
      {
        "lastVersion": "1.25",
        "pattern": "(1[.]([0-9]|1[0-9]|2[0-5]))(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1108",
    "type": "plugin",
    "name": "dimensionsscm",
    "message": "CSRF vulnerability and missing permission checks",
    "url": "https://jenkins.io/security/advisory/2018-09-25/#SECURITY-1108",
    "versions": [
      {
        "lastVersion": "0.8.14",
        "pattern": "(0[.](7|8[.]([0-9]|1[0-4])))(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1122",
    "type": "plugin",
    "name": "git-changelog",
    "message": "Stored Cross-Site Scripting vulnerability",
    "url": "https://jenkins.io/security/advisory/2018-09-25/#SECURITY-1122",
    "versions": [
      {
        "lastVersion": "2.6",
        "pattern": "(1|2[.][0-6])(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1125",
    "type": "plugin",
    "name": "emailext-template",
    "message": "CSRF vulnerability",
    "url": "https://jenkins.io/security/advisory/2018-09-25/#SECURITY-1125",
    "versions": [
      {
        "lastVersion": "1.0",
        "pattern": "(0|1[.]0)(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1130",
    "type": "plugin",
    "name": "jobConfigHistory",
    "message": "Reflected Cross Site Scripting vulnerability",
    "url": "https://jenkins.io/security/advisory/2018-09-25/#SECURITY-1130",
    "versions": [
      {
        "lastVersion": "2.18",
        "pattern": "(1|2[.]([0-9]|1[0-7]))(|[-.].*)|2[.]18"
      }
    ]
  },
  {
    "id": "SECURITY-1135",
    "type": "plugin",
    "name": "metadata",
    "message": "Missing permission check allows unauthorized users to change Metadata Plugin configuration",
    "url": "https://jenkins.io/security/advisory/2018-09-25/#SECURITY-1135",
    "versions": [
      {
        "lastVersion": "1.1.0b",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1156",
    "type": "plugin",
    "name": "monitoring",
    "message": "XML External Entity Processing Vulnerability",
    "url": "https://jenkins.io/security/advisory/2018-09-25/#SECURITY-1156",
    "versions": [
      {
        "lastVersion": "1.74",
        "pattern": "(1[.]([2-6][0-9]|7[0-3]))(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1163",
    "type": "plugin",
    "name": "sonar",
    "message": "Server authentication token stored in plain text",
    "url": "https://jenkins.io/security/advisory/2018-09-25/#SECURITY-1163",
    "versions": [
      {
        "lastVersion": "2.8",
        "pattern": "(1|2[.]([0-7]))(|[-.].*)|2.8"
      }
    ]
  },
  {
    "id": "SECURITY-130",
    "type": "plugin",
    "name": "rebuild",
    "message": "Cross Site Scripting vulnerability",
    "url": "https://jenkins.io/security/advisory/2018-09-25/#SECURITY-130",
    "versions": [
      {
        "lastVersion": "1.28",
        "pattern": "(1[.]([0-9]|1[0-9]|2[0-8]))(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-265",
    "type": "plugin",
    "name": "artifactory",
    "message": "Old directly entered credentials stored unencrypted on disk",
    "url": "https://jenkins.io/security/advisory/2018-09-25/#SECURITY-265",
    "versions": [
      {
        "lastVersion": "2.16.1",
        "pattern": "(1|2[.]([0-9]|1[0-5]|16[.][01]))(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-813",
    "type": "plugin",
    "name": "pam-auth",
    "message": "Improper user account validation",
    "url": "https://jenkins.io/security/advisory/2018-09-25/#SECURITY-813",
    "versions": [
      {
        "lastVersion": "1.3",
        "pattern": "(1[.][0-3])(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-845",
    "type": "plugin",
    "name": "publish-over-dropbox",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2018-09-25/#SECURITY-845",
    "versions": [
      {
        "lastVersion": "1.2.4",
        "pattern": "(1[.]([01]|2[.][0-4]))(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-938",
    "type": "plugin",
    "name": "config-file-provider",
    "message": "Cross-site request forgery vulnerability",
    "url": "https://jenkins.io/security/advisory/2018-09-25/#SECURITY-938",
    "versions": [
      {
        "lastVersion": "3.1",
        "pattern": "([12]|3[.][01])(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-948",
    "type": "plugin",
    "name": "arachni-scanner",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2018-09-25/#SECURITY-948",
    "versions": [
      {
        "lastVersion": "0.9.7",
        "pattern": "0(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-972",
    "type": "plugin",
    "name": "mq-notifier",
    "message": "CSRF vulnerability and missing permission checks",
    "url": "https://jenkins.io/security/advisory/2018-09-25/#SECURITY-972",
    "versions": [
      {
        "lastVersion": "1.2.6",
        "pattern": "(1[.]([01]|2[.][0-6]))(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-984-1",
    "type": "plugin",
    "name": "hipchat",
    "message": "CSRF vulnerability and missing permission checks allowed capturing credentials",
    "url": "https://jenkins.io/security/advisory/2018-09-25/#SECURITY-984%20%281%29",
    "versions": [
      {
        "lastVersion": "2.2.0",
        "pattern": "([01]|2[.]([01]|2[.]0))(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-984-2",
    "type": "plugin",
    "name": "hipchat",
    "message": "Unprivileged users with Overall/Read access are able to enumerate credential IDs",
    "url": "https://jenkins.io/security/advisory/2018-09-25/#SECURITY-984%20%282%29",
    "versions": [
      {
        "lastVersion": "2.2.0",
        "pattern": "([01]|2[.]([01]|2[.]0))(|[-.].*)"
      }
    ]
  },
  {
    "id": "core-2_146",
    "type": "core",
    "name": "core",
    "message": "Multiple security vulnerabilities in Jenkins 2.145 and earlier, and LTS 2.138.1 and earlier",
    "url": "https://jenkins.io/security/advisory/2018-10-10/",
    "versions": [
      {
        "lastVersion": "2.145",
        "pattern": "(1[.].*|2[.][0-9]|2[.][0-9][0-9]|2[.]1[0123][0-9]|2[.]14[0-5])(|[-].*)"
      },
      {
        "lastVersion": "2.138.1",
        "pattern": "(2[.][0-9]{1,2}[.].+|2[.](107|121)[.].+|2[.]138[.]1)(|[-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1186-script-security",
    "type": "plugin",
    "name": "script-security",
    "message": "Script Security sandbox bypass",
    "url": "https://jenkins.io/security/advisory/2018-10-29/#SECURITY-1186",
    "versions": [
      {
        "lastVersion": "1.47",
        "pattern": "(1[.]([0-9]|[1-3][0-9]|4[0-7]))(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1186-workflow-cps",
    "type": "plugin",
    "name": "workflow-cps",
    "message": "Script Security sandbox bypass",
    "url": "https://jenkins.io/security/advisory/2018-10-29/#SECURITY-1186",
    "versions": [
      {
        "lastVersion": "2.59",
        "pattern": "(1|2[.]([0-9]|[1-5][0-9]))(|[-.].*)"
      }
    ]
  },
  {
    "id": "core-2_154",
    "type": "core",
    "name": "core",
    "message": "Multiple security vulnerabilities in Jenkins 2.153 and earlier, and LTS 2.138.3 and earlier",
    "url": "https://jenkins.io/security/advisory/2018-12-05/",
    "versions": [
      {
        "lastVersion": "2.153",
        "pattern": "(1[.].*|2[.][0-9]|2[.][0-9][0-9]|2[.]1[01234][0-9]|2[.]15[0-3])(|[-].*)"
      },
      {
        "lastVersion": "2.138.3",
        "pattern": "(2[.][0-9]{1,2}[.].+|2[.](107|121)[.].+|2[.]138[.][123])(|[-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1266-pipeline-model-definition",
    "type": "plugin",
    "name": "pipeline-model-definition",
    "message": "Script Security sandbox bypass",
    "url": "https://jenkins.io/security/advisory/2019-01-08/#SECURITY-1266",
    "versions": [
      {
        "lastVersion": "1.3.4",
        "pattern": "(?!1[.]3[.]4[.].*)(0|1[.]([0-2]|3$|3[.][1-4]))(|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1266-script-security",
    "type": "plugin",
    "name": "script-security",
    "message": "Script Security sandbox bypass",
    "url": "https://jenkins.io/security/advisory/2019-01-08/#SECURITY-1266",
    "versions": [
      {
        "lastVersion": "1.49",
        "pattern": "(1[.]([0-9]|[1-4][0-9]))(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1266-workflow-cps",
    "type": "plugin",
    "name": "workflow-cps",
    "message": "Script Security sandbox bypass",
    "url": "https://jenkins.io/security/advisory/2019-01-08/#SECURITY-1266",
    "versions": [
      {
        "lastVersion": "2.61",
        "pattern": "(?!2[.]61[.].*)(1|2[.]([0-9]|[1-5][0-9]|6[01]))(|[.-].*)"
      }
    ]
  },
  {
    "id": "core-2_160",
    "type": "core",
    "name": "core",
    "message": "Multiple security vulnerabilities in Jenkins 2.159 and earlier, and LTS 2.150.1 and earlier",
    "url": "https://jenkins.io/security/advisory/2019-01-16/",
    "versions": [
      {
        "lastVersion": "2.159",
        "pattern": "(1[.].*|2[.][0-9]|2[.][0-9][0-9]|2[.]1[012345][0-9])(|[-].*)"
      },
      {
        "lastVersion": "2.150.1",
        "pattern": "(2[.][0-9]{1,2}[.].+|2[.](107|121|138)[.].+|2[.]150[.]1)(|[-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1095",
    "type": "plugin",
    "name": "git",
    "message": "CSRF vulnerability",
    "url": "https://jenkins.io/security/advisory/2019-01-28/#SECURITY-1095",
    "versions": [
      {
        "lastVersion": "3.9.1",
        "pattern": "([1-2]|3[.]([0-8]|9[.][0-1]))(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1102",
    "type": "plugin",
    "name": "token-macro",
    "message": "Information disclosure and DoS",
    "url": "https://jenkins.io/security/advisory/2019-01-28/#SECURITY-1102",
    "versions": [
      {
        "lastVersion": "2.5",
        "pattern": "(1|2[.]([0-4]|5))(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1153",
    "type": "plugin",
    "name": "monitoring",
    "message": "CSRF vulnerability",
    "url": "https://jenkins.io/security/advisory/2019-01-28/#SECURITY-1153",
    "versions": [
      {
        "lastVersion": "1.74.0",
        "pattern": "1[.]([2-6][0-9]|7[0-4])(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1154",
    "type": "plugin",
    "name": "monitoring",
    "message": "Clickjacking vulnerability",
    "url": "https://jenkins.io/security/advisory/2019-01-28/#SECURITY-1154",
    "versions": [
      {
        "lastVersion": "1.74.0",
        "pattern": "1[.]([2-6][0-9]|7[0-4])(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1201",
    "type": "plugin",
    "name": "blueocean",
    "message": "CSRF vulnerability",
    "url": "https://jenkins.io/security/advisory/2019-01-28/#SECURITY-1201",
    "versions": [
      {
        "lastVersion": "1.10.1",
        "pattern": "1[.]([0-9]|10[.][0-1])(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1204",
    "type": "plugin",
    "name": "blueocean",
    "message": "XSS vulnerability",
    "url": "https://jenkins.io/security/advisory/2019-01-28/#SECURITY-1204",
    "versions": [
      {
        "lastVersion": "1.10.1",
        "pattern": "1[.]([0-9]|10[.][0-1])(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1253",
    "type": "plugin",
    "name": "config-file-provider",
    "message": "XSS vulnerability",
    "url": "https://jenkins.io/security/advisory/2019-01-28/#SECURITY-1253",
    "versions": [
      {
        "lastVersion": "3.4.1",
        "pattern": "([1-2]|3[.][0-4])(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1271",
    "type": "plugin",
    "name": "warnings-ng",
    "message": "XSS vulnerability",
    "url": "https://jenkins.io/security/advisory/2019-01-28/#SECURITY-1271",
    "versions": [
      {
        "lastVersion": "1.0.1",
        "pattern": "1[.]0[.][0-1](|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1292",
    "type": "plugin",
    "name": "script-security",
    "message": "Script Security sandbox bypass",
    "url": "https://jenkins.io/security/advisory/2019-01-28/#SECURITY-1292",
    "versions": [
      {
        "lastVersion": "1.50",
        "pattern": "(1[.]([0-9]|[1-4][0-9]|50))(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1293",
    "type": "plugin",
    "name": "groovy",
    "message": "Script Security sandbox bypass",
    "url": "https://jenkins.io/security/advisory/2019-01-28/#SECURITY-1293",
    "versions": [
      {
        "lastVersion": "2.0",
        "pattern": "(1|2[.]0)(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1295/1",
    "type": "plugin",
    "name": "warnings",
    "message": "Script Security sandbox bypass",
    "url": "https://jenkins.io/security/advisory/2019-01-28/#SECURITY-1295%20%281%29",
    "versions": [
      {
        "lastVersion": "5.0.0",
        "pattern": "([1-4]|5[.]0[.]0)(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1295/2",
    "type": "plugin",
    "name": "warnings-ng",
    "message": "Script Security sandbox bypass",
    "url": "https://jenkins.io/security/advisory/2019-01-28/#SECURITY-1295%20%282%29",
    "versions": [
      {
        "lastVersion": "2.1.1",
        "pattern": "(1|2[.](0|1[.][0-1]))(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1302",
    "type": "plugin",
    "name": "job-import-plugin",
    "message": "CSRF vulnerability",
    "url": "https://jenkins.io/security/advisory/2019-01-28/#SECURITY-1302",
    "versions": [
      {
        "lastVersion": "3.0",
        "pattern": "([1-2]|3[.]0)(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-602",
    "type": "plugin",
    "name": "github-oauth",
    "message": "Client secret displayed in plain text",
    "url": "https://jenkins.io/security/advisory/2019-01-28/#SECURITY-602",
    "versions": [
      {
        "lastVersion": "0.29",
        "pattern": "(0[.]([0-9]|([0-2][0-9])))(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-797",
    "type": "plugin",
    "name": "github-oauth",
    "message": "Session fixation vulnerability",
    "url": "https://jenkins.io/security/advisory/2019-01-28/#SECURITY-797",
    "versions": [
      {
        "lastVersion": "0.29",
        "pattern": "(0[.]([0-9]|([0-2][0-9])))(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-818",
    "type": "plugin",
    "name": "kanboard",
    "message": "CSRF vulnerability",
    "url": "https://jenkins.io/security/advisory/2019-01-28/#SECURITY-818",
    "versions": [
      {
        "lastVersion": "1.5.10",
        "pattern": "1[.]5[.]([0-9]|10)(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-859",
    "type": "plugin",
    "name": "active-directory",
    "message": "Improper certificate validation",
    "url": "https://jenkins.io/security/advisory/2019-01-28/#SECURITY-859",
    "versions": [
      {
        "lastVersion": "2.10",
        "pattern": "(1|2[.]([0-9]|10))(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-886",
    "type": "plugin",
    "name": "oic-auth",
    "message": "Client secret displayed in plain text",
    "url": "https://jenkins.io/security/advisory/2019-01-28/#SECURITY-886",
    "versions": [
      {
        "lastVersion": "1.4",
        "pattern": "1[.][0-4](|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-905/1",
    "type": "plugin",
    "name": "job-import-plugin",
    "message": "XXE vulnerability",
    "url": "https://jenkins.io/security/advisory/2019-01-28/#SECURITY-905%20%281%29",
    "versions": [
      {
        "lastVersion": "2.1",
        "pattern": "[1-2](|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-905/2",
    "type": "plugin",
    "name": "job-import-plugin",
    "message": "CSRF vulnerability",
    "url": "https://jenkins.io/security/advisory/2019-01-28/#SECURITY-905%20%282%29",
    "versions": [
      {
        "lastVersion": "2.1",
        "pattern": "[1-2](|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1033",
    "type": "plugin",
    "name": "jms-messaging",
    "message": "SSRF vulnerability",
    "url": "https://jenkins.io/security/advisory/2019-02-19/#SECURITY-1033",
    "versions": [
      {
        "lastVersion": "1.1.1",
        "pattern": "(1[.]0|1[.]1[.][01])(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1070",
    "type": "plugin",
    "name": "ease-plugin",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-02-19/#SECURITY-1070",
    "versions": [
      {
        "lastVersion": "1.2.12",
        "pattern": "1(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1320",
    "type": "plugin",
    "name": "script-security",
    "message": "Script Security sandbox bypass",
    "url": "https://jenkins.io/security/advisory/2019-02-19/#SECURITY-1320",
    "versions": [
      {
        "lastVersion": "1.52",
        "pattern": "(1[.]([0-9]|[1-4][0-9]|5[0-2]))(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-817",
    "type": "plugin",
    "name": "octopusdeploy",
    "message": "SSRF vulnerability",
    "url": "https://jenkins.io/security/advisory/2019-02-19/#SECURITY-817",
    "versions": [
      {
        "lastVersion": "1.8.1",
        "pattern": "(1[.][0-8])(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-876",
    "type": "plugin",
    "name": "cloudfoundry",
    "message": "CSRF vulnerability and missing permission checks allowed capturing credentials",
    "url": "https://jenkins.io/security/advisory/2019-02-19/#SECURITY-876",
    "versions": [
      {
        "lastVersion": "2.3.1",
        "pattern": "(1|2[.][012]|2[.]3[.][01])(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-937",
    "type": "plugin",
    "name": "electricflow",
    "message": "SSL/TLS certification validation in Jenkins globally disabled",
    "url": "https://jenkins.io/security/advisory/2019-02-19/#SECURITY-937",
    "versions": [
      {
        "lastVersion": "1.1.4",
        "pattern": "(1[.]0|1[.]1[.][0-4])(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-951",
    "type": "plugin",
    "name": "acunetix",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-02-19/#SECURITY-951",
    "versions": [
      {
        "lastVersion": "1.0.0",
        "pattern": "1[.]0[.]0(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-980",
    "type": "plugin",
    "name": "acunetix",
    "message": "SSRF vulnerability",
    "url": "https://jenkins.io/security/advisory/2019-02-19/#SECURITY-980",
    "versions": [
      {
        "lastVersion": "1.0.0",
        "pattern": "1[.]0[.]0(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-985",
    "type": "plugin",
    "name": "mattermost",
    "message": "SSRF vulnerability",
    "url": "https://jenkins.io/security/advisory/2019-02-19/#SECURITY-985",
    "versions": [
      {
        "lastVersion": "2.6.2",
        "pattern": "(1|2[.][0-5]|2[.]6[.][0-2])(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1038",
    "type": "plugin",
    "name": "osf-builder-suite-for-sfcc-deploy",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-03-06/#SECURITY-1038",
    "versions": [
      {
        "lastVersion": "1.0.10",
        "pattern": "1[.]0[.]([0-9]|10)(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1087",
    "type": "plugin",
    "name": "appdynamics-dashboard",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-03-06/#SECURITY-1087",
    "versions": [
      {
        "lastVersion": "1.0.14",
        "pattern": "1[.]0[.]([0-9]|1[0-4])(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1088",
    "type": "plugin",
    "name": "testdroid-run-in-cloud",
    "message": "Unprotected HTTP endpoint allowed server-side request forgery, unauthorized configuration changes",
    "url": "https://jenkins.io/security/advisory/2019-03-06/#SECURITY-1088",
    "versions": [
      {
        "lastVersion": "2.69.1",
        "pattern": "(1|2[.][0-6][0-9])(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1330",
    "type": "plugin",
    "name": "azure-vm-agents",
    "message": "Information disclosure",
    "url": "https://jenkins.io/security/advisory/2019-03-06/#SECURITY-1330",
    "versions": [
      {
        "lastVersion": "0.8.0",
        "pattern": "0[.]([1-7]|8[.]0)(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1331",
    "type": "plugin",
    "name": "azure-vm-agents",
    "message": "Unauthorized users could change agent IP configuration",
    "url": "https://jenkins.io/security/advisory/2019-03-06/#SECURITY-1331",
    "versions": [
      {
        "lastVersion": "0.8.0",
        "pattern": "0[.]([1-7]|8[.]0)(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1332",
    "type": "plugin",
    "name": "azure-vm-agents",
    "message": "Users with Overall/Read access can enumerate credential IDs",
    "url": "https://jenkins.io/security/advisory/2019-03-06/#SECURITY-1332",
    "versions": [
      {
        "lastVersion": "0.8.0",
        "pattern": "0[.]([1-7]|8[.]0)(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1336/1",
    "type": "plugin",
    "name": "script-security",
    "message": "Script security sandbox bypass",
    "url": "https://jenkins.io/security/advisory/2019-03-06/#SECURITY-1336%20(1)",
    "versions": [
      {
        "lastVersion": "1.53",
        "pattern": "(1[.]([0-9]|[1-4][0-9]|5[0-3]))(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1336/2",
    "type": "plugin",
    "name": "workflow-cps",
    "message": "Script security sandbox bypass",
    "url": "https://jenkins.io/security/advisory/2019-03-06/#SECURITY-1336%20(2)",
    "versions": [
      {
        "lastVersion": "2.63",
        "pattern": "(1|2[.]([0-9]|[1-5][0-9]|6[0-3]))(|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1338",
    "type": "plugin",
    "name": "groovy",
    "message": "Script security sandbox bypass",
    "url": "https://jenkins.io/security/advisory/2019-03-06/#SECURITY-1338",
    "versions": [
      {
        "lastVersion": "2.1",
        "pattern": "(1|2[.][01])(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1339",
    "type": "plugin",
    "name": "matrix-project",
    "message": "Script security sandbox bypass",
    "url": "https://jenkins.io/security/advisory/2019-03-06/#SECURITY-1339",
    "versions": [
      {
        "lastVersion": "1.13",
        "pattern": "1[.]([0-9]|1[0-3])(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1340",
    "type": "plugin",
    "name": "email-ext",
    "message": "Script security sandbox bypass",
    "url": "https://jenkins.io/security/advisory/2019-03-06/#SECURITY-1340",
    "versions": [
      {
        "lastVersion": "2.64",
        "pattern": "2[.]([0-9]|[12345][0-9]|6[0-4])(|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1342",
    "type": "plugin",
    "name": "job-dsl",
    "message": "Script security sandbox bypass",
    "url": "https://jenkins.io/security/advisory/2019-03-06/#SECURITY-1342",
    "versions": [
      {
        "lastVersion": "1.71",
        "pattern": "1[.]([0-9]|[1-6][0-9]|7[01])(|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-848",
    "type": "plugin",
    "name": "rabbitmq-publisher",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-03-06/#SECURITY-848",
    "versions": [
      {
        "lastVersion": "1.0",
        "pattern": "1[.]0(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-958",
    "type": "plugin",
    "name": "repository-connector",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-03-06/#SECURITY-958",
    "versions": [
      {
        "lastVersion": "1.2.4",
        "pattern": "(0|1[.]([01]|2[.][0-4]))(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-970",
    "type": "plugin",
    "name": "rabbitmq-publisher",
    "message": "Server-side request forgery",
    "url": "https://jenkins.io/security/advisory/2019-03-06/#SECURITY-970",
    "versions": [
      {
        "lastVersion": "1.0",
        "pattern": "1[.]0(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1086",
    "type": "plugin",
    "name": "codebeamer-result-trend-updater",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-03-25/#SECURITY-1086",
    "versions": [
      {
        "lastVersion": "1.1.3",
        "pattern": "1[.](0([.].*)|1(|[.]3))"
      }
    ]
  },
  {
    "id": "SECURITY-1089",
    "type": "plugin",
    "name": "prqa-plugin",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-03-25/#SECURITY-1089",
    "versions": [
      {
        "lastVersion": "3.1.0",
        "pattern": "(0|1|2|3[.](0|1[.]0))(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1328",
    "type": "plugin",
    "name": "ease",
    "message": "Unprivileged users with Overall/Read access are able to enumerate credential IDs",
    "url": "https://jenkins.io/security/advisory/2019-03-25/#SECURITY-1328",
    "versions": [
      {
        "lastVersion": "2.1",
        "pattern": "(1|2[.](0|1))(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1353-script-security",
    "type": "plugin",
    "name": "script-security",
    "message": "Script Security sandbox bypass",
    "url": "https://jenkins.io/security/advisory/2019-03-25/#SECURITY-1353",
    "versions": [
      {
        "lastVersion": "1.55",
        "pattern": "(1[.]([0-9]|[1-4][0-9]|5[0-5]))(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1353-workflow-cps",
    "type": "plugin",
    "name": "workflow-cps",
    "message": "Script Security sandbox bypass",
    "url": "https://jenkins.io/security/advisory/2019-03-25/#SECURITY-1353",
    "versions": [
      {
        "lastVersion": "2.64",
        "pattern": "(1|2[.]([0-9]|[1-5][0-9]|6[0-4]))(|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1361",
    "type": "plugin",
    "name": "lockable-resources",
    "message": "XSS vulnerability",
    "url": "https://jenkins.io/security/advisory/2019-03-25/#SECURITY-1361",
    "versions": [
      {
        "lastVersion": "2.4",
        "pattern": "(1|2[.]([0-4]))(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-846",
    "type": "plugin",
    "name": "ecs-publisher",
    "message": "API token stored and displayed in plain text",
    "url": "https://jenkins.io/security/advisory/2019-03-25/#SECURITY-846",
    "versions": [
      {
        "lastVersion": "1.0.0",
        "pattern": "1[.]0[.]0"
      }
    ]
  },
  {
    "id": "SECURITY-976",
    "type": "plugin",
    "name": "slack",
    "message": "CSRF vulnerability and missing permission checks allowed capturing credentials",
    "url": "https://jenkins.io/security/advisory/2019-03-25/#SECURITY-976",
    "versions": [
      {
        "lastVersion": "2.19",
        "pattern": "(1|2[.]([0-9]|1[0-9]))(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-992",
    "type": "plugin",
    "name": "fortify-on-demand-uploader",
    "message": "SSRF vulnerability",
    "url": "https://jenkins.io/security/advisory/2019-03-25/#SECURITY-992",
    "versions": [
      {
        "lastVersion": "3.0.10",
        "pattern": "([0-2]|3[.]0[.]([0-9]|10))(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1031",
    "type": "plugin",
    "name": "jabber-server-plugin",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1031",
    "versions": [
      {
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1032",
    "type": "plugin",
    "name": "netsparker-cloud-scan",
    "message": "CSRF vulnerability and missing permission check allowed SSRF",
    "url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1032",
    "versions": [
      {
        "lastVersion": "1.1.5",
        "pattern": "(1[.]1[.][0-5])(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1037",
    "type": "plugin",
    "name": "sinatra-chef-builder",
    "message": "CSRF vulnerability and missing permission check allow SSRF",
    "url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1037",
    "versions": [
      {
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1040",
    "type": "plugin",
    "name": "netsparker-cloud-scan",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1040",
    "versions": [
      {
        "lastVersion": "1.1.5",
        "pattern": "(1[.]1[.][0-5])(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1041",
    "type": "plugin",
    "name": "zap",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1041",
    "versions": [
      {
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1042",
    "type": "plugin",
    "name": "jenkins-cloudformation-plugin",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1042",
    "versions": [
      {
        "lastVersion": "1.2",
        "pattern": "(0|1[.][02])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1043",
    "type": "plugin",
    "name": "fabric-beta-publisher",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1043",
    "versions": [
      {
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1044",
    "type": "plugin",
    "name": "upload-pgyer",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1044",
    "versions": [
      {
        "lastVersion": "1.32",
        "pattern": "(1[.]([0-9]|[0-2][0-9]|3[0|1]))(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1054",
    "type": "plugin",
    "name": "cloudtest",
    "message": "CSRF vulnerability and missing permission check allow SSRF",
    "url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1054",
    "versions": [
      {
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1055",
    "type": "plugin",
    "name": "kmap-jenkins",
    "message": "CSRF vulnerability and missing permission check allow SSRF",
    "url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1055",
    "versions": [
      {
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1056",
    "type": "plugin",
    "name": "kmap-jenkins",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1056",
    "versions": [
      {
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1058",
    "type": "plugin",
    "name": "nomad",
    "message": "CSRF vulnerability and missing permission check allow SSRF",
    "url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1058",
    "versions": [
      {
        "pattern": "(0[.][1-5]|0[.]6[.][01])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1059",
    "type": "plugin",
    "name": "open-stf",
    "message": "Open STF Plugin stores credentials in plain text",
    "url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1059",
    "versions": [
      {
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1061",
    "type": "plugin",
    "name": "perfectomobile",
    "message": "Perfecto Mobile Plugin stores credentials in plain text",
    "url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1061",
    "versions": [
      {
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1062",
    "type": "plugin",
    "name": "TestFairy",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1062",
    "versions": [
      {
        "lastVersion": "4.16",
        "pattern": "([123]|4[.]([0-9]|1[0-6]))(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1063",
    "type": "plugin",
    "name": "crittercism-dsym",
    "message": "API key stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1063",
    "versions": [
      {
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1066",
    "type": "plugin",
    "name": "sra-deploy",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1066",
    "versions": [
      {
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1069",
    "type": "plugin",
    "name": "crowd",
    "message": "Crowd Integration Plugin stores credentials in plain text",
    "url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1069",
    "versions": [
      {
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1084",
    "type": "plugin",
    "name": "openid",
    "message": "CSRF vulnerability and missing permission check allow SSRF",
    "url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1084",
    "versions": [
      {
        "lastVersion": "2.3.0",
        "pattern": "(1|2[.][0-3])(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1085",
    "type": "plugin",
    "name": "starteam",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1085",
    "versions": [
      {
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1090",
    "type": "plugin",
    "name": "sametime",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1090",
    "versions": [
      {
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1091",
    "type": "plugin",
    "name": "jenkins-reviewbot",
    "message": "CSRF vulnerability and missing permission check allow SSRF",
    "url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1091",
    "versions": [
      {
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1092",
    "type": "plugin",
    "name": "koji",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1092",
    "versions": [
      {
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1093",
    "type": "plugin",
    "name": "assembla-auth",
    "message": "Assembla Auth Plugin stores credentials in plain text",
    "url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1093",
    "versions": [
      {
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-828",
    "type": "plugin",
    "name": "relution-publisher",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-828",
    "versions": [
      {
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-829",
    "type": "plugin",
    "name": "ircbot",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-829",
    "versions": [
      {
        "lastVersion": "2.35",
        "pattern": "(1|2[.][0-9]|2[.][1-2][0-9]|2[.][3][0-5])([.-].+|)"
      }
    ]
  },
  {
    "id": "SECURITY-830",
    "type": "plugin",
    "name": "aws-cloudwatch-logs-publisher",
    "message": "AWS CloudWatch Logs Publisher Plugin stores credentials in plain text",
    "url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-830",
    "versions": [
      {
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-831",
    "type": "plugin",
    "name": "aws-beanstalk-publisher-plugin",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-831",
    "versions": [
      {
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-832",
    "type": "plugin",
    "name": "snsnotify",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-832",
    "versions": [
      {
        "pattern": "1(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-835",
    "type": "plugin",
    "name": "aws-device-farm",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-835",
    "versions": [
      {
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-837",
    "type": "plugin",
    "name": "jenkins-jira-issue-updater",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-837",
    "versions": [
      {
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-838",
    "type": "plugin",
    "name": "cloudshare-docker",
    "message": "CloudShare Docker-Machine Plugin stores credentials in plain text",
    "url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-838",
    "versions": [
      {
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-839",
    "type": "plugin",
    "name": "hockeyapp",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-839",
    "versions": [
      {
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-841",
    "type": "plugin",
    "name": "bugzilla",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-841",
    "versions": [
      {
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-842",
    "type": "plugin",
    "name": "trac-publisher-plugin",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-842",
    "versions": [
      {
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-843",
    "type": "plugin",
    "name": "klaros-testmanagement",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-843",
    "versions": [
      {
        "lastVersion": "2.0.0",
        "pattern": "(1|2[.]0)(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-945",
    "type": "plugin",
    "name": "vmware-vrealize-automation-plugin",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-945",
    "versions": [
      {
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-946",
    "type": "plugin",
    "name": "mabl-integration",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-946",
    "versions": [
      {
        "lastVersion": "0.0.18",
        "pattern": "(0[.]0[.]1[0-8]|0[.]0[.][5-9])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-947",
    "type": "plugin",
    "name": "diawi-upload",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-947",
    "versions": [
      {
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-949",
    "type": "plugin",
    "name": "aqua-security-scanner",
    "message": "Aqua Security Scanner Plugin stores credentials in plain text",
    "url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-949",
    "versions": [
      {
        "lastVersion": "3.0.15",
        "pattern": "(1|2|3[.]0[.]([0-9]|1[0-5]))(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-952",
    "type": "plugin",
    "name": "veracode-scanner",
    "message": "veracode-scanner Plugin stores credentials in plain text",
    "url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-952",
    "versions": [
      {
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-954",
    "type": "plugin",
    "name": "ftppublisher",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-954",
    "versions": [
      {
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-955",
    "type": "plugin",
    "name": "minio-storage",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-955",
    "versions": [
      {
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-956",
    "type": "plugin",
    "name": "websphere-deployer",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-956",
    "versions": [
      {
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-957",
    "type": "plugin",
    "name": "octopusdeploy",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-957",
    "versions": [
      {
        "lastVersion": "1.9.0",
        "pattern": "1(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-959",
    "type": "plugin",
    "name": "deployhub",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-959",
    "versions": [
      {
        "lastVersion": "8.0.13",
        "pattern": "8[.]0[.]([0-9]|1[0-3])(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-960",
    "type": "plugin",
    "name": "cloudcoreo-deploytime",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-960",
    "versions": [
      {
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-961",
    "type": "plugin",
    "name": "wildfly-deployer",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-961",
    "versions": [
      {
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-962",
    "type": "plugin",
    "name": "vsts-cd",
    "message": "VS Team Services Continuous Deployment Plugin stores credentials in plain text",
    "url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-962",
    "versions": [
      {
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-963",
    "type": "plugin",
    "name": "youtrack-plugin",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-963",
    "versions": [
      {
        "lastVersion": "0.7.1",
        "pattern": "(0[.][1-6]|0[.]7[.]1)(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-964",
    "type": "plugin",
    "name": "hyper-commons",
    "message": "Hyper.sh Commons Plugin stores credentials in plain text",
    "url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-964",
    "versions": [
      {
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-965",
    "type": "plugin",
    "name": "bitbucket-approve",
    "message": "Bitbucket Approve Plugin stores credentials in plain text",
    "url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-965",
    "versions": [
      {
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-966",
    "type": "plugin",
    "name": "audit2db",
    "message": "Audit to Database Plugin stores credentials in plain text",
    "url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-966",
    "versions": [
      {
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-974",
    "type": "plugin",
    "name": "ftppublisher",
    "message": "CSRF vulnerability and missing permission check allow connecting to arbitrary FTP servers",
    "url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-974",
    "versions": [
      {
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-977",
    "type": "plugin",
    "name": "audit2db",
    "message": "CSRF vulnerability and missing permission check allow connecting to arbitrary databases",
    "url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-977",
    "versions": [
      {
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-979",
    "type": "plugin",
    "name": "labmanager",
    "message": "CSRF vulnerability and missing permission check",
    "url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-979",
    "versions": [
      {
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-981",
    "type": "plugin",
    "name": "openshift-deployer",
    "message": "CSRF vulnerability and missing permission check",
    "url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-981",
    "versions": [
      {
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-991",
    "type": "plugin",
    "name": "gearman-plugin",
    "message": "CSRF vulnerability and missing permission check",
    "url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-991",
    "versions": [
      {
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-993",
    "type": "plugin",
    "name": "zephyr-enterprise-test-management",
    "message": "CSRF vulnerability and missing permission check allow SSRF",
    "url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-993",
    "versions": [
      {
        "pattern": "(1[.][0-6])(|[-.].*)"
      }
    ]
  },
  {
    "id": "core-2_172",
    "type": "core",
    "name": "core",
    "message": "Multiple security vulnerabilities in Jenkins 2.171 and earlier, and LTS 2.164.1 and earlier",
    "url": "https://jenkins.io/security/advisory/2019-04-10/",
    "versions": [
      {
        "lastVersion": "2.171",
        "pattern": "(1[.].*|2[.][0-9]|2[.][0-9][0-9]|2[.]1[0123456][0-9]|170)(|[-].*)"
      },
      {
        "lastVersion": "2.164.1",
        "pattern": "(2[.][0-9]{1,2}[.].+|2[.](107|121|138|150)[.].+|2[.]164[.]1)(|[-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1341",
    "type": "plugin",
    "name": "ontrack",
    "message": "Script security sandbox bypass",
    "url": "https://jenkins.io/security/advisory/2019-04-17/#SECURITY-1341",
    "versions": [
      {
        "lastVersion": "3.4",
        "pattern": "(2|3[.]([0-3]))(|[.-].*)|3[.]4"
      }
    ]
  },
  {
    "id": "SECURITY-1357",
    "type": "plugin",
    "name": "gitlab-plugin",
    "message": "CSRF vulnerability and missing permission checks allowed capturing credentials",
    "url": "https://jenkins.io/security/advisory/2019-04-17/#SECURITY-1357",
    "versions": [
      {
        "lastVersion": "1.5.11",
        "pattern": "(1[.]([0-4]|5[.]([0-9]|1[01])))(|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-836",
    "type": "plugin",
    "name": "jira-ext",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-04-17/#SECURITY-836",
    "versions": [
      {
        "lastVersion": "0.8",
        "pattern": "(0[.][1-8])(|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-844",
    "type": "plugin",
    "name": "azure-publishersettings-credentials",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-04-17/#SECURITY-844",
    "versions": [
      {
        "lastVersion": "1.2",
        "pattern": "(1[.][0-2])(|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-983",
    "type": "plugin",
    "name": "deployit-plugin",
    "message": "CSRF vulnerability and missing permission check allow SSRF",
    "url": "https://jenkins.io/security/advisory/2019-04-17/#SECURITY-983",
    "versions": [
      {
        "lastVersion": "7.5.5",
        "pattern": "([3-6][.][0-9][.][0-9]|[7][.][0-5][.][0-4])"
      }
    ]
  },
  {
    "id": "SECURITY-1100",
    "type": "plugin",
    "name": "analysis-core",
    "message": "CSRF vulnerability allowed changing graph configuration",
    "url": "https://jenkins.io/security/advisory/2019-04-30/#SECURITY-1100",
    "versions": [
      {
        "lastVersion": "1.95",
        "pattern": "(1[.]([0-8][0-9]|9[0-5]))(|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1143",
    "type": "plugin",
    "name": "twitter",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-04-30/#SECURITY-1143",
    "versions": [
      {
        "lastVersion": "0.7",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1252",
    "type": "plugin",
    "name": "swarm",
    "message": "XXE vulnerability via UDP broadcast response in Swarm client",
    "url": "https://jenkins.io/security/advisory/2019-04-30/#SECURITY-1252",
    "versions": [
      {
        "lastVersion": "3.16",
        "pattern": "([12]|3[.]([0-9]|1[0-6]))(|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1355-1",
    "type": "plugin",
    "name": "ansible-tower",
    "message": "CSRF vulnerability and missing permission check allowed capturing credentials",
    "url": "https://jenkins.io/security/advisory/2019-04-30/#SECURITY-1355%20(1)",
    "versions": [
      {
        "lastVersion": "0.9.1",
        "pattern": "(0[.][5-8]|0[.]9[.][01])(|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1355-2",
    "type": "plugin",
    "name": "ansible-tower",
    "message": "Users with Overall/Read access are able to enumerate credential IDs",
    "url": "https://jenkins.io/security/advisory/2019-04-30/#SECURITY-1355%20(2)",
    "versions": [
      {
        "lastVersion": "0.9.1",
        "pattern": "(0[.][5-8]|0[.]9[.][01])(|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1380",
    "type": "plugin",
    "name": "aqua-microscanner",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-04-30/#SECURITY-1380",
    "versions": [
      {
        "lastVersion": "1.0.5",
        "pattern": "(1[.]0[.][1-5])(|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1390",
    "type": "plugin",
    "name": "azure-ad",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-04-30/#SECURITY-1390",
    "versions": [
      {
        "lastVersion": "0.3.3",
        "pattern": "(0[.][12]|0[.]3[.][0-3])(|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-443",
    "type": "plugin",
    "name": "github-oauth",
    "message": "CSRF vulnerability in OAuth callback",
    "url": "https://jenkins.io/security/advisory/2019-04-30/#SECURITY-443",
    "versions": [
      {
        "lastVersion": "0.31",
        "pattern": "(0[.]([0-9]|[12][0-9]|3[01]))(|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-930",
    "type": "plugin",
    "name": "sitemonitor",
    "message": "SSL/TLS certificate validation globally and unconditionally disabled",
    "url": "https://jenkins.io/security/advisory/2019-04-30/#SECURITY-930",
    "versions": [
      {
        "lastVersion": "0.5",
        "pattern": "(0[.][0-5])(|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-936",
    "type": "plugin",
    "name": "koji",
    "message": "SSL/TLS certificate validation globally and unconditionally disabled",
    "url": "https://jenkins.io/security/advisory/2019-04-30/#SECURITY-936",
    "versions": [
      {
        "lastVersion": "0.3",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1316",
    "type": "plugin",
    "name": "pam-auth",
    "message": "Missing permission check allowed obtaining limited information about system configuration",
    "url": "https://jenkins.io/security/advisory/2019-05-21/#SECURITY-1316",
    "versions": [
      {
        "lastVersion": "1.5",
        "pattern": "1[.][0-5]"
      }
    ]
  },
  {
    "id": "SECURITY-1322",
    "type": "plugin",
    "name": "credentials",
    "message": "Certificate file read vulnerability",
    "url": "https://jenkins.io/security/advisory/2019-05-21/#SECURITY-1322",
    "versions": [
      {
        "lastVersion": "2.1.18",
        "pattern": "(1|2[.](0|1[.]([0-9]|1[0-8])))(|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1015-1",
    "type": "plugin",
    "name": "artifactory",
    "message": "CSRF vulnerability and missing permission check allow capturing credentials",
    "url": "https://jenkins.io/security/advisory/2019-05-31/#SECURITY-1015%20(1)",
    "versions": [
      {
        "lastVersion": "3.2.2",
        "pattern": "([12]|3[.]([01]|2[.][012]))(|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1015-2",
    "type": "plugin",
    "name": "artifactory",
    "message": "Users with Overall/Read access could enumerate credential IDs",
    "url": "https://jenkins.io/security/advisory/2019-05-31/#SECURITY-1015%20(2)",
    "versions": [
      {
        "lastVersion": "3.2.3",
        "pattern": "([12]|3[.]([01]|2[.][0123]))(|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1046",
    "type": "plugin",
    "name": "gitea",
    "message": "Improper handling of untrusted branches",
    "url": "https://jenkins.io/security/advisory/2019-05-31/#SECURITY-1046",
    "versions": [
      {
        "lastVersion": "1.1.1",
        "pattern": "(1[.](0|1[.][0-1]))(|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1347",
    "type": "plugin",
    "name": "artifactory",
    "message": "CSRF vulnerability",
    "url": "https://jenkins.io/security/advisory/2019-05-31/#SECURITY-1347",
    "versions": [
      {
        "lastVersion": "3.2.2",
        "pattern": "([12]|3[.]([01]|2[.][012]))(|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1373",
    "type": "plugin",
    "name": "warnings-ng",
    "message": "Persisted XSS vulnerability",
    "url": "https://jenkins.io/security/advisory/2019-05-31/#SECURITY-1373",
    "versions": [
      {
        "lastVersion": "5.0.0",
        "pattern": "([1-4]|5[.]0[.]0)(|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1391",
    "type": "plugin",
    "name": "warnings-ng",
    "message": "CSRF vulnerability",
    "url": "https://jenkins.io/security/advisory/2019-05-31/#SECURITY-1391",
    "versions": [
      {
        "lastVersion": "5.0.0",
        "pattern": "([1-4]|5[.]0[.]0)(|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1403",
    "type": "plugin",
    "name": "influxdb",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-05-31/#SECURITY-1403",
    "versions": [
      {
        "lastVersion": "1.21",
        "pattern": "(1[.]([0-9]|1[0-9]|2[01]))(|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1409",
    "type": "plugin",
    "name": "pipeline-maven",
    "message": "XML External Entity processing vulnerability",
    "url": "https://jenkins.io/security/advisory/2019-05-31/#SECURITY-1409",
    "versions": [
      {
        "lastVersion": "3.7.0",
        "pattern": "([0-2]|3[.][0-6]|3[.]7[.]0)(|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-921",
    "type": "plugin",
    "name": "workflow-remote-loader",
    "message": "Unsafe entry in Script Security list of approved signatures",
    "url": "https://jenkins.io/security/advisory/2019-05-31/#SECURITY-921",
    "versions": [
      {
        "lastVersion": "1.4",
        "pattern": "(1[.][0-4])(|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1379",
    "type": "plugin",
    "name": "jx-resources",
    "message": "CSRF vulnerability and missing permission check",
    "url": "https://jenkins.io/security/advisory/2019-06-11/#SECURITY-1379",
    "versions": [
      {
        "lastVersion": "1.0.36",
        "pattern": "1[.]0[.]([0-9]|[12][0-9]|3[0-6])(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1399",
    "type": "plugin",
    "name": "token-macro",
    "message": "XML External Entity processing vulnerability",
    "url": "https://jenkins.io/security/advisory/2019-06-11/#SECURITY-1399",
    "versions": [
      {
        "lastVersion": "2.7",
        "pattern": "(1|2[.][0-7])(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1410-1",
    "type": "plugin",
    "name": "electricflow",
    "message": "CSRF vulnerability and missing permission checks allowed SSRF",
    "url": "https://jenkins.io/security/advisory/2019-06-11/#SECURITY-1410%20(1)",
    "versions": [
      {
        "lastVersion": "1.1.5",
        "pattern": "(1[.]0|1[.]1[.][0-5])(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1410-2",
    "type": "plugin",
    "name": "electricflow",
    "message": "Missing permission checks",
    "url": "https://jenkins.io/security/advisory/2019-06-11/#SECURITY-1410%20(2)",
    "versions": [
      {
        "lastVersion": "1.1.5",
        "pattern": "(1[.]0|1[.]1[.][0-5])(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1411",
    "type": "plugin",
    "name": "electricflow",
    "message": "SSL/TLS certificate validation globally and unconditionally disabled",
    "url": "https://jenkins.io/security/advisory/2019-06-11/#SECURITY-1411",
    "versions": [
      {
        "lastVersion": "1.1.5",
        "pattern": "(1[.]0|1[.]1[.][0-5])(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1412",
    "type": "plugin",
    "name": "electricflow",
    "message": "XSS vulnerability in build metadata",
    "url": "https://jenkins.io/security/advisory/2019-06-11/#SECURITY-1412",
    "versions": [
      {
        "lastVersion": "1.1.5",
        "pattern": "(1[.]0|1[.]1[.][0-5])(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1420",
    "type": "plugin",
    "name": "electricflow",
    "message": "XSS vulnerability affecting job configuration forms",
    "url": "https://jenkins.io/security/advisory/2019-06-11/#SECURITY-1420",
    "versions": [
      {
        "lastVersion": "1.1.6",
        "pattern": "(1[.]0|1[.]1[.][0-6])(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1010",
    "type": "plugin",
    "name": "docker-plugin",
    "message": "CSRF vulnerability and missing permission check allowed capturing credentials",
    "url": "https://jenkins.io/security/advisory/2019-07-11/#SECURITY-1010",
    "versions": [
      {
        "lastVersion": "1.1.6",
        "pattern": "(0|1[.](0|1[.][0-6]))(|[-.].*)|1[.]1"
      }
    ]
  },
  {
    "id": "SECURITY-1177",
    "type": "plugin",
    "name": "depgraph-view",
    "message": "Stored XSS vulnerability",
    "url": "https://jenkins.io/security/advisory/2019-07-11/#SECURITY-1177",
    "versions": [
      {
        "lastVersion": "0.13",
        "pattern": "0[.]([1-9]|1[0-3])(|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1400",
    "type": "plugin",
    "name": "docker-plugin",
    "message": "Users with Overall/Read access could enumerate credential IDs",
    "url": "https://jenkins.io/security/advisory/2019-07-11/#SECURITY-1400",
    "versions": [
      {
        "lastVersion": "1.1.6",
        "pattern": "(0|1[.](0|1[.][0-6]))(|[-.].*)|1[.]1"
      }
    ]
  },
  {
    "id": "SECURITY-1419",
    "type": "plugin",
    "name": "embeddable-build-status",
    "message": "Reflected XSS vulnerability",
    "url": "https://jenkins.io/security/advisory/2019-07-11/#SECURITY-1419",
    "versions": [
      {
        "lastVersion": "2.0.1",
        "pattern": "(1[.].+|2[.](0(|[.]1)))(|[-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1437",
    "type": "plugin",
    "name": "caliper-ci",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-07-11/#SECURITY-1437",
    "versions": [
      {
        "lastVersion": "2.3",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1438",
    "type": "plugin",
    "name": "gogs-webhook",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-07-11/#SECURITY-1438",
    "versions": [
      {
        "lastVersion": "1.0.14",
        "pattern": "(1[.]0[.]([0-9]|1[0-4]))(|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1441",
    "type": "plugin",
    "name": "port-allocator",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-07-11/#SECURITY-1441",
    "versions": [
      {
        "lastVersion": "1.8",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-775",
    "type": "plugin",
    "name": "mashup-portlets-plugin",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-07-11/#SECURITY-775",
    "versions": [
      {
        "lastVersion": "1.0.9",
        "pattern": "(0|1[.]0)(|[.-].*)"
      }
    ]
  },
  {
    "id": "core-2_186",
    "type": "core",
    "name": "core",
    "message": "Multiple security vulnerabilities in Jenkins 2.185 and earlier, and LTS 2.176.1 and earlier",
    "url": "https://jenkins.io/security/advisory/2019-07-17/",
    "versions": [
      {
        "lastVersion": "2.185",
        "pattern": "(1[.].*|2[.][0-9]|2[.][0-9][0-9]|2[.]1[0-7][0-9]|2[.]18[0-5])(|[-].*)"
      },
      {
        "lastVersion": "2.176.1",
        "pattern": "(2[.][0-9]{1,2}[.].+|2[.](107|121|138|150|164)[.].+|2[.]176[.]1)(|[-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1098",
    "type": "plugin",
    "name": "m2release",
    "message": "CSRF vulnerability",
    "url": "https://jenkins.io/security/advisory/2019-07-31/#SECURITY-1098",
    "versions": [
      {
        "lastVersion": "0.14.0",
        "pattern": "(0[.]([0-9]|1[0-4]))(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1184",
    "type": "plugin",
    "name": "m2release",
    "message": "Stored XSS vulnerability",
    "url": "https://jenkins.io/security/advisory/2019-07-31/#SECURITY-1184",
    "versions": [
      {
        "lastVersion": "0.14.0",
        "pattern": "(0[.]([0-9]|1[0-4]))(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1279",
    "type": "plugin",
    "name": "configuration-as-code",
    "message": "Secrets in system log messages not masked",
    "url": "https://jenkins.io/security/advisory/2019-07-31/#SECURITY-1279",
    "versions": [
      {
        "lastVersion": "1.24",
        "pattern": "(0|1[.]([0-9]|1[0-9]|2[0-4]))(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1290",
    "type": "plugin",
    "name": "configuration-as-code",
    "message": "Users without Overall/Administer permission allowed to access documentation",
    "url": "https://jenkins.io/security/advisory/2019-07-31/#SECURITY-1290",
    "versions": [
      {
        "lastVersion": "1.24",
        "pattern": "(0|1[.]([0-9]|1[0-9]|2[0-4]))(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1303",
    "type": "plugin",
    "name": "configuration-as-code",
    "message": "Proxy credentials not masked",
    "url": "https://jenkins.io/security/advisory/2019-07-31/#SECURITY-1303",
    "versions": [
      {
        "lastVersion": "1.20",
        "pattern": "(0|1[.]([0-9]|1[0-9]|20))(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1345",
    "type": "plugin",
    "name": "google-kubernetes-engine",
    "message": "Temporary secret stored in a user accessible location",
    "url": "https://jenkins.io/security/advisory/2019-07-31/#SECURITY-1345",
    "versions": [
      {
        "lastVersion": "0.6.2",
        "pattern": "(0[.]([1-5]|6[.][0-2]))(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1422",
    "type": "plugin",
    "name": "workflow-cps-global-lib",
    "message": "Missing permission check",
    "url": "https://jenkins.io/security/advisory/2019-07-31/#SECURITY-1422",
    "versions": [
      {
        "lastVersion": "2.14",
        "pattern": "(1|2[.]([0-9]|1[0-4]))(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1429",
    "type": "plugin",
    "name": "skytap",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-07-31/#SECURITY-1429",
    "versions": [
      {
        "lastVersion": "2.06",
        "pattern": "(1|2[.]0[0-6])(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1435",
    "type": "plugin",
    "name": "m2release",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-07-31/#SECURITY-1435",
    "versions": [
      {
        "lastVersion": "0.14.0",
        "pattern": "(0[.]([0-9]|1[0-4]))(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1446",
    "type": "plugin",
    "name": "configuration-as-code",
    "message": "Variable references evaluated when importing a previously exported configuration",
    "url": "https://jenkins.io/security/advisory/2019-07-31/#SECURITY-1446",
    "versions": [
      {
        "lastVersion": "1.24",
        "pattern": "(0|1[.]([0-9]|1[0-9]|2[0-4]))(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1458",
    "type": "plugin",
    "name": "configuration-as-code",
    "message": "Secret values exported in plain text",
    "url": "https://jenkins.io/security/advisory/2019-07-31/#SECURITY-1458",
    "versions": [
      {
        "lastVersion": "1.24",
        "pattern": "(0|1[.]([0-9]|1[0-9]|2[0-4]))(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1465-1",
    "type": "plugin",
    "name": "script-security",
    "message": "Sandbox bypass through type casts",
    "url": "https://jenkins.io/security/advisory/2019-07-31/#SECURITY-1465%20(1)",
    "versions": [
      {
        "lastVersion": "1.61",
        "pattern": "(1[.]([0-9]|[1-5][0-9]|6[01]))(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1465-2",
    "type": "plugin",
    "name": "script-security",
    "message": "Sandbox bypass through method pointer expressions",
    "url": "https://jenkins.io/security/advisory/2019-07-31/#SECURITY-1465%20(2)",
    "versions": [
      {
        "lastVersion": "1.61",
        "pattern": "(1[.]([0-9]|[1-5][0-9]|6[01]))(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-673",
    "type": "plugin",
    "name": "ec2",
    "message": "Beginning of private key leaked in system log",
    "url": "https://jenkins.io/security/advisory/2019-07-31/#SECURITY-673",
    "versions": [
      {
        "lastVersion": "1.43",
        "pattern": "(1[.](19|[23][0-9]|4[0-3]))(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-713",
    "type": "plugin",
    "name": "maven-plugin",
    "message": "Sensitive values in module build logs not masked",
    "url": "https://jenkins.io/security/advisory/2019-07-31/#SECURITY-713",
    "versions": [
      {
        "lastVersion": "3.3",
        "pattern": "(1|2|3[.][0-3])(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1008",
    "type": "plugin",
    "name": "xltestview-plugin",
    "message": "CSRF vulnerability and missing permission check allow capturing credentials",
    "url": "https://jenkins.io/security/advisory/2019-08-07/#SECURITY-1008",
    "versions": [
      {
        "lastVersion": "1.2.0",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1053",
    "type": "plugin",
    "name": "relution-publisher",
    "message": "CSRF vulnerability and missing permission check allow SSRF",
    "url": "https://jenkins.io/security/advisory/2019-08-07/#SECURITY-1053",
    "versions": [
      {
        "lastVersion": "1.24",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1099",
    "type": "plugin",
    "name": "avatar",
    "message": "Missing permission check allows changing avatars of other users",
    "url": "https://jenkins.io/security/advisory/2019-08-07/#SECURITY-1099",
    "versions": [
      {
        "lastVersion": "1.2",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1376",
    "type": "plugin",
    "name": "labmanager",
    "message": "SSL/TLS certificate validation globally and unconditionally disabled",
    "url": "https://jenkins.io/security/advisory/2019-08-07/#SECURITY-1376",
    "versions": [
      {
        "lastVersion": "0.2.8",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-142",
    "type": "plugin",
    "name": "pegdown-formatter",
    "message": "Stored XSS vulnerability",
    "url": "https://jenkins.io/security/advisory/2019-08-07/#SECURITY-142",
    "versions": [
      {
        "lastVersion": "1.3",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1428",
    "type": "plugin",
    "name": "testlink",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-08-07/#SECURITY-1428",
    "versions": [
      {
        "lastVersion": "3.16",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1430",
    "type": "plugin",
    "name": "eggplant-plugin",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-08-07/#SECURITY-1430",
    "versions": [
      {
        "lastVersion": "2.2",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1482",
    "type": "plugin",
    "name": "jclouds-jenkins",
    "message": "CSRF vulnerability and missing permission check allowed capturing credentials",
    "url": "https://jenkins.io/security/advisory/2019-08-07/#SECURITY-1482",
    "versions": [
      {
        "lastVersion": "2.14",
        "pattern": "(2[.]([0-9]|1[0-4]))(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-157",
    "type": "plugin",
    "name": "mask-passwords",
    "message": "Plain text passwords shown in global configuration form fields",
    "url": "https://jenkins.io/security/advisory/2019-08-07/#SECURITY-157",
    "versions": [
      {
        "lastVersion": "2.12.0",
        "pattern": "(1|2[.]1[0-2]|2[.][0-9])([.-].+|)"
      }
    ]
  },
  {
    "id": "SECURITY-569",
    "type": "plugin",
    "name": "filesystem_scm",
    "message": "Arbitrary file read vulnerability",
    "url": "https://jenkins.io/security/advisory/2019-08-07/#SECURITY-569",
    "versions": [
      {
        "lastVersion": "2.1",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-591",
    "type": "plugin",
    "name": "gcm-notification",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-08-07/#SECURITY-591",
    "versions": [
      {
        "lastVersion": "1.0",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-751",
    "type": "plugin",
    "name": "jenkinswalldisplay",
    "message": "Reflected XSS vulnerability",
    "url": "https://jenkins.io/security/advisory/2019-08-07/#SECURITY-751",
    "versions": [
      {
        "lastVersion": "0.6.34",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-795",
    "type": "plugin",
    "name": "gitlab-oauth",
    "message": "HTTP session fixation vulnerability",
    "url": "https://jenkins.io/security/advisory/2019-08-07/#SECURITY-795",
    "versions": [
      {
        "lastVersion": "1.4",
        "pattern": "(1[.][0-4])(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-796",
    "type": "plugin",
    "name": "gitlab-oauth",
    "message": "Open redirect vulnerability",
    "url": "https://jenkins.io/security/advisory/2019-08-07/#SECURITY-796",
    "versions": [
      {
        "lastVersion": "1.4",
        "pattern": "(1[.][0-4])(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-879",
    "type": "plugin",
    "name": "build-pipeline-plugin",
    "message": "Stored XSS vulnerability",
    "url": "https://jenkins.io/security/advisory/2019-08-07/#SECURITY-879",
    "versions": [
      {
        "lastVersion": "1.5.8",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-922",
    "type": "plugin",
    "name": "simple-travis-runner",
    "message": "Script sandbox bypass vulnerability",
    "url": "https://jenkins.io/security/advisory/2019-08-07/#SECURITY-922",
    "versions": [
      {
        "lastVersion": "1.0",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-931",
    "type": "plugin",
    "name": "codefresh",
    "message": "SSL/TLS certificate validation globally and unconditionally disabled",
    "url": "https://jenkins.io/security/advisory/2019-08-07/#SECURITY-931",
    "versions": [
      {
        "lastVersion": "1.8",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1497",
    "type": "plugin",
    "name": "configuration-as-code",
    "message": "Secrets in system log messages not masked",
    "url": "https://jenkins.io/security/advisory/2019-08-08/#SECURITY-1497",
    "versions": [
      {
        "lastVersion": "1.26",
        "pattern": "(0|1[.]([0-9]|1[0-9]|2[0-6]))(|[-.].*)"
      }
    ]
  },
  {
    "id": "core-2_192",
    "type": "core",
    "name": "core",
    "message": "Multiple security vulnerabilities in Jenkins 2.191 and earlier, and LTS 2.176.2 and earlier",
    "url": "https://jenkins.io/security/advisory/2019-08-28/",
    "versions": [
      {
        "lastVersion": "2.191",
        "pattern": "(1[.].*|2[.][0-9]|2[.][0-9][0-9]|2[.]1[0-8][0-9]|2[.]19[01])(|[-].*)"
      },
      {
        "lastVersion": "2.176.2",
        "pattern": "(2[.][0-9]{1,2}[.].+|2[.](107|121|138|150|164)[.].+|2[.]176[.][12])(|[-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1294",
    "type": "plugin",
    "name": "splunk-devops",
    "message": "Sandbox Bypass",
    "url": "https://jenkins.io/security/advisory/2019-08-28/#SECURITY-1294",
    "versions": [
      {
        "lastVersion": "1.7.4",
        "pattern": "(1[.][0-7])(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1512",
    "type": "plugin",
    "name": "ibm-application-security",
    "message": "Plain text password shown in job configuration form fields",
    "url": "https://jenkins.io/security/advisory/2019-08-28/#SECURITY-1512",
    "versions": [
      {
        "lastVersion": "1.2.4",
        "pattern": "(1[.]([01]|2[.][0-4]))(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1476",
    "type": "plugin",
    "name": "build-environment",
    "message": "Stored XSS vulnerability",
    "url": "https://jenkins.io/security/advisory/2019-09-12/#SECURITY-1476",
    "versions": [
      {
        "lastVersion": "1.6",
        "pattern": "(1[.][0-6])(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1489",
    "type": "plugin",
    "name": "dashboard-view",
    "message": "Stored XSS vulnerability",
    "url": "https://jenkins.io/security/advisory/2019-09-12/#SECURITY-1489",
    "versions": [
      {
        "lastVersion": "2.11",
        "pattern": "(1|2[.][0-9]|2[.]1[01])(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1509",
    "type": "plugin",
    "name": "aqua-serverless",
    "message": "Plain text password shown in job configuration form fields",
    "url": "https://jenkins.io/security/advisory/2019-09-12/#SECURITY-1509",
    "versions": [
      {
        "lastVersion": "1.0.4",
        "pattern": "(1[.]0[.][0-4])(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1534",
    "type": "plugin",
    "name": "git-client",
    "message": "System command execution vulnerability",
    "url": "https://jenkins.io/security/advisory/2019-09-12/#SECURITY-1534",
    "versions": [
      {
        "lastVersion": "2.8.4",
        "pattern": "(1|2[.][0-7]|2[.]8[.][0-4])(|[-.].*)"
      },
      {
        "lastVersion": "3.0.0-rc",
        "pattern": "3[.]0[.]0[-]rc"
      }
    ]
  },
  {
    "id": "SECURITY-1538",
    "type": "plugin",
    "name": "script-security",
    "message": "Sandbox bypass vulnerability",
    "url": "https://jenkins.io/security/advisory/2019-09-12/#SECURITY-1538",
    "versions": [
      {
        "lastVersion": "1.62",
        "pattern": "(1[.]([0-9]|[1-5][0-9]|6[012]))(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1545",
    "type": "plugin",
    "name": "beaker-builder",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-09-12/#SECURITY-1545",
    "versions": [
      {
        "lastVersion": "1.9",
        "pattern": "(1[.][0-9])(|[-.].*)"
      }
    ]
  },
  {
    "id": "core-2_197",
    "type": "core",
    "name": "core",
    "message": "Multiple security vulnerabilities in Jenkins 2.196 and earlier, and LTS 2.176.3 and earlier",
    "url": "https://jenkins.io/security/advisory/2019-09-25/",
    "versions": [
      {
        "lastVersion": "2.196",
        "pattern": "(1[.].*|2[.][0-9]|2[.][0-9][0-9]|2[.]1[0-8][0-9]|2[.]19[0-6])(|[-].*)"
      },
      {
        "lastVersion": "2.176.3",
        "pattern": "(2[.][0-9]{1,2}[.].+|2[.](107|121|138|150|164)[.].+|2[.]176[.][123])(|[-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1504",
    "type": "plugin",
    "name": "neuvector-vulnerability-scanner",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1504",
    "versions": [
      {
        "lastVersion": "1.5",
        "pattern": "(1[.][0-5])(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1507",
    "type": "plugin",
    "name": "aqua-microscanner",
    "message": "Plain text password shown in configuration form",
    "url": "https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1507",
    "versions": [
      {
        "lastVersion": "1.0.7",
        "pattern": "(1[.]0[.][0-7])(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1508",
    "type": "plugin",
    "name": "aqua-security-scanner",
    "message": "Plain text password shown in configuration form",
    "url": "https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1508",
    "versions": [
      {
        "lastVersion": "3.0.17",
        "pattern": "([12]|3[.]0[.]([0-9]|1[0-7]))(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1513",
    "type": "plugin",
    "name": "inedo-buildmaster",
    "message": "Plain text password shown in configuration form",
    "url": "https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1513",
    "versions": [
      {
        "lastVersion": "2.4.0",
        "pattern": "(1|2[.][0-4])(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1514",
    "type": "plugin",
    "name": "inedo-proget",
    "message": "Plain text password shown in configuration form",
    "url": "https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1514",
    "versions": [
      {
        "lastVersion": "1.2",
        "pattern": "(0|1[.][0-2])(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1541",
    "type": "plugin",
    "name": "application-director-plugin",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1541",
    "versions": [
      {
        "lastVersion": "1.3",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1543",
    "type": "plugin",
    "name": "assembla",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1543",
    "versions": [
      {
        "lastVersion": "1.4",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1544",
    "type": "plugin",
    "name": "azure-event-grid-notifier",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1544",
    "versions": [
      {
        "lastVersion": "0.1",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1548",
    "type": "plugin",
    "name": "call-remote-job-plugin",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1548",
    "versions": [
      {
        "lastVersion": "1.0.21",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1551",
    "type": "plugin",
    "name": "codescan",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1551",
    "versions": [
      {
        "lastVersion": "0.11",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1557",
    "type": "plugin",
    "name": "datatheorem-mobile-app-security",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1557",
    "versions": [
      {
        "lastVersion": "1.3",
        "pattern": "(1[.][0-3])(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1561",
    "type": "plugin",
    "name": "elOyente",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1561",
    "versions": [
      {
        "lastVersion": "1.3",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1572",
    "type": "plugin",
    "name": "gcal",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1572",
    "versions": [
      {
        "lastVersion": "0.4",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1573",
    "type": "plugin",
    "name": "gem-publisher",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1573",
    "versions": [
      {
        "lastVersion": "1.0",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1574",
    "type": "plugin",
    "name": "git-changelog",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1574",
    "versions": [
      {
        "lastVersion": "2.17",
        "pattern": "(1|2[.]([0-9]|1[0-7]))(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1575",
    "type": "plugin",
    "name": "gitlab-logo",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1575",
    "versions": [
      {
        "lastVersion": "1.0.3",
        "pattern": "(1[.]0[.][0-3])(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1577",
    "type": "plugin",
    "name": "violation-comments-to-gitlab",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1577",
    "versions": [
      {
        "lastVersion": "2.28",
        "pattern": "(1|2[.]([0-9]|1[0-9]|2[0-8]))(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-351",
    "type": "plugin",
    "name": "project-inheritance",
    "message": "Secret environment variables defined in Mask Passwords Plugin shown unmasked",
    "url": "https://jenkins.io/security/advisory/2019-09-25/#SECURITY-351",
    "versions": [
      {
        "lastVersion": "19.08.01",
        "pattern": "([12]|19[.]08[.]01)(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-401",
    "type": "plugin",
    "name": "project-inheritance",
    "message": "CSRF vulnerability and missing permission check",
    "url": "https://jenkins.io/security/advisory/2019-09-25/#SECURITY-401",
    "versions": [
      {
        "lastVersion": "19.08.01",
        "pattern": "([12]|19[.]08[.]01)(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-732",
    "type": "plugin",
    "name": "log-parser",
    "message": "Stored XSS vulnerability",
    "url": "https://jenkins.io/security/advisory/2019-09-25/#SECURITY-732",
    "versions": [
      {
        "lastVersion": "2.0",
        "pattern": "(1|2[.]0)(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-920-1",
    "type": "plugin",
    "name": "kubernetes-pipeline-steps",
    "message": "Script sandbox bypass vulnerability",
    "url": "https://jenkins.io/security/advisory/2019-09-25/#SECURITY-920%20(1)",
    "versions": [
      {
        "lastVersion": "1.6",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-920-2",
    "type": "plugin",
    "name": "kubernetes-pipeline-arquillian-steps",
    "message": "Script sandbox bypass vulnerability",
    "url": "https://jenkins.io/security/advisory/2019-09-25/#SECURITY-920%20(2)",
    "versions": [
      {
        "lastVersion": "1.6",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1423",
    "type": "plugin",
    "name": "dingding-notifications",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-10-01/#SECURITY-1423",
    "versions": [
      {
        "lastVersion": "1.9",
        "pattern": "1[.].*"
      }
    ]
  },
  {
    "id": "SECURITY-1515",
    "type": "plugin",
    "name": "ldapemail",
    "message": "Plain text password shown in configuration form",
    "url": "https://jenkins.io/security/advisory/2019-10-01/#SECURITY-1515",
    "versions": [
      {
        "lastVersion": "0.8",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1524",
    "type": "plugin",
    "name": "vault-scm-plugin",
    "message": "Plain text password shown in configuration form",
    "url": "https://jenkins.io/security/advisory/2019-10-01/#SECURITY-1524",
    "versions": [
      {
        "lastVersion": "1.1.1",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1579",
    "type": "plugin",
    "name": "script-security",
    "message": "Sandbox bypass vulnerability",
    "url": "https://jenkins.io/security/advisory/2019-10-01/#SECURITY-1579",
    "versions": [
      {
        "lastVersion": "1.64",
        "pattern": "(1[.]([0-9]|[1-5][0-9]|6[0-4]))(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1590",
    "type": "plugin",
    "name": "htmlpublisher",
    "message": "Stored XSS vulnerability",
    "url": "https://jenkins.io/security/advisory/2019-10-01/#SECURITY-1590",
    "versions": [
      {
        "lastVersion": "1.20",
        "pattern": "(0|1[.][0-9]|1[.](1[0-9]|20))(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1006-1",
    "type": "plugin",
    "name": "crx-content-package-deployer",
    "message": "CSRF vulnerability and missing permission check allow capturing credentials",
    "url": "https://jenkins.io/security/advisory/2019-10-16/#SECURITY-1006%20(1)",
    "versions": [
      {
        "lastVersion": "1.8.1",
        "pattern": "(1[.][0-8])(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1006-2",
    "type": "plugin",
    "name": "crx-content-package-deployer",
    "message": "Users with Overall/Read access could enumerate credential IDs",
    "url": "https://jenkins.io/security/advisory/2019-10-16/#SECURITY-1006%20(2)",
    "versions": [
      {
        "lastVersion": "1.8.1",
        "pattern": "(1[.][0-8])(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1427",
    "type": "plugin",
    "name": "neoload-jenkins-plugin",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-10-16/#SECURITY-1427",
    "versions": [
      {
        "lastVersion": "2.2.5",
        "pattern": "(1|2[.][01]|2[.]2[.][0-5])(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1431",
    "type": "plugin",
    "name": "sofy-ai",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-10-16/#SECURITY-1431",
    "versions": [
      {
        "lastVersion": "1.0.3",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1432",
    "type": "plugin",
    "name": "extensivetesting",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-10-16/#SECURITY-1432",
    "versions": [
      {
        "lastVersion": "1.4.4b",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1433",
    "type": "plugin",
    "name": "fortify-on-demand-uploader",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-10-16/#SECURITY-1433",
    "versions": [
      {
        "lastVersion": "4.0.1",
        "pattern": "([0-4])(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1434",
    "type": "plugin",
    "name": "elasticbox",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-10-16/#SECURITY-1434",
    "versions": [
      {
        "lastVersion": "5.0.1",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1436",
    "type": "plugin",
    "name": "icescrum",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-10-16/#SECURITY-1436",
    "versions": [
      {
        "lastVersion": "1.1.4",
        "pattern": "(1[.]0|1[.]1[.][1-4])(|[-.].*)|1[.]1"
      }
    ]
  },
  {
    "id": "SECURITY-1439",
    "type": "plugin",
    "name": "cloudtest",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-10-16/#SECURITY-1439",
    "versions": [
      {
        "lastVersion": "2.25",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1440",
    "type": "plugin",
    "name": "view26",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-10-16/#SECURITY-1440",
    "versions": [
      {
        "lastVersion": "1.0.7",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1450",
    "type": "plugin",
    "name": "delphix",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-10-16/#SECURITY-1450",
    "versions": [
      {
        "lastVersion": "2.0.4",
        "pattern": "([12])(|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1460",
    "type": "plugin",
    "name": "rundeck",
    "message": "CSRF vulnerability and missing permission check",
    "url": "https://jenkins.io/security/advisory/2019-10-16/#SECURITY-1460",
    "versions": [
      {
        "lastVersion": "3.6.5",
        "pattern": "([12]|3[.][01345]|3[.]6[.][1-5])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1462",
    "type": "plugin",
    "name": "oracle-cloud-infrastructure-compute-classic",
    "message": "CSRF vulnerability and missing permission check",
    "url": "https://jenkins.io/security/advisory/2019-10-16/#SECURITY-1462",
    "versions": [
      {
        "lastVersion": "1.0.0",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1481",
    "type": "plugin",
    "name": "bumblebee",
    "message": "Unconditionally disabled SSL/TLS certificate validation",
    "url": "https://jenkins.io/security/advisory/2019-10-16/#SECURITY-1481",
    "versions": [
      {
        "lastVersion": "4.1.3",
        "pattern": "(3|4[.]0|4[.]1[.][0-3])(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1484",
    "type": "plugin",
    "name": "icescrum",
    "message": "CSRF vulnerability and missing permission check",
    "url": "https://jenkins.io/security/advisory/2019-10-16/#SECURITY-1484",
    "versions": [
      {
        "lastVersion": "1.1.5",
        "pattern": "(1[.]0|1[.]1[.][1-5])(|[-.].*)|1[.]1"
      }
    ]
  },
  {
    "id": "SECURITY-1583",
    "type": "plugin",
    "name": "google-oauth-plugin",
    "message": "Arbitrary file read vulnerability",
    "url": "https://jenkins.io/security/advisory/2019-10-16/#SECURITY-1583",
    "versions": [
      {
        "lastVersion": "0.9",
        "pattern": "(0[.][1-9])(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1607",
    "type": "plugin",
    "name": "google-kubernetes-engine",
    "message": "Missing permission checks allowed obtaining limited information about a credential scope",
    "url": "https://jenkins.io/security/advisory/2019-10-16/#SECURITY-1607",
    "versions": [
      {
        "lastVersion": "0.7.0",
        "pattern": "(0[.][1-6]|0[.]7[.]0)(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1615",
    "type": "plugin",
    "name": "vmanager-plugin",
    "message": "Globally and unconditionally disabled SSL/TLS certificate validation",
    "url": "https://jenkins.io/security/advisory/2019-10-16/#SECURITY-1615",
    "versions": [
      {
        "lastVersion": "2.7.0",
        "pattern": "(1|2[.][0-6]|2[.]7[.]0)(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-918",
    "type": "plugin",
    "name": "puppet-enterprise-pipeline",
    "message": "Script sandbox bypass vulnerability",
    "url": "https://jenkins.io/security/advisory/2019-10-16/#SECURITY-918",
    "versions": [
      {
        "lastVersion": "1.3.1",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1003",
    "type": "plugin",
    "name": "sonar-gerrit",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-10-23/#SECURITY-1003",
    "versions": [
      {
        "lastVersion": "2.4.4",
        "pattern": "(1|2[.][0-3]|2[.]4[.][34])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1005-1",
    "type": "plugin",
    "name": "kubernetes-ci",
    "message": "CSRF vulnerability and missing permission checks allowed capturing credentials",
    "url": "https://jenkins.io/security/advisory/2019-10-23/#SECURITY-1005%20(1)",
    "versions": [
      {
        "lastVersion": "1.3",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1005-2",
    "type": "plugin",
    "name": "kubernetes-ci",
    "message": "Users with Overall/Read access could enumerate credential IDs",
    "url": "https://jenkins.io/security/advisory/2019-10-23/#SECURITY-1005%20(2)",
    "versions": [
      {
        "lastVersion": "1.3",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1014-1",
    "type": "plugin",
    "name": "libvirt-slave",
    "message": "CSRF vulnerability and missing permission checks allowed capturing credentials",
    "url": "https://jenkins.io/security/advisory/2019-10-23/#SECURITY-1014%20(1)",
    "versions": [
      {
        "lastVersion": "1.8.6",
        "pattern": "(1[.]7|1[.]8[.][13456])(|[.-].+)|(1[.]8)"
      }
    ]
  },
  {
    "id": "SECURITY-1014-2",
    "type": "plugin",
    "name": "libvirt-slave",
    "message": "Users with Overall/Read access could enumerate credential IDs",
    "url": "https://jenkins.io/security/advisory/2019-10-23/#SECURITY-1014%20(2)",
    "versions": [
      {
        "lastVersion": "1.8.5",
        "pattern": "(1[.]7|1[.]8[.][1345])(|[.-].+)|(1[.]8)"
      }
    ]
  },
  {
    "id": "SECURITY-1073",
    "type": "plugin",
    "name": "global-post-script",
    "message": "Missing permission check allowed obtaining configuration data",
    "url": "https://jenkins.io/security/advisory/2019-10-23/#SECURITY-1073",
    "versions": [
      {
        "lastVersion": "1.1.4",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1477",
    "type": "plugin",
    "name": "dynatrace-dashboard",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-10-23/#SECURITY-1477",
    "versions": [
      {
        "lastVersion": "2.1.3",
        "pattern": "(1|2[.]0|2[.]1[.][0-3])(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1483-1",
    "type": "plugin",
    "name": "dynatrace-dashboard",
    "message": "CSRF vulnerability",
    "url": "https://jenkins.io/security/advisory/2019-10-23/#SECURITY-1483%20(1)",
    "versions": [
      {
        "lastVersion": "2.1.3",
        "pattern": "(1|2[.]0|2[.]1[.][0-3])(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1483-2",
    "type": "plugin",
    "name": "dynatrace-dashboard",
    "message": "Missing permission check",
    "url": "https://jenkins.io/security/advisory/2019-10-23/#SECURITY-1483%20(2)",
    "versions": [
      {
        "lastVersion": "2.1.4",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1490",
    "type": "plugin",
    "name": "build-metrics",
    "message": "Reflected XSS vulnerability",
    "url": "https://jenkins.io/security/advisory/2019-10-23/#SECURITY-1490",
    "versions": [
      {
        "lastVersion": "1.3",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1546",
    "type": "plugin",
    "name": "bitbucket-oauth",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-10-23/#SECURITY-1546",
    "versions": [
      {
        "lastVersion": "0.9",
        "pattern": "(0[.][1-9])(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1621",
    "type": "plugin",
    "name": "zulip",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-10-23/#SECURITY-1621",
    "versions": [
      {
        "lastVersion": "1.1.0",
        "pattern": "(1[.][0]|1[.]1[.]0)(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1628",
    "type": "plugin",
    "name": "mattermost",
    "message": "Webhook endpoint token stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-10-23/#SECURITY-1628",
    "versions": [
      {
        "lastVersion": "2.7.0",
        "pattern": "(1|2[.][0-6]|2[.]7[.]0)(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-820",
    "type": "plugin",
    "name": "weblogic-deployer-plugin",
    "message": "CSRF vulnerability and missing permission check",
    "url": "https://jenkins.io/security/advisory/2019-10-23/#SECURITY-820",
    "versions": [
      {
        "lastVersion": "4.1",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-822",
    "type": "plugin",
    "name": "fireline",
    "message": "XXE vulnerability",
    "url": "https://jenkins.io/security/advisory/2019-10-23/#SECURITY-822",
    "versions": [
      {
        "lastVersion": "1.7.2",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1106",
    "type": "plugin",
    "name": "jira",
    "message": "Folder-scoped Jira sites are able to access System-scoped credentials",
    "url": "https://jenkins.io/security/advisory/2019-11-21/#SECURITY-1106",
    "versions": [
      {
        "lastVersion": "3.0.10",
        "pattern": "(?!(3[.]0[.]6[.][1-9]))(1|2|3[.]0[.]([0-9]|10))(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1539",
    "type": "plugin",
    "name": "anchore-container-scanner",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-11-21/#SECURITY-1539",
    "versions": [
      {
        "lastVersion": "1.0.19",
        "pattern": "(1[.]0[.]([0-9]|1[0-9]))(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1554",
    "type": "plugin",
    "name": "inflectra-spira-integration",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-11-21/#SECURITY-1554",
    "versions": [
      {
        "lastVersion": "3.2.2",
        "pattern": "3[.]2[.]2"
      }
    ]
  },
  {
    "id": "SECURITY-1584",
    "type": "plugin",
    "name": "google-compute-engine",
    "message": "Missing SSH host key verification",
    "url": "https://jenkins.io/security/advisory/2019-11-21/#SECURITY-1584",
    "versions": [
      {
        "lastVersion": "4.1.1",
        "pattern": "([1-3]|4[.][01])(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1585",
    "type": "plugin",
    "name": "google-compute-engine",
    "message": "Environment information disclosed to users with Overall/Read permission",
    "url": "https://jenkins.io/security/advisory/2019-11-21/#SECURITY-1585",
    "versions": [
      {
        "lastVersion": "4.1.1",
        "pattern": "([1-3]|4[.][01])(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1586",
    "type": "plugin",
    "name": "google-compute-engine",
    "message": "CSRF vulnerability allowed provisioning agents",
    "url": "https://jenkins.io/security/advisory/2019-11-21/#SECURITY-1586",
    "versions": [
      {
        "lastVersion": "4.1.1",
        "pattern": "([1-3]|4[.][01])(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1634",
    "type": "plugin",
    "name": "support-core",
    "message": "Users with Overall/Read permission are able to delete arbitrary files",
    "url": "https://jenkins.io/security/advisory/2019-11-21/#SECURITY-1634",
    "versions": [
      {
        "lastVersion": "2.63",
        "pattern": "(?!(2[.](56|62)[.][1-9]))(1|2[.]([0-9]|[1-5][0-9]|6[0-3]))(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1658",
    "type": "plugin",
    "name": "script-security",
    "message": "Sandbox bypass vulnerability",
    "url": "https://jenkins.io/security/advisory/2019-11-21/#SECURITY-1658",
    "versions": [
      {
        "lastVersion": "1.67",
        "pattern": "(?!(1[.](57[.][4-9]|66[.][1-9])))(1[.]([0-9]|[1-5][0-9]|6[0-7]))(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-727-1",
    "type": "plugin",
    "name": "qmetry-for-jira-test-management",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-11-21/#SECURITY-727%20(1)",
    "versions": [
      {
        "lastVersion": "1.12",
        "pattern": "(1[.]([0-9]|1[0-2]))"
      }
    ]
  },
  {
    "id": "SECURITY-727-2",
    "type": "plugin",
    "name": "qmetry-for-jira-test-management",
    "message": "Plain text password shown in configuration form",
    "url": "https://jenkins.io/security/advisory/2019-11-21/#SECURITY-727%20(2)",
    "versions": [
      {
        "lastVersion": "1.13",
        "pattern": "(1[.][02589]|1[.]1[0-3])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1371",
    "type": "plugin",
    "name": "websphere-deployer",
    "message": "CSRF vulnerability and missing permission checks",
    "url": "https://jenkins.io/security/advisory/2019-12-17/#SECURITY-1371",
    "versions": [
      {
        "lastVersion": "1.6.1",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1521",
    "type": "plugin",
    "name": "SCTMExecutor",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-12-17/#SECURITY-1521",
    "versions": [
      {
        "lastVersion": "2.2",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1527",
    "type": "plugin",
    "name": "gerrit-trigger",
    "message": "CSRF vulnerability and missing permission checks",
    "url": "https://jenkins.io/security/advisory/2019-12-17/#SECURITY-1527",
    "versions": [
      {
        "lastVersion": "2.30.1",
        "pattern": "(2[.]1[0-9]|2[.]2[0-9]|2[.][3-9]|2[.]30[.][01])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1580",
    "type": "plugin",
    "name": "inflectra-spira-integration",
    "message": "SSL/TLS certificate validation globally and unconditionally disabled",
    "url": "https://jenkins.io/security/advisory/2019-12-17/#SECURITY-1580",
    "versions": [
      {
        "lastVersion": "3.2.3",
        "pattern": "(3[.]2[.][23])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1581",
    "type": "plugin",
    "name": "websphere-deployer",
    "message": "SSL/TLS certificate validation globally and unconditionally disabled",
    "url": "https://jenkins.io/security/advisory/2019-12-17/#SECURITY-1581",
    "versions": [
      {
        "lastVersion": "1.6.1",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1591",
    "type": "plugin",
    "name": "buildgraph-view",
    "message": "Stored XSS vulnerability",
    "url": "https://jenkins.io/security/advisory/2019-12-17/#SECURITY-1591",
    "versions": [
      {
        "lastVersion": "1.8",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1592",
    "type": "plugin",
    "name": "mission-control-view",
    "message": "Stored XSS vulnerability",
    "url": "https://jenkins.io/security/advisory/2019-12-17/#SECURITY-1592",
    "versions": [
      {
        "lastVersion": "0.9.16",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1593",
    "type": "plugin",
    "name": "pipeline-aggregator-view",
    "message": "Stored XSS vulnerability",
    "url": "https://jenkins.io/security/advisory/2019-12-17/#SECURITY-1593",
    "versions": [
      {
        "lastVersion": "1.8",
        "pattern": "(1[.][0-8])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1597",
    "type": "plugin",
    "name": "weibo",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-12-17/#SECURITY-1597",
    "versions": [
      {
        "lastVersion": "1.0.1",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1598",
    "type": "plugin",
    "name": "redgate-sql-ci",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-12-17/#SECURITY-1598",
    "versions": [
      {
        "lastVersion": "2.0.3",
        "pattern": "(1|2[.]0[.][0-3])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1600",
    "type": "plugin",
    "name": "alauda-devops-pipeline",
    "message": "CSRF vulnerability and missing permission checks allows capturing credentials",
    "url": "https://jenkins.io/security/advisory/2019-12-17/#SECURITY-1600",
    "versions": [
      {
        "lastVersion": "2.3.2",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1602",
    "type": "plugin",
    "name": "alauda-kubernetes-support",
    "message": "CSRF vulnerability",
    "url": "https://jenkins.io/security/advisory/2019-12-17/#SECURITY-1602",
    "versions": [
      {
        "lastVersion": "2.3.0",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1603",
    "type": "plugin",
    "name": "mantis",
    "message": "CSRF vulnerability",
    "url": "https://jenkins.io/security/advisory/2019-12-17/#SECURITY-1603",
    "versions": [
      {
        "lastVersion": "0.26",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1604",
    "type": "plugin",
    "name": "rapiddeploy-jenkins",
    "message": "CSRF vulnerability and missing permission checks allow SSRF",
    "url": "https://jenkins.io/security/advisory/2019-12-17/#SECURITY-1604",
    "versions": [
      {
        "lastVersion": "4.1",
        "pattern": "([123][.].+|4[.][0-1])(|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1605-1",
    "type": "plugin",
    "name": "teamconcert",
    "message": "CSRF vulnerability and missing permission checks allows capturing credentials",
    "url": "https://jenkins.io/security/advisory/2019-12-17/#SECURITY-1605%20(1)",
    "versions": [
      {
        "lastVersion": "1.3.0",
        "pattern": "(1[.][0-2]|1[.]3[.]0)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1605-2",
    "type": "plugin",
    "name": "teamconcert",
    "message": "Users with Overall/Read access can enumerate credential IDs",
    "url": "https://jenkins.io/security/advisory/2019-12-17/#SECURITY-1605%20(2)",
    "versions": [
      {
        "lastVersion": "1.3.0",
        "pattern": "(1[.][0-2]|1[.]3[.]0)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1636",
    "type": "plugin",
    "name": "rundeck",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2019-12-17/#SECURITY-1636",
    "versions": [
      {
        "lastVersion": "3.6.5",
        "pattern": "([12]|3[.][01345]|3[.]6[.][1-5])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1651",
    "type": "plugin",
    "name": "build-failure-analyzer",
    "message": "CSRF vulnerability and missing permission check allow ReDoS",
    "url": "https://jenkins.io/security/advisory/2019-12-17/#SECURITY-1651",
    "versions": [
      {
        "lastVersion": "1.24.1",
        "pattern": "(1[.]1[0-9]|1[.][2-9]|1[.]2[0-3]|1[.]24[.][01])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1681",
    "type": "plugin",
    "name": "m2release",
    "message": "XXE vulnerability",
    "url": "https://jenkins.io/security/advisory/2019-12-17/#SECURITY-1681",
    "versions": [
      {
        "lastVersion": "0.16.1",
        "pattern": "(0[.]1[0-5]|0[.]16[.]1|0[.][7-9])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1004",
    "type": "plugin",
    "name": "ec2",
    "message": "CSRF vulnerability and missing permission checks",
    "url": "https://jenkins.io/security/advisory/2020-01-15/#SECURITY-1004",
    "versions": [
      {
        "lastVersion": "1.47",
        "pattern": "(1[.]1[1-9]|1[.]2[0-9]|1[.]3[0-9]|1[.]4[013457]|1[.]42[.]1|1[.]46[.]1)(|[.-].+)|(1[.]4[26])"
      }
    ]
  },
  {
    "id": "SECURITY-1683",
    "type": "plugin",
    "name": "gitlab-hook",
    "message": "Reflected XSS vulnerability",
    "url": "https://jenkins.io/security/advisory/2020-01-15/#SECURITY-1683",
    "versions": [
      {
        "lastVersion": "1.4.2",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1696",
    "type": "plugin",
    "name": "redgate-sql-ci",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2020-01-15/#SECURITY-1696",
    "versions": [
      {
        "lastVersion": "2.0.4",
        "pattern": "(1|2[.]0[.][0-4])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1698",
    "type": "plugin",
    "name": "robot",
    "message": "XXE vulnerability",
    "url": "https://jenkins.io/security/advisory/2020-01-15/#SECURITY-1698",
    "versions": [
      {
        "lastVersion": "2.0.0",
        "pattern": "(1|2[.]0[.]0)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1708",
    "type": "plugin",
    "name": "cloudbees-jenkins-advisor",
    "message": "CSRF vulnerability and missing permission checks",
    "url": "https://jenkins.io/security/advisory/2020-01-15/#SECURITY-1708",
    "versions": [
      {
        "lastVersion": "3.0",
        "pattern": "([12])(|[.-].+)|(3[.]0)"
      }
    ]
  },
  {
    "id": "SECURITY-814",
    "type": "plugin",
    "name": "sounds",
    "message": "CSRF vulnerability and missing permission checks allow OS command execution",
    "url": "https://jenkins.io/security/advisory/2020-01-15/#SECURITY-814",
    "versions": [
      {
        "lastVersion": "0.5",
        "pattern": "(0[.][3-5])(|[.-].+)"
      }
    ]
  },
  {
    "id": "core-2_219",
    "type": "core",
    "name": "core",
    "message": "Multiple vulnerabilities in Jenkins 2.218 and earlier, LTS 2.204.1 and earlier",
    "url": "https://jenkins.io/security/advisory/2020-01-29/",
    "versions": [
      {
        "lastVersion": "2.218",
        "pattern": "(1|2[.][0-9]|2[.]1[0-9]|2[.]10[0-9]|2[.]11[0-9]|2[.]12[0-9]|2[.]13[0-8]|2[.]14[0-9]|2[.]15[0-9]|2[.]16[0-9]|2[.]17[0-9]|2[.]18[012345679]|2[.]19[0-9]|2[.]2[0-9]|2[.]20[012356789]|2[.]21[01234578]|2[.]3[0-9]|2[.]4[0-9]|2[.]5[0-9]|2[.]6[0-9]|2[.]7[0-9]|2[.]8[0-9]|2[.]9[0-9])(|[.-].+)|(2[.]204)"
      },
      {
        "lastVersion": "LTS 2.204.1",
        "pattern": "(1|2[.]107|2[.]121|2[.]138|2[.]150|2[.]164|2[.]176|2[.]19|2[.]190|2[.]204[.]1|2[.]32|2[.]46|2[.]60|2[.]7|2[.]73|2[.]89)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1565",
    "type": "plugin",
    "name": "fortify",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2020-01-29/#SECURITY-1565",
    "versions": [
      {
        "lastVersion": "19.1.29",
        "pattern": "(19[.]1)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1680",
    "type": "plugin",
    "name": "code-coverage-api",
    "message": "Stored XSS vulnerability",
    "url": "https://jenkins.io/security/advisory/2020-01-29/#SECURITY-1680",
    "versions": [
      {
        "lastVersion": "1.1.2",
        "pattern": "(1[.]0|1[.]1[.][0-2])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1719",
    "type": "plugin",
    "name": "websphere-deployer",
    "message": "XXE vulnerability",
    "url": "https://jenkins.io/security/advisory/2020-01-29/#SECURITY-1719",
    "versions": [
      {
        "lastVersion": "1.6.1",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1540",
    "type": "plugin",
    "name": "applatix",
    "message": "Password stored in plain text",
    "url": "https://jenkins.io/security/advisory/2020-02-12/#SECURITY-1540",
    "versions": [
      {
        "lastVersion": "1.1",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1547",
    "type": "plugin",
    "name": "bmc-rpd",
    "message": "Credential stored in plain text",
    "url": "https://jenkins.io/security/advisory/2020-02-12/#SECURITY-1547",
    "versions": [
      {
        "lastVersion": "1.1",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1549",
    "type": "plugin",
    "name": "catalogic-ecx",
    "message": "Password stored in plain text",
    "url": "https://jenkins.io/security/advisory/2020-02-12/#SECURITY-1549",
    "versions": [
      {
        "lastVersion": "1.9",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1552",
    "type": "plugin",
    "name": "eagle-tester",
    "message": "Password stored in plain text",
    "url": "https://jenkins.io/security/advisory/2020-02-12/#SECURITY-1552",
    "versions": [
      {
        "lastVersion": "1.0.9",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1553",
    "type": "plugin",
    "name": "harvest",
    "message": "Passwords stored in plain text",
    "url": "https://jenkins.io/security/advisory/2020-02-12/#SECURITY-1553",
    "versions": [
      {
        "lastVersion": "0.5.1",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1558",
    "type": "plugin",
    "name": "debian-package-builder",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2020-02-12/#SECURITY-1558",
    "versions": [
      {
        "lastVersion": "1.6.11",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1559",
    "type": "plugin",
    "name": "digitalocean-plugin",
    "message": "Token stored in plain text",
    "url": "https://jenkins.io/security/advisory/2020-02-12/#SECURITY-1559",
    "versions": [
      {
        "lastVersion": "1.1",
        "pattern": "(0|1[.][01])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1560",
    "type": "plugin",
    "name": "dynamic_extended_choice_parameter",
    "message": "Password stored in plain text",
    "url": "https://jenkins.io/security/advisory/2020-02-12/#SECURITY-1560",
    "versions": [
      {
        "lastVersion": "1.0.1",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1562",
    "type": "plugin",
    "name": "environment-manager",
    "message": "Password stored in plain text",
    "url": "https://jenkins.io/security/advisory/2020-02-12/#SECURITY-1562",
    "versions": [
      {
        "lastVersion": "2.17",
        "pattern": "(2[.]1[0-7]|2[.][0-9])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1644",
    "type": "plugin",
    "name": "brakeman",
    "message": "Stored XSS vulnerability",
    "url": "https://jenkins.io/security/advisory/2020-02-12/#SECURITY-1644",
    "versions": [
      {
        "lastVersion": "0.12",
        "pattern": "(0[.]1[0-2]|0[.][4578])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1684",
    "type": "plugin",
    "name": "s3",
    "message": "Credential transmitted in plain text",
    "url": "https://jenkins.io/security/advisory/2020-02-12/#SECURITY-1684",
    "versions": [
      {
        "lastVersion": "0.11.4",
        "pattern": "(0[.]10|0[.]11[.][0-4]|0[.][2-9])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1709",
    "type": "plugin",
    "name": "git-parameter",
    "message": "Multiple stored XSS vulnerabilities",
    "url": "https://jenkins.io/security/advisory/2020-02-12/#SECURITY-1709",
    "versions": [
      {
        "lastVersion": "0.9.11",
        "pattern": "(0[.][1-8]|0[.]9[.][0-9]|0[.]9[.]1[01])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1710",
    "type": "plugin",
    "name": "workflow-cps",
    "message": "Sandbox bypass via default method parameter expression",
    "url": "https://jenkins.io/security/advisory/2020-02-12/#SECURITY-1710",
    "versions": [
      {
        "lastVersion": "2.78",
        "pattern": "(1|2[.][0-9]|2[.]1[0-9]|2[.]2[0-9]|2[.]3[0-9]|2[.]4[0-9]|2[.]5[0-9]|2[.]6[012345789]|2[.]7[01235678])(|[.-].+)|(2[.]66|2[.]74)"
      }
    ]
  },
  {
    "id": "SECURITY-1713",
    "type": "plugin",
    "name": "script-security",
    "message": "Sandbox bypass vulnerability",
    "url": "https://jenkins.io/security/advisory/2020-02-12/#SECURITY-1713",
    "versions": [
      {
        "lastVersion": "1.69",
        "pattern": "(1[.][0-9]|1[.]1[0-9]|1[.]2[0-9]|1[.]3[013456789]|1[.]4[0-9]|1[.]5[012345689]|1[.]57[.][1-4]|1[.]6[012345789]|1[.]66[.]1)(|[.-].+)|(1[.]57|1[.]66)"
      }
    ]
  },
  {
    "id": "SECURITY-1717",
    "type": "plugin",
    "name": "azure-ad",
    "message": "Client secret transmitted in plain text",
    "url": "https://jenkins.io/security/advisory/2020-02-12/#SECURITY-1717",
    "versions": [
      {
        "lastVersion": "1.1.2",
        "pattern": "(0|1[.][01])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1725",
    "type": "plugin",
    "name": "subversion",
    "message": "Stored XSS vulnerability",
    "url": "https://jenkins.io/security/advisory/2020-02-12/#SECURITY-1725",
    "versions": [
      {
        "lastVersion": "2.13.0",
        "pattern": "(1|2[.][0-9]|2[.]1[0-2]|2[.]13[.]0)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1731",
    "type": "plugin",
    "name": "google-kubernetes-engine",
    "message": "RCE vulnerability",
    "url": "https://jenkins.io/security/advisory/2020-02-12/#SECURITY-1731",
    "versions": [
      {
        "lastVersion": "0.8.0",
        "pattern": "(0[.][24567]|0[.]8[.]0)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1733",
    "type": "plugin",
    "name": "radargun",
    "message": "RCE vulnerability",
    "url": "https://jenkins.io/security/advisory/2020-02-12/#SECURITY-1733",
    "versions": [
      {
        "lastVersion": "1.7",
        "pattern": "(1[.][0-7])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1751",
    "type": "plugin",
    "name": "fitnesse",
    "message": "XXE vulnerability",
    "url": "https://jenkins.io/security/advisory/2020-02-12/#SECURITY-1751",
    "versions": [
      {
        "lastVersion": "1.30",
        "pattern": "(1[.]1[0-6]|1[.]2[4678]|1[.]30|1[.][5-9])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1752",
    "type": "plugin",
    "name": "nunit",
    "message": "XXE vulnerability",
    "url": "https://jenkins.io/security/advisory/2020-02-12/#SECURITY-1752",
    "versions": [
      {
        "lastVersion": "0.25",
        "pattern": "(0[.]1[1-9]|0[.]2[0-5])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-812-1",
    "type": "plugin",
    "name": "pipeline-githubnotify-step",
    "message": "CSRF vulnerability and missing permission checks allows capturing credentials",
    "url": "https://jenkins.io/security/advisory/2020-02-12/#SECURITY-812%20(1)",
    "versions": [
      {
        "lastVersion": "1.0.4",
        "pattern": "(1[.]0[.][0-4])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-812-2",
    "type": "plugin",
    "name": "pipeline-githubnotify-step",
    "message": "Users with Overall/Read access can enumerate credential IDs",
    "url": "https://jenkins.io/security/advisory/2020-02-12/#SECURITY-812%20(2)",
    "versions": [
      {
        "lastVersion": "1.0.4",
        "pattern": "(1[.]0[.][0-4])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1510",
    "type": "plugin",
    "name": "backlog",
    "message": "Credentials transmitted in plain text",
    "url": "https://jenkins.io/security/advisory/2020-03-09/#SECURITY-1510",
    "versions": [
      {
        "lastVersion": "2.4",
        "pattern": "(1|2[.][0-4])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1511",
    "type": "plugin",
    "name": "deployhub",
    "message": "Credentials transmitted in plain text",
    "url": "https://jenkins.io/security/advisory/2020-03-09/#SECURITY-1511",
    "versions": [
      {
        "lastVersion": "8.0.14",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1516",
    "type": "plugin",
    "name": "logstash",
    "message": "Credentials transmitted in plain text",
    "url": "https://jenkins.io/security/advisory/2020-03-09/#SECURITY-1516",
    "versions": [
      {
        "lastVersion": "2.3.1",
        "pattern": "([01]|2[.][0-2]|2[.]3[.][01])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1518",
    "type": "plugin",
    "name": "openshift-deployer",
    "message": "Credentials transmitted in plain text",
    "url": "https://jenkins.io/security/advisory/2020-03-09/#SECURITY-1518",
    "versions": [
      {
        "lastVersion": "1.2.0",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1519",
    "type": "plugin",
    "name": "quality-gates",
    "message": "Credentials transmitted in plain text",
    "url": "https://jenkins.io/security/advisory/2020-03-09/#SECURITY-1519",
    "versions": [
      {
        "lastVersion": "2.5",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1520",
    "type": "plugin",
    "name": "repository-connector",
    "message": "Credentials transmitted in plain text",
    "url": "https://jenkins.io/security/advisory/2020-03-09/#SECURITY-1520",
    "versions": [
      {
        "lastVersion": "1.3.1",
        "pattern": "([01])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1522",
    "type": "plugin",
    "name": "skytap",
    "message": "Credentials transmitted in plain text",
    "url": "https://jenkins.io/security/advisory/2020-03-09/#SECURITY-1522",
    "versions": [
      {
        "lastVersion": "2.07",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1523",
    "type": "plugin",
    "name": "sonar-quality-gates",
    "message": "Credentials transmitted in plain text",
    "url": "https://jenkins.io/security/advisory/2020-03-09/#SECURITY-1523",
    "versions": [
      {
        "lastVersion": "1.3.1",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1550",
    "type": "plugin",
    "name": "zephyr-for-jira-test-management",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2020-03-09/#SECURITY-1550",
    "versions": [
      {
        "lastVersion": "1.5",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1596",
    "type": "plugin",
    "name": "zephyr-enterprise-test-management",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2020-03-09/#SECURITY-1596",
    "versions": [
      {
        "lastVersion": "1.9.1",
        "pattern": "(1[.][012345689])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1635",
    "type": "plugin",
    "name": "cryptomove",
    "message": "OS command injection",
    "url": "https://jenkins.io/security/advisory/2020-03-09/#SECURITY-1635",
    "versions": [
      {
        "lastVersion": "0.1.33",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1668",
    "type": "plugin",
    "name": "cobertura",
    "message": "Arbitrary file write vulnerability",
    "url": "https://jenkins.io/security/advisory/2020-03-09/#SECURITY-1668",
    "versions": [
      {
        "lastVersion": "1.15",
        "pattern": "(1[.][1-9]|1[.]1[0-5])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1692",
    "type": "plugin",
    "name": "mac",
    "message": "Missing SSH host key validation",
    "url": "https://jenkins.io/security/advisory/2020-03-09/#SECURITY-1692",
    "versions": [
      {
        "lastVersion": "1.1.0",
        "pattern": "(1[.][01])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1700",
    "type": "plugin",
    "name": "cobertura",
    "message": "XXE vulnerability",
    "url": "https://jenkins.io/security/advisory/2020-03-09/#SECURITY-1700",
    "versions": [
      {
        "lastVersion": "1.15",
        "pattern": "(1[.][1-9]|1[.]1[0-5])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1702",
    "type": "plugin",
    "name": "rundeck",
    "message": "XXE vulnerability",
    "url": "https://jenkins.io/security/advisory/2020-03-09/#SECURITY-1702",
    "versions": [
      {
        "lastVersion": "3.6.6",
        "pattern": "([12]|3[.][01345]|3[.]6[.][1-6])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1722",
    "type": "plugin",
    "name": "audit-trail",
    "message": "XSS vulnerability",
    "url": "https://jenkins.io/security/advisory/2020-03-09/#SECURITY-1722",
    "versions": [
      {
        "lastVersion": "3.2",
        "pattern": "([12]|3[.][0-2])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1723",
    "type": "plugin",
    "name": "git",
    "message": "Stored XSS vulnerability",
    "url": "https://jenkins.io/security/advisory/2020-03-09/#SECURITY-1723",
    "versions": [
      {
        "lastVersion": "4.2.0",
        "pattern": "([12]|3[.][0-9]|3[.]10[.]1|3[.]11|3[.]12[.][01]|4[.]0[.]0|4[.]1|4[.]2[.]0)(|[.-].+)|(3[.]10[.]0)"
      }
    ]
  },
  {
    "id": "SECURITY-1727",
    "type": "plugin",
    "name": "svn-release-mgr",
    "message": "XSS vulnerability",
    "url": "https://jenkins.io/security/advisory/2020-03-09/#SECURITY-1727",
    "versions": [
      {
        "lastVersion": "1.2",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1750",
    "type": "plugin",
    "name": "literate",
    "message": "RCE vulnerability",
    "url": "https://jenkins.io/security/advisory/2020-03-09/#SECURITY-1750",
    "versions": [
      {
        "lastVersion": "1.0",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1754",
    "type": "plugin",
    "name": "script-security",
    "message": "Sandbox bypass vulnerability",
    "url": "https://jenkins.io/security/advisory/2020-03-09/#SECURITY-1754",
    "versions": [
      {
        "lastVersion": "1.70",
        "pattern": "(1[.][0-9]|1[.]1[0-9]|1[.]2[0-9]|1[.]3[013456789]|1[.]4[0-9]|1[.]5[012345689]|1[.]57[.][1-5]|1[.]6[012345789]|1[.]66[.][12]|1[.]70)(|[.-].+)|(1[.]57|1[.]66)"
      }
    ]
  },
  {
    "id": "SECURITY-1761",
    "type": "plugin",
    "name": "mac",
    "message": "CSRF vulnerability and missing permission checks",
    "url": "https://jenkins.io/security/advisory/2020-03-09/#SECURITY-1761",
    "versions": [
      {
        "lastVersion": "1.1.0",
        "pattern": "(1[.][01])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1765",
    "type": "plugin",
    "name": "p4",
    "message": "CSRF vulnerability and missing permission checks",
    "url": "https://jenkins.io/security/advisory/2020-03-09/#SECURITY-1765",
    "versions": [
      {
        "lastVersion": "1.10.10",
        "pattern": "(1[.][0-9]|1[.]10[.][012345679]|1[.]10[.]10)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1784",
    "type": "plugin",
    "name": "timestamper",
    "message": "Stored XSS vulnerability",
    "url": "https://jenkins.io/security/advisory/2020-03-09/#SECURITY-1784",
    "versions": [
      {
        "lastVersion": "1.11.1",
        "pattern": "(1[.]10|1[.]11[.]1|1[.][2-9])(|[.-].+)|(1[.]11)"
      }
    ]
  },
  {
    "id": "core-2_228",
    "type": "core",
    "name": "core",
    "message": "Multiple security vulnerabilities in Jenkins 2.227 and earlier, LTS 2.204.5 and earlier",
    "url": "https://jenkins.io/security/advisory/2020-03-25/",
    "versions": [
      {
        "lastVersion": "2.227",
        "pattern": "(1|2[.][0-9]|2[.]1[0-9]|2[.]10[0-9]|2[.]11[0-9]|2[.]12[0-9]|2[.]13[0-8]|2[.]14[0-9]|2[.]15[0-9]|2[.]16[0-9]|2[.]17[0-9]|2[.]18[012345679]|2[.]19[0-9]|2[.]2[0-9]|2[.]20[012356789]|2[.]21[012345789]|2[.]22[0134567]|2[.]3[0-9]|2[.]4[0-9]|2[.]5[0-9]|2[.]6[0-9]|2[.]7[0-9]|2[.]8[0-9]|2[.]9[0-9])(|[.-].+)|(2[.]204|2[.]222)"
      },
      {
        "lastVersion": "LTS 2.204.5",
        "pattern": "(1|2[.]107|2[.]121|2[.]138|2[.]150|2[.]164|2[.]176|2[.]19|2[.]190|2[.]204[.][1-5]|2[.]32|2[.]46|2[.]60|2[.]7|2[.]73|2[.]89)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1542-1",
    "type": "plugin",
    "name": "artifactory",
    "message": "Passwords stored in plain text",
    "url": "https://jenkins.io/security/advisory/2020-03-25/#SECURITY-1542%20(1)",
    "versions": [
      {
        "lastVersion": "3.5.0",
        "pattern": "([12]|3[.][0-5])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1542-2",
    "type": "plugin",
    "name": "artifactory",
    "message": "Passwords transmitted in plain text",
    "url": "https://jenkins.io/security/advisory/2020-03-25/#SECURITY-1542%20(2)",
    "versions": [
      {
        "lastVersion": "3.6.0",
        "pattern": "([12]|3[.][0-5]|3[.]6[.]0)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1676",
    "type": "plugin",
    "name": "rapiddeploy-jenkins",
    "message": "Stored XSS vulnerability",
    "url": "https://jenkins.io/security/advisory/2020-03-25/#SECURITY-1676",
    "versions": [
      {
        "lastVersion": "4.2",
        "pattern": "([1-3]|4[.][01])(|[.-].+)|(4[.]2)"
      }
    ]
  },
  {
    "id": "SECURITY-1677",
    "type": "plugin",
    "name": "rapiddeploy-jenkins",
    "message": "XXE vulnerability",
    "url": "https://jenkins.io/security/advisory/2020-03-25/#SECURITY-1677",
    "versions": [
      {
        "lastVersion": "4.2",
        "pattern": "([1-3]|4[.][01])(|[.-].+)|(4[.]2)"
      }
    ]
  },
  {
    "id": "SECURITY-1724",
    "type": "plugin",
    "name": "queue-cleanup",
    "message": "Reflected XSS vulnerability",
    "url": "https://jenkins.io/security/advisory/2020-03-25/#SECURITY-1724",
    "versions": [
      {
        "lastVersion": "1.3",
        "pattern": "(1[.][0-3])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1732",
    "type": "plugin",
    "name": "azure-acs",
    "message": "RCE vulnerability",
    "url": "https://jenkins.io/security/advisory/2020-03-25/#SECURITY-1732",
    "versions": [
      {
        "lastVersion": "1.0.1",
        "pattern": "(0|1[.]0[.][01])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1739",
    "type": "plugin",
    "name": "openshift-pipeline",
    "message": "RCE vulnerability",
    "url": "https://jenkins.io/security/advisory/2020-03-25/#SECURITY-1739",
    "versions": [
      {
        "lastVersion": "1.0.56",
        "pattern": "(1[.]0[.][1-9]|1[.]0[.]1[0-9]|1[.]0[.]2[0-9]|1[.]0[.]3[0-9]|1[.]0[.]4[0-9]|1[.]0[.]5[0-6])(|[.-].+)|(1[.]0)"
      }
    ]
  },
  {
    "id": "SECURITY-1741",
    "type": "plugin",
    "name": "pipeline-aws",
    "message": "RCE vulnerability",
    "url": "https://jenkins.io/security/advisory/2020-03-25/#SECURITY-1741",
    "versions": [
      {
        "lastVersion": "1.40",
        "pattern": "(1[.][0-9]|1[.]1[0-9]|1[.]2[0-9]|1[.]3[0-9]|1[.]40)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1633",
    "type": "plugin",
    "name": "gatling",
    "message": "XSS vulnerability",
    "url": "https://jenkins.io/security/advisory/2020-04-07/#SECURITY-1633",
    "versions": [
      {
        "lastVersion": "1.2.7",
        "pattern": "(1[.][0-2])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1699",
    "type": "plugin",
    "name": "code-coverage-api",
    "message": "XXE vulnerability",
    "url": "https://jenkins.io/security/advisory/2020-04-07/#SECURITY-1699",
    "versions": [
      {
        "lastVersion": "1.1.4",
        "pattern": "(1[.]0|1[.]1[.][0-4])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1769",
    "type": "plugin",
    "name": "awseb-deployment-plugin",
    "message": "Reflected XSS vulnerability",
    "url": "https://jenkins.io/security/advisory/2020-04-07/#SECURITY-1769",
    "versions": [
      {
        "lastVersion": "0.3.19",
        "pattern": "(0[.][0-2]|0[.]3[.][0123578]|0[.]3[.]1[03456789])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1780",
    "type": "plugin",
    "name": "usemango-runner",
    "message": "XSS vulnerability",
    "url": "https://jenkins.io/security/advisory/2020-04-07/#SECURITY-1780",
    "versions": [
      {
        "lastVersion": "1.4",
        "pattern": "(1[.][0-4]|y)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1801",
    "type": "plugin",
    "name": "fitnesse",
    "message": "Stored XSS vulnerability",
    "url": "https://jenkins.io/security/advisory/2020-04-07/#SECURITY-1801",
    "versions": [
      {
        "lastVersion": "1.31",
        "pattern": "(1[.]1[0-6]|1[.]2[4678]|1[.]3[01]|1[.][5-9])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1556",
    "type": "plugin",
    "name": "copr",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2020-04-16/#SECURITY-1556",
    "versions": [
      {
        "lastVersion": "0.3",
        "pattern": "(0[.][1-3])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1736",
    "type": "plugin",
    "name": "aws-sam",
    "message": "RCE vulnerability",
    "url": "https://jenkins.io/security/advisory/2020-04-16/#SECURITY-1736",
    "versions": [
      {
        "lastVersion": "1.2.2",
        "pattern": "(1[.]2[.]2)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1753",
    "type": "plugin",
    "name": "parasoft-findings",
    "message": "XXE vulnerability",
    "url": "https://jenkins.io/security/advisory/2020-04-16/#SECURITY-1753",
    "versions": [
      {
        "lastVersion": "10.4.3",
        "pattern": "(10[.][23]|10[.]4[.][0-3])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1825",
    "type": "plugin",
    "name": "yaml-axis",
    "message": "RCE vulnerability",
    "url": "https://jenkins.io/security/advisory/2020-04-16/#SECURITY-1825",
    "versions": [
      {
        "lastVersion": "0.2.0",
        "pattern": "(0[.]1|0[.]2[.]0)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1094",
    "type": "plugin",
    "name": "cvs",
    "message": "CSRF vulnerability",
    "url": "https://jenkins.io/security/advisory/2020-05-06/#SECURITY-1094",
    "versions": [
      {
        "lastVersion": "2.15",
        "pattern": "(1|2[.][0-9]|2[.]1[0-5])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1374",
    "type": "plugin",
    "name": "credentials-binding",
    "message": "Secrets are not masked in builds without build steps",
    "url": "https://jenkins.io/security/advisory/2020-05-06/#SECURITY-1374",
    "versions": [
      {
        "lastVersion": "1.22",
        "pattern": "(1[.][0-9]|1[.]1[0-9]|1[.]2[12])(|[.-].+)|(1[.]20)"
      }
    ]
  },
  {
    "id": "SECURITY-1408",
    "type": "plugin",
    "name": "ec2",
    "message": "CSRF vulnerability",
    "url": "https://jenkins.io/security/advisory/2020-05-06/#SECURITY-1408",
    "versions": [
      {
        "lastVersion": "1.50.1",
        "pattern": "(1[.]1[1-9]|1[.]2[0-9]|1[.]3[0-9]|1[.]4[01234578]|1[.]46[.][12]|1[.]49[.]1|1[.]50[.]1)(|[.-].+)|(1[.]4[69]|1[.]50)"
      }
    ]
  },
  {
    "id": "SECURITY-1528",
    "type": "plugin",
    "name": "ec2",
    "message": "Lack of SSL/TLS certificate and hostname validation",
    "url": "https://jenkins.io/security/advisory/2020-05-06/#SECURITY-1528",
    "versions": [
      {
        "lastVersion": "1.50.1",
        "pattern": "(1[.]1[1-9]|1[.]2[0-9]|1[.]3[0-9]|1[.]4[01234578]|1[.]46[.][12]|1[.]49[.]1|1[.]50[.]1)(|[.-].+)|(1[.]4[69]|1[.]50)"
      }
    ]
  },
  {
    "id": "SECURITY-1826",
    "type": "plugin",
    "name": "scm-filter-jervis",
    "message": "RCE vulnerability",
    "url": "https://jenkins.io/security/advisory/2020-05-06/#SECURITY-1826",
    "versions": [
      {
        "lastVersion": "0.2.1",
        "pattern": "(0[.][12])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1835",
    "type": "plugin",
    "name": "credentials-binding",
    "message": "Improper masking of some secrets",
    "url": "https://jenkins.io/security/advisory/2020-05-06/#SECURITY-1835",
    "versions": [
      {
        "lastVersion": "1.22",
        "pattern": "(1[.][0-9]|1[.]1[0-9]|1[.]2[12])(|[.-].+)|(1[.]20)"
      }
    ]
  },
  {
    "id": "SECURITY-1844",
    "type": "plugin",
    "name": "ec2",
    "message": "Users with Overall/Read access can enumerate credentials IDs",
    "url": "https://jenkins.io/security/advisory/2020-05-06/#SECURITY-1844",
    "versions": [
      {
        "lastVersion": "1.50.1",
        "pattern": "(1[.]1[1-9]|1[.]2[0-9]|1[.]3[0-9]|1[.]4[01234578]|1[.]46[.][12]|1[.]49[.]1|1[.]50[.]1)(|[.-].+)|(1[.]4[69]|1[.]50)"
      }
    ]
  },
  {
    "id": "SECURITY-381",
    "type": "plugin",
    "name": "ec2",
    "message": "Missing SSH host key validation",
    "url": "https://jenkins.io/security/advisory/2020-05-06/#SECURITY-381",
    "versions": [
      {
        "lastVersion": "1.50.1",
        "pattern": "(1[.]1[1-9]|1[.]2[0-9]|1[.]3[0-9]|1[.]4[01234578]|1[.]46[.][12]|1[.]49[.]1|1[.]50[.]1)(|[.-].+)|(1[.]4[69]|1[.]50)"
      }
    ]
  },
  {
    "id": "SECURITY-988",
    "type": "plugin",
    "name": "copyartifact",
    "message": "Improper permission checks",
    "url": "https://jenkins.io/security/advisory/2020-05-06/#SECURITY-988",
    "versions": [
      {
        "lastVersion": "1.43.1",
        "pattern": "(1[.]1[2-9]|1[.]2[0-9]|1[.]3[0-9]|1[.]4[0-3])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1200",
    "type": "plugin",
    "name": "swarm",
    "message": "CSRF vulnerability and improper permission checks",
    "url": "https://jenkins.io/security/advisory/2020-06-03/#SECURITY-1200",
    "versions": [
      {
        "lastVersion": "3.20",
        "pattern": "([12]|3[.]1[0-9]|3[.]20|3[.][3-9])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1582",
    "type": "plugin",
    "name": "project-inheritance",
    "message": "Missing permission check",
    "url": "https://jenkins.io/security/advisory/2020-06-03/#SECURITY-1582",
    "versions": [
      {
        "lastVersion": "19.08.02",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1726",
    "type": "plugin",
    "name": "svn-partial-release-mgr",
    "message": "XSS vulnerability",
    "url": "https://jenkins.io/security/advisory/2020-06-03/#SECURITY-1726",
    "versions": [
      {
        "lastVersion": "1.0.1",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1766",
    "type": "plugin",
    "name": "selenium",
    "message": "Complete lack of CSRF protection can lead to OS command injection",
    "url": "https://jenkins.io/security/advisory/2020-06-03/#SECURITY-1766",
    "versions": [
      {
        "lastVersion": "3.141.59",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1837",
    "type": "plugin",
    "name": "compact-columns",
    "message": "Stored XSS vulnerability",
    "url": "https://jenkins.io/security/advisory/2020-06-03/#SECURITY-1837",
    "versions": [
      {
        "lastVersion": "1.11",
        "pattern": "(1[.]1[01]|1[.][6-9])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1841",
    "type": "plugin",
    "name": "echarts-api",
    "message": "Stored XSS vulnerability",
    "url": "https://jenkins.io/security/advisory/2020-06-03/#SECURITY-1841",
    "versions": [
      {
        "lastVersion": "4.7.0-3",
        "pattern": "(4[.]6|4[.]7[.]0[-][1-3])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1842",
    "type": "plugin",
    "name": "echarts-api",
    "message": "Stored XSS vulnerability",
    "url": "https://jenkins.io/security/advisory/2020-06-03/#SECURITY-1842",
    "versions": [
      {
        "lastVersion": "4.7.0-3",
        "pattern": "(4[.]6|4[.]7[.]0[-][1-3])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1866",
    "type": "plugin",
    "name": "script-security",
    "message": "Stored XSS vulnerability",
    "url": "https://jenkins.io/security/advisory/2020-06-03/#SECURITY-1866",
    "versions": [
      {
        "lastVersion": "1.72",
        "pattern": "(1[.][0-9]|1[.]1[0-9]|1[.]2[0-9]|1[.]3[013456789]|1[.]4[0-9]|1[.]5[0-9]|1[.]6[012345789]|1[.]66[.][1-3]|1[.]7[0-2])(|[.-].+)|(1[.]66)"
      }
    ]
  },
  {
    "id": "SECURITY-1879",
    "type": "plugin",
    "name": "play-autotest-plugin",
    "message": "OS command injection vulnerability",
    "url": "https://jenkins.io/security/advisory/2020-06-03/#SECURITY-1879",
    "versions": [
      {
        "lastVersion": "1.0.2",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1576",
    "type": "plugin",
    "name": "hp-quality-center",
    "message": "Password stored in plain text",
    "url": "https://jenkins.io/security/advisory/2020-07-02/#SECURITY-1576",
    "versions": [
      {
        "lastVersion": "1.6",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1627",
    "type": "plugin",
    "name": "slack-uploader",
    "message": "Secret stored in plain text",
    "url": "https://jenkins.io/security/advisory/2020-07-02/#SECURITY-1627",
    "versions": [
      {
        "lastVersion": "1.7",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1630",
    "type": "plugin",
    "name": "whitesource",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2020-07-02/#SECURITY-1630",
    "versions": [
      {
        "lastVersion": "19.1.1",
        "pattern": "(1|1[7-9])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1632",
    "type": "plugin",
    "name": "github-coverage-reporter",
    "message": "Secret stored in plain text",
    "url": "https://jenkins.io/security/advisory/2020-07-02/#SECURITY-1632",
    "versions": [
      {
        "lastVersion": "1.8",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1656",
    "type": "plugin",
    "name": "StashBranchParameter",
    "message": "Passwords transmitted in plain text",
    "url": "https://jenkins.io/security/advisory/2020-07-02/#SECURITY-1656",
    "versions": [
      {
        "lastVersion": "0.3.0",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1686",
    "type": "plugin",
    "name": "TestComplete",
    "message": "Password stored in plain text",
    "url": "https://jenkins.io/security/advisory/2020-07-02/#SECURITY-1686",
    "versions": [
      {
        "lastVersion": "2.5.1",
        "pattern": "(1|2[.][0-4]|2[.]5[.]1)(|[.-].+)|(2[.]5)"
      }
    ]
  },
  {
    "id": "SECURITY-1690",
    "type": "plugin",
    "name": "fortify-on-demand-uploader",
    "message": "Users with Overall/Read access could enumerate credentials IDs",
    "url": "https://jenkins.io/security/advisory/2020-07-02/#SECURITY-1690",
    "versions": [
      {
        "lastVersion": "6.0.0",
        "pattern": "([1-5]|6[.]0[.]0)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1691",
    "type": "plugin",
    "name": "fortify-on-demand-uploader",
    "message": "CSRF vulnerability and missing permission checks",
    "url": "https://jenkins.io/security/advisory/2020-07-02/#SECURITY-1691",
    "versions": [
      {
        "lastVersion": "5.0.1",
        "pattern": "([1-5])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1728-1",
    "type": "plugin",
    "name": "vncrecorder",
    "message": "Stored XSS vulnerability",
    "url": "https://jenkins.io/security/advisory/2020-07-02/#SECURITY-1728%20(1)",
    "versions": [
      {
        "lastVersion": "1.25",
        "pattern": "(1[.][124568]|1[.]1[234589]|1[.]2[0-5])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1728-2",
    "type": "plugin",
    "name": "vncrecorder",
    "message": "Reflected XSS vulnerability",
    "url": "https://jenkins.io/security/advisory/2020-07-02/#SECURITY-1728%20(2)",
    "versions": [
      {
        "lastVersion": "1.25",
        "pattern": "(1[.][124568]|1[.]1[234589]|1[.]2[0-5])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1738",
    "type": "plugin",
    "name": "kubernetes-ci",
    "message": "RCE vulnerability",
    "url": "https://jenkins.io/security/advisory/2020-07-02/#SECURITY-1738",
    "versions": [
      {
        "lastVersion": "1.3",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1762",
    "type": "plugin",
    "name": "zephyr-for-jira-test-management",
    "message": "CSRF vulnerability and missing permission checks",
    "url": "https://jenkins.io/security/advisory/2020-07-02/#SECURITY-1762",
    "versions": [
      {
        "lastVersion": "1.5",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1771",
    "type": "plugin",
    "name": "compatibility-action-storage",
    "message": "Reflected XSS",
    "url": "https://jenkins.io/security/advisory/2020-07-02/#SECURITY-1771",
    "versions": [
      {
        "lastVersion": "1.0",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1775",
    "type": "plugin",
    "name": "sonargraph-integration",
    "message": "Stored XSS vulnerability",
    "url": "https://jenkins.io/security/advisory/2020-07-02/#SECURITY-1775",
    "versions": [
      {
        "lastVersion": "3.0.0",
        "pattern": "([12]|3[.]0[.]0)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1776",
    "type": "plugin",
    "name": "vncviewer",
    "message": "Reflected XSS vulnerability",
    "url": "https://jenkins.io/security/advisory/2020-07-02/#SECURITY-1776",
    "versions": [
      {
        "lastVersion": "1.7",
        "pattern": "(1[.][012357])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1803",
    "type": "plugin",
    "name": "link-column",
    "message": "Stored XSS vulnerability",
    "url": "https://jenkins.io/security/advisory/2020-07-02/#SECURITY-1803",
    "versions": [
      {
        "lastVersion": "1.0",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1811",
    "type": "plugin",
    "name": "zap-pipeline",
    "message": "Content-Security-Policy protection for user content disabled",
    "url": "https://jenkins.io/security/advisory/2020-07-02/#SECURITY-1811",
    "versions": [
      {
        "lastVersion": "1.9",
        "pattern": "(1[.][0-9])(|[.-].+)"
      }
    ]
  },
  {
    "id": "core-2_245",
    "type": "core",
    "name": "core",
    "message": "Multiple security vulnerabilities in Jenkins 2.244 and earlier, LTS 2.235.1 and earlier",
    "url": "https://jenkins.io/security/advisory/2020-07-15/",
    "versions": [
      {
        "lastVersion": "2.244",
        "pattern": "(1|2[.][0-9]|2[.]1[0-9]|2[.]10[0-9]|2[.]11[0-9]|2[.]12[0-9]|2[.]13[0-8]|2[.]14[0-9]|2[.]15[0-9]|2[.]16[0-9]|2[.]17[0-9]|2[.]18[012345679]|2[.]19[0-9]|2[.]2[0-9]|2[.]20[0-9]|2[.]21[012345789]|2[.]22[0-9]|2[.]23[012346789]|2[.]24[0-4]|2[.]3[0-9]|2[.]4[0-9]|2[.]5[0-9]|2[.]6[0-9]|2[.]7[0-9]|2[.]8[0-9]|2[.]9[0-9])(|[.-].+)|(2[.]235)"
      },
      {
        "lastVersion": "LTS 2.235.1",
        "pattern": "(1|2[.]107|2[.]121|2[.]138|2[.]150|2[.]164|2[.]176|2[.]19|2[.]190|2[.]204|2[.]222|2[.]235[.]1|2[.]32|2[.]46|2[.]60|2[.]7|2[.]73|2[.]89)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1792",
    "type": "plugin",
    "name": "gitlab-oauth",
    "message": "Improper authorization of users and groups with the same base name",
    "url": "https://jenkins.io/security/advisory/2020-07-15/#SECURITY-1792",
    "versions": [
      {
        "lastVersion": "1.5",
        "pattern": "(1[.][0-5])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1909",
    "type": "plugin",
    "name": "matrix-auth",
    "message": "Stored XSS vulnerability",
    "url": "https://jenkins.io/security/advisory/2020-07-15/#SECURITY-1909",
    "versions": [
      {
        "lastVersion": "2.6.1",
        "pattern": "(1|2[.][0-4]|2[.]6[.]1)(|[.-].+)|(2[.][56])"
      }
    ]
  },
  {
    "id": "SECURITY-1915",
    "type": "plugin",
    "name": "deployer-framework",
    "message": "Stored XSS vulnerability",
    "url": "https://jenkins.io/security/advisory/2020-07-15/#SECURITY-1915",
    "versions": [
      {
        "lastVersion": "1.2",
        "pattern": "(1[.][0-2])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1924",
    "type": "plugin",
    "name": "matrix-project",
    "message": "Stored XSS vulnerability in single axis builds tooltips",
    "url": "https://jenkins.io/security/advisory/2020-07-15/#SECURITY-1924",
    "versions": [
      {
        "lastVersion": "1.16",
        "pattern": "(1[.][0-9]|1[.]1[012356])(|[.-].+)|(1[.]14)"
      }
    ]
  },
  {
    "id": "SECURITY-1925",
    "type": "plugin",
    "name": "matrix-project",
    "message": "Stored XSS vulnerability in multiple axis builds tooltips",
    "url": "https://jenkins.io/security/advisory/2020-07-15/#SECURITY-1925",
    "versions": [
      {
        "lastVersion": "1.16",
        "pattern": "(1[.][0-9]|1[.]1[012356])(|[.-].+)|(1[.]14)"
      }
    ]
  },
  {
    "id": "core-2_252",
    "type": "core",
    "name": "core",
    "message": "Multiple security vulnerabilities in Jenkins 2.251 and earlier, LTS 2.235.3 and earlier",
    "url": "https://jenkins.io/security/advisory/2020-08-12/",
    "versions": [
      {
        "lastVersion": "2.251",
        "pattern": "(1|2[.][0-9]|2[.]1[0-9]|2[.]10[0-9]|2[.]11[0-9]|2[.]12[0-9]|2[.]13[0-8]|2[.]14[0-9]|2[.]15[0-9]|2[.]16[0-9]|2[.]17[0-9]|2[.]18[012345679]|2[.]19[0-9]|2[.]2[0-9]|2[.]20[0-9]|2[.]21[012345789]|2[.]22[0-9]|2[.]23[012346789]|2[.]24[0-8]|2[.]25[01]|2[.]3[0-9]|2[.]4[0-9]|2[.]5[0-9]|2[.]6[0-9]|2[.]7[0-9]|2[.]8[0-9]|2[.]9[0-9])(|[.-].+)|(2[.](235|249))"
      },
      {
        "lastVersion": "LTS 2.235.3",
        "pattern": "(1|2[.]107|2[.]121|2[.]138|2[.]150|2[.]164|2[.]176|2[.]19|2[.]190|2[.]204|2[.]222|2[.]235[.][1-3]|2[.]32|2[.]46|2[.]60|2[.]7|2[.]73|2[.]89)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1763",
    "type": "plugin",
    "name": "flaky-test-handler",
    "message": "CSRF vulnerability",
    "url": "https://jenkins.io/security/advisory/2020-08-12/#SECURITY-1763",
    "versions": [
      {
        "lastVersion": "1.0.4",
        "pattern": "1[.]0[.].+"
      }
    ]
  },
  {
    "id": "SECURITY-1794-1",
    "type": "plugin",
    "name": "pipeline-maven",
    "message": "Missing permission check allows enumerating credentials IDs",
    "url": "https://jenkins.io/security/advisory/2020-08-12/#SECURITY-1794%20(1)",
    "versions": [
      {
        "lastVersion": "3.8.2",
        "pattern": "([02]|3[.][0-7]|3[.]8[.][0-2])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1794-2",
    "type": "plugin",
    "name": "pipeline-maven",
    "message": "CSRF vulnerability and missing permission check allow capturing credentials",
    "url": "https://jenkins.io/security/advisory/2020-08-12/#SECURITY-1794%20(2)",
    "versions": [
      {
        "lastVersion": "3.8.2",
        "pattern": "([02]|3[.][0-7]|3[.]8[.][0-2])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1940",
    "type": "plugin",
    "name": "yet-another-build-visualizer",
    "message": "Stored XSS vulnerability",
    "url": "https://jenkins.io/security/advisory/2020-08-12/#SECURITY-1940",
    "versions": [
      {
        "lastVersion": "1.11",
        "pattern": "(1[.][1-9]|1[.]1[01])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1975",
    "type": "plugin",
    "name": "email-ext",
    "message": "SMTP password transmitted and displayed in plain text",
    "url": "https://jenkins.io/security/advisory/2020-08-12/#SECURITY-1975",
    "versions": [
      {
        "firstVersion": "2.72",
        "lastVersion": "2.73",
        "pattern": "(2[.]7[23])(|[.-].+)"
      }
    ]
  },
  {
    "id": "core-2_235_5",
    "type": "core",
    "name": "core",
    "message": "Buffer corruption in bundled Jetty",
    "url": "https://jenkins.io/security/advisory/2020-08-17/",
    "versions": [
      {
        "lastVersion": "LTS 2.235.4",
        "pattern": "(2[.]222[.][1-4]|2[.]235[.][1-4])(|[.-].+)"
      },
      {
        "lastVersion": "2.242",
        "pattern": "(2[.]22[4-9]|2[.]23[012346789]|2[.]24[012])(|[.-].+)|(2[.]235)"
      }
    ]
  },
  {
    "id": "SECURITY-1023",
    "type": "plugin",
    "name": "database",
    "message": "CSRF vulnerability",
    "url": "https://jenkins.io/security/advisory/2020-09-01/#SECURITY-1023",
    "versions": [
      {
        "lastVersion": "1.6",
        "pattern": "(1[.][013456])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1024",
    "type": "plugin",
    "name": "database",
    "message": "CSRF vulnerability and missing permission checks",
    "url": "https://jenkins.io/security/advisory/2020-09-01/#SECURITY-1024",
    "versions": [
      {
        "lastVersion": "1.6",
        "pattern": "(1[.][013456])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1506",
    "type": "plugin",
    "name": "tfs",
    "message": "Credentials stored in plain text",
    "url": "https://jenkins.io/security/advisory/2020-09-01/#SECURITY-1506",
    "versions": [
      {
        "lastVersion": "5.157.1",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1625",
    "type": "plugin",
    "name": "Parameterized-Remote-Trigger",
    "message": "Secret stored in plain text",
    "url": "https://jenkins.io/security/advisory/2020-09-01/#SECURITY-1625",
    "versions": [
      {
        "lastVersion": "3.1.3",
        "pattern": "([12]|3[.]0|3[.]1[.][0-3])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1631-1",
    "type": "plugin",
    "name": "soapui-pro-functional-testing",
    "message": "Passwords stored in plain text",
    "url": "https://jenkins.io/security/advisory/2020-09-01/#SECURITY-1631%20(1)",
    "versions": [
      {
        "lastVersion": "1.3",
        "pattern": "(1[.][0-3])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1631-2",
    "type": "plugin",
    "name": "soapui-pro-functional-testing",
    "message": "Passwords transmitted in plain text",
    "url": "https://jenkins.io/security/advisory/2020-09-01/#SECURITY-1631%20(2)",
    "versions": [
      {
        "lastVersion": "1.5",
        "pattern": "(1[.][0-5])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1770",
    "type": "plugin",
    "name": "build-failure-analyzer",
    "message": "XSS vulnerability",
    "url": "https://jenkins.io/security/advisory/2020-09-01/#SECURITY-1770",
    "versions": [
      {
        "lastVersion": "1.27.0",
        "pattern": "(1[.]1[0-9]|1[.][2-9]|1[.]2[0-6]|1[.]27[.]0)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1829",
    "type": "plugin",
    "name": "valgrind",
    "message": "XXE vulnerability",
    "url": "https://jenkins.io/security/advisory/2020-09-01/#SECURITY-1829",
    "versions": [
      {
        "lastVersion": "0.28",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1830",
    "type": "plugin",
    "name": "valgrind",
    "message": "Stored XSS vulnerability",
    "url": "https://jenkins.io/security/advisory/2020-09-01/#SECURITY-1830",
    "versions": [
      {
        "lastVersion": "0.28",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1831",
    "type": "plugin",
    "name": "klocwork",
    "message": "XXE vulnerability",
    "url": "https://jenkins.io/security/advisory/2020-09-01/#SECURITY-1831",
    "versions": [
      {
        "lastVersion": "2020.3",
        "pattern": "([12]|2020[.]2)(|[.-].+)|(2020[.]3)"
      }
    ]
  },
  {
    "id": "SECURITY-1884",
    "type": "plugin",
    "name": "git-parameter",
    "message": "Stored XSS vulnerability",
    "url": "https://jenkins.io/security/advisory/2020-09-01/#SECURITY-1884",
    "versions": [
      {
        "lastVersion": "0.9.12",
        "pattern": "(0[.][1-8]|0[.]9[.][0-9]|0[.]9[.]1[0-2])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1905",
    "type": "plugin",
    "name": "jsgames",
    "message": "Reflected XSS vulnerability",
    "url": "https://jenkins.io/security/advisory/2020-09-01/#SECURITY-1905",
    "versions": [
      {
        "lastVersion": "0.2",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1936",
    "type": "plugin",
    "name": "vmanager-plugin",
    "message": "Stored XSS vulnerability",
    "url": "https://jenkins.io/security/advisory/2020-09-01/#SECURITY-1936",
    "versions": [
      {
        "lastVersion": "3.0.4",
        "pattern": "([12]|3[.]0[.][0-4])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1813",
    "type": "plugin",
    "name": "mailer",
    "message": "Missing hostname validation",
    "url": "https://www.jenkins.io/security/advisory/2020-09-16/#SECURITY-1813",
    "versions": [
      {
        "lastVersion": "1.32",
        "pattern": "(1[.][1-9]|1[.]1[0-9]|1[.]2[0-8]|1[.]30)(|[.-].+)|(1[.]29|1[.]3[12])"
      }
    ]
  },
  {
    "id": "SECURITY-1851",
    "type": "plugin",
    "name": "email-ext",
    "message": "Missing hostname validation",
    "url": "https://www.jenkins.io/security/advisory/2020-09-16/#SECURITY-1851",
    "versions": [
      {
        "lastVersion": "2.75",
        "pattern": "(2[.]1[012345689]|2[.]2[01245789]|2[.]3[0-9]|2[.]4[0-7]|2[.]5[0-9]|2[.]6[0-6]|2[.]7[1-5])(|[.-].+)|(2[.]6[89])"
      }
    ]
  },
  {
    "id": "SECURITY-1869",
    "type": "plugin",
    "name": "chosen-views-tabbar",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2020-09-16/#SECURITY-1869",
    "versions": [
      {
        "lastVersion": "1.2",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1903",
    "type": "plugin",
    "name": "elastest",
    "message": "CSRF vulnerability and missing permission checks",
    "url": "https://www.jenkins.io/security/advisory/2020-09-16/#SECURITY-1903",
    "versions": [
      {
        "lastVersion": "1.2.1",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1904",
    "type": "plugin",
    "name": "mongodb",
    "message": "CSRF vulnerability and missing permission checks",
    "url": "https://www.jenkins.io/security/advisory/2020-09-16/#SECURITY-1904",
    "versions": [
      {
        "lastVersion": "1.3",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1908",
    "type": "plugin",
    "name": "android-lint",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2020-09-16/#SECURITY-1908",
    "versions": [
      {
        "lastVersion": "2.6",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1911",
    "type": "plugin",
    "name": "clearcase-release",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2020-09-16/#SECURITY-1911",
    "versions": [
      {
        "lastVersion": "0.3",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1912",
    "type": "plugin",
    "name": "computer-queue-plugin",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2020-09-16/#SECURITY-1912",
    "versions": [
      {
        "lastVersion": "1.5",
        "pattern": "(1[.][0-5])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1913",
    "type": "plugin",
    "name": "covcomplplot",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2020-09-16/#SECURITY-1913",
    "versions": [
      {
        "lastVersion": "1.1.1",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1914",
    "type": "plugin",
    "name": "custom-job-icon",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2020-09-16/#SECURITY-1914",
    "versions": [
      {
        "lastVersion": "0.2",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1916",
    "type": "plugin",
    "name": "description-column-plugin",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2020-09-16/#SECURITY-1916",
    "versions": [
      {
        "lastVersion": "1.3",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1921",
    "type": "plugin",
    "name": "locked-files-report",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2020-09-16/#SECURITY-1921",
    "versions": [
      {
        "lastVersion": "1.6",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1927",
    "type": "plugin",
    "name": "radiatorviewplugin",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2020-09-16/#SECURITY-1927",
    "versions": [
      {
        "lastVersion": "1.29",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1935",
    "type": "plugin",
    "name": "validating-string-parameter",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2020-09-16/#SECURITY-1935",
    "versions": [
      {
        "lastVersion": "2.4",
        "pattern": "(1|2[.][0-4])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1956",
    "type": "plugin",
    "name": "blueocean",
    "message": "Path traversal vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2020-09-16/#SECURITY-1956",
    "versions": [
      {
        "lastVersion": "1.23.2",
        "pattern": "(1[.][0-9]|1[.]1[01345678]|1[.]19[.]0|1[.]2[12]|1[.]23[.][0-2])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1961",
    "type": "plugin",
    "name": "blueocean",
    "message": "Missing permission check",
    "url": "https://www.jenkins.io/security/advisory/2020-09-16/#SECURITY-1961",
    "versions": [
      {
        "lastVersion": "1.23.2",
        "pattern": "(1[.][0-9]|1[.]1[01345678]|1[.]19[.]0|1[.]2[12]|1[.]23[.][0-2])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1966",
    "type": "plugin",
    "name": "copy-data-to-workspace-plugin",
    "message": "Arbitrary file read vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2020-09-16/#SECURITY-1966",
    "versions": [
      {
        "lastVersion": "1.0",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1967",
    "type": "plugin",
    "name": "selection-tasks-plugin",
    "message": "System command execution vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2020-09-16/#SECURITY-1967",
    "versions": [
      {
        "lastVersion": "1.0",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1968-1",
    "type": "plugin",
    "name": "storable-configs-plugin",
    "message": "Arbitrary file read vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2020-09-16/#SECURITY-1968%20(1)",
    "versions": [
      {
        "lastVersion": "1.0",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1968-2",
    "type": "plugin",
    "name": "storable-configs-plugin",
    "message": "Arbitrary file write vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2020-09-16/#SECURITY-1968%20(2)",
    "versions": [
      {
        "lastVersion": "1.0",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1976",
    "type": "plugin",
    "name": "pipeline-maven",
    "message": "Stored XSS vulnerability in upstream cause",
    "url": "https://www.jenkins.io/security/advisory/2020-09-16/#SECURITY-1976",
    "versions": [
      {
        "lastVersion": "3.9.2",
        "pattern": "([02]|3[.][0-8]|3[.]9[.][0-2])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1979",
    "type": "plugin",
    "name": "perfecto",
    "message": "Missing permission check",
    "url": "https://www.jenkins.io/security/advisory/2020-09-16/#SECURITY-1979",
    "versions": [
      {
        "lastVersion": "1.17",
        "pattern": "(1[.]1[2-7])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1980",
    "type": "plugin",
    "name": "perfecto",
    "message": "OS command execution vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2020-09-16/#SECURITY-1980",
    "versions": [
      {
        "lastVersion": "1.17",
        "pattern": "(1[.]1[2-7])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1998",
    "type": "plugin",
    "name": "cloudbees-jenkins-advisor",
    "message": "Incorrect permission check",
    "url": "https://www.jenkins.io/security/advisory/2020-09-16/#SECURITY-1998",
    "versions": [
      {
        "lastVersion": "3.2.0",
        "pattern": "([12]|3[.]0[.]1|3[.]1[.]0|3[.]2[.]0)(|[.-].+)|(3[.]0)"
      }
    ]
  },
  {
    "id": "SECURITY-2014",
    "type": "plugin",
    "name": "elastest",
    "message": "Passwords stored in plain text",
    "url": "https://www.jenkins.io/security/advisory/2020-09-16/#SECURITY-2014",
    "versions": [
      {
        "lastVersion": "1.2.1",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1885",
    "type": "plugin",
    "name": "liquibase-runner",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2020-09-23/#SECURITY-1885",
    "versions": [
      {
        "lastVersion": "1.4.5",
        "pattern": "(1[.][0-3]|1[.]4[.][2-5])(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1887",
    "type": "plugin",
    "name": "liquibase-runner",
    "message": "XXE vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2020-09-23/#SECURITY-1887",
    "versions": [
      {
        "lastVersion": "1.4.5",
        "pattern": "(1[.][0-3]|1[.]4[.][2-5])(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1958",
    "type": "plugin",
    "name": "lockable-resources",
    "message": "CSRF vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2020-09-23/#SECURITY-1958",
    "versions": [
      {
        "lastVersion": "2.8",
        "pattern": "(1|2[.][0-8])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2004",
    "type": "plugin",
    "name": "implied-labels",
    "message": "Missing permission check allows reconfiguring the plugin",
    "url": "https://www.jenkins.io/security/advisory/2020-09-23/#SECURITY-2004",
    "versions": [
      {
        "lastVersion": "0.6",
        "pattern": "(0[.][1-6])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2020",
    "type": "plugin",
    "name": "script-security",
    "message": "Sandbox bypass vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2020-09-23/#SECURITY-2020",
    "versions": [
      {
        "lastVersion": "1.74",
        "pattern": "(1[.][0-9]|1[.]1[0-9]|1[.]2[0-9]|1[.]3[0-9]|1[.]4[0-9]|1[.]5[0-9]|1[.]6[0-9]|1[.]66[.][1-4]|1[.]7[0-4])(|[.-].+)|(1[.]66)"
      }
    ]
  },
  {
    "id": "SECURITY-2030",
    "type": "plugin",
    "name": "liquibase-runner",
    "message": "Missing permission check allows enumerating credentials IDs",
    "url": "https://www.jenkins.io/security/advisory/2020-09-23/#SECURITY-2030",
    "versions": [
      {
        "lastVersion": "1.4.7",
        "pattern": "(1[.][0-3]|1[.]4[.][2-7])(|[-.].*)"
      }
    ]
  },
  {
    "id": "SECURITY-2042",
    "type": "plugin",
    "name": "warnings",
    "message": "CSRF vulnerability allows remote code execution",
    "url": "https://www.jenkins.io/security/advisory/2020-09-23/#SECURITY-2042",
    "versions": [
      {
        "lastVersion": "5.0.1",
        "pattern": "([34]|5[.]0[.][01])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1767",
    "type": "plugin",
    "name": "role-strategy",
    "message": "Improper authorization due to caching",
    "url": "https://www.jenkins.io/security/advisory/2020-10-08/#SECURITY-1767",
    "versions": [
      {
        "lastVersion": "3.0",
        "pattern": "([12]|3[.]0)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1815",
    "type": "plugin",
    "name": "audit-trail",
    "message": "Request logging could be bypassed",
    "url": "https://www.jenkins.io/security/advisory/2020-10-08/#SECURITY-1815",
    "versions": [
      {
        "lastVersion": "3.6",
        "pattern": "([12]|3[.][0-6])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1846",
    "type": "plugin",
    "name": "audit-trail",
    "message": "Incorrect default pattern",
    "url": "https://www.jenkins.io/security/advisory/2020-10-08/#SECURITY-1846",
    "versions": [
      {
        "lastVersion": "3.6",
        "pattern": "([12]|3[.][0-6])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1928",
    "type": "plugin",
    "name": "release",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2020-10-08/#SECURITY-1928",
    "versions": [
      {
        "lastVersion": "2.10.2",
        "pattern": "(1|2[.][0-9]|2[.]10[.]1)(|[.-].+)|(2[.]10)"
      }
    ]
  },
  {
    "id": "SECURITY-1954",
    "type": "plugin",
    "name": "uno-choice",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2020-10-08/#SECURITY-1954",
    "versions": [
      {
        "lastVersion": "2.4",
        "pattern": "(2[.][0-4])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2008",
    "type": "plugin",
    "name": "uno-choice",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2020-10-08/#SECURITY-2008",
    "versions": [
      {
        "lastVersion": "2.4",
        "pattern": "(2[.][0-4])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2046",
    "type": "plugin",
    "name": "persona",
    "message": "Arbitrary file read vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2020-10-08/#SECURITY-2046",
    "versions": [
      {
        "lastVersion": "2.4",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2049",
    "type": "plugin",
    "name": "maven-release-cascade",
    "message": "CSRF vulnerability and missing permission checks",
    "url": "https://www.jenkins.io/security/advisory/2020-10-08/#SECURITY-2049",
    "versions": [
      {
        "lastVersion": "1.3.2",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2052",
    "type": "plugin",
    "name": "shared-objects",
    "message": "CSRF vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2020-10-08/#SECURITY-2052",
    "versions": [
      {
        "lastVersion": "0.44",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2054",
    "type": "plugin",
    "name": "sms",
    "message": "Access token stored in plain text",
    "url": "https://www.jenkins.io/security/advisory/2020-10-08/#SECURITY-2054",
    "versions": [
      {
        "lastVersion": "1.2",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2065",
    "type": "plugin",
    "name": "couchdb-statistics",
    "message": "Password stored in plain text",
    "url": "https://www.jenkins.io/security/advisory/2020-10-08/#SECURITY-2065",
    "versions": [
      {
        "lastVersion": "0.3",
        "pattern": "(0[.][23])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2097",
    "type": "plugin",
    "name": "nerrvana-plugin",
    "message": "XXE vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2020-10-08/#SECURITY-2097",
    "versions": [
      {
        "lastVersion": "1.02.06",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1646",
    "type": "plugin",
    "name": "kubernetes",
    "message": "Jenkins controller environment variables accessible",
    "url": "https://www.jenkins.io/security/advisory/2020-11-04/#SECURITY-1646",
    "versions": [
      {
        "lastVersion": "1.27.3",
        "pattern": "(0|1[.][0-9]|1[.]1[0-9]|1[.]2[0234]|1[.]21[.][0-5]|1[.]25[.][0123567]|1[.]26[.][0-4]|1[.]27[.][0-3])(|[.-].+)|(1[.]25[.]4)"
      }
    ]
  },
  {
    "id": "SECURITY-1900",
    "type": "plugin",
    "name": "visualworks-store",
    "message": "XXE vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2020-11-04/#SECURITY-1900",
    "versions": [
      {
        "lastVersion": "1.1.3",
        "pattern": "(1[.]0|1[.]1[.][13])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1907",
    "type": "plugin",
    "name": "analysis-core",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2020-11-04/#SECURITY-1907",
    "versions": [
      {
        "lastVersion": "1.96",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1918",
    "type": "plugin",
    "name": "findbugs",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2020-11-04/#SECURITY-1918",
    "versions": [
      {
        "lastVersion": "5.0.0",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1943",
    "type": "plugin",
    "name": "ansible",
    "message": "Missing permission checks allow enumerating credentials IDs",
    "url": "https://www.jenkins.io/security/advisory/2020-11-04/#SECURITY-1943",
    "versions": [
      {
        "lastVersion": "1.0",
        "pattern": "(0|1[.]0)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1999",
    "type": "plugin",
    "name": "active-directory",
    "message": "Missing permission check allows accessing domain health check page",
    "url": "https://www.jenkins.io/security/advisory/2020-11-04/#SECURITY-1999",
    "versions": [
      {
        "lastVersion": "2.19",
        "pattern": "(1|2[.][023456789]|2[.]1[012345789])(|[.-].+)|(2[.]16)"
      }
    ]
  },
  {
    "id": "SECURITY-2058",
    "type": "plugin",
    "name": "jenkinsci-appspider-plugin",
    "message": "Password stored in plain text",
    "url": "https://www.jenkins.io/security/advisory/2020-11-04/#SECURITY-2058",
    "versions": [
      {
        "lastVersion": "1.0.12",
        "pattern": "(1[.]0[.]1[0-2]|1[.]0[.][2-8])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2084",
    "type": "plugin",
    "name": "labmanager",
    "message": "Password stored in plain text",
    "url": "https://www.jenkins.io/security/advisory/2020-11-04/#SECURITY-2084",
    "versions": [
      {
        "lastVersion": "0.2.8",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2085",
    "type": "plugin",
    "name": "mailcommander",
    "message": "Passwords stored in plain text",
    "url": "https://www.jenkins.io/security/advisory/2020-11-04/#SECURITY-2085",
    "versions": [
      {
        "lastVersion": "1.0.0",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2099",
    "type": "plugin",
    "name": "active-directory",
    "message": "Login allowed with empty password",
    "url": "https://www.jenkins.io/security/advisory/2020-11-04/#SECURITY-2099",
    "versions": [
      {
        "lastVersion": "2.19",
        "pattern": "(1|2[.][023456789]|2[.]1[012345789])(|[.-].+)|(2[.]16)"
      }
    ]
  },
  {
    "id": "SECURITY-2101",
    "type": "plugin",
    "name": "aws-global-configuration",
    "message": "Missing permission check allows replacing plugin configuration",
    "url": "https://www.jenkins.io/security/advisory/2020-11-04/#SECURITY-2101",
    "versions": [
      {
        "lastVersion": "1.5",
        "pattern": "(1[.][01245])(|[.-].+)|(1[.]3)"
      }
    ]
  },
  {
    "id": "SECURITY-2102",
    "type": "plugin",
    "name": "kubernetes",
    "message": "Missing permission check allows listing pod templates",
    "url": "https://www.jenkins.io/security/advisory/2020-11-04/#SECURITY-2102",
    "versions": [
      {
        "lastVersion": "1.27.3",
        "pattern": "(0|1[.][0-9]|1[.]1[0-9]|1[.]2[0234]|1[.]21[.][0-5]|1[.]25[.][0123567]|1[.]26[.][0-4]|1[.]27[.][0-3])(|[.-].+)|(1[.]25[.]4)"
      }
    ]
  },
  {
    "id": "SECURITY-2103",
    "type": "plugin",
    "name": "kubernetes",
    "message": "Missing permission check allows enumerating credentials IDs",
    "url": "https://www.jenkins.io/security/advisory/2020-11-04/#SECURITY-2103",
    "versions": [
      {
        "lastVersion": "1.27.3",
        "pattern": "(0|1[.][0-9]|1[.]1[0-9]|1[.]2[0234]|1[.]21[.][0-5]|1[.]25[.][0123567]|1[.]26[.][0-4]|1[.]27[.][0-3])(|[.-].+)|(1[.]25[.]4)"
      }
    ]
  },
  {
    "id": "SECURITY-2104",
    "type": "plugin",
    "name": "mercurial",
    "message": "Missing permission check",
    "url": "https://www.jenkins.io/security/advisory/2020-11-04/#SECURITY-2104",
    "versions": [
      {
        "lastVersion": "2.11",
        "pattern": "(1|2[.][0-7]|2[.]11)(|[.-].+)|(2[.]10|2[.][89])"
      }
    ]
  },
  {
    "id": "SECURITY-2110",
    "type": "plugin",
    "name": "azure-keyvault",
    "message": "Missing permission checks allow enumerating credentials IDs",
    "url": "https://www.jenkins.io/security/advisory/2020-11-04/#SECURITY-2110",
    "versions": [
      {
        "lastVersion": "2.0",
        "pattern": "([01]|2[.]0)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2115",
    "type": "plugin",
    "name": "mercurial",
    "message": "XXE vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2020-11-04/#SECURITY-2115",
    "versions": [
      {
        "lastVersion": "2.11",
        "pattern": "(1|2[.][0-7]|2[.]11)(|[.-].+)|(2[.]10|2[.][89])"
      }
    ]
  },
  {
    "id": "SECURITY-2117",
    "type": "plugin",
    "name": "active-directory",
    "message": "Login allowed with hardcoded password",
    "url": "https://www.jenkins.io/security/advisory/2020-11-04/#SECURITY-2117",
    "versions": [
      {
        "lastVersion": "2.19",
        "pattern": "(1|2[.][023456789]|2[.]1[012345789])(|[.-].+)|(2[.]16)"
      }
    ]
  },
  {
    "id": "SECURITY-2123",
    "type": "plugin",
    "name": "active-directory",
    "message": "Authentication cache allows logging in with any password",
    "url": "https://www.jenkins.io/security/advisory/2020-11-04/#SECURITY-2123",
    "versions": [
      {
        "lastVersion": "2.19",
        "pattern": "(1|2[.][023456789]|2[.]1[012345789])(|[.-].+)|(2[.]16)"
      }
    ]
  },
  {
    "id": "SECURITY-2126",
    "type": "plugin",
    "name": "active-directory",
    "message": "CSRF vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2020-11-04/#SECURITY-2126",
    "versions": [
      {
        "lastVersion": "2.19",
        "pattern": "(1|2[.][023456789]|2[.]1[012345789])(|[.-].+)|(2[.]16)"
      }
    ]
  },
  {
    "id": "SECURITY-2129",
    "type": "plugin",
    "name": "sqlplus-script-runner",
    "message": "Password written to the build log",
    "url": "https://www.jenkins.io/security/advisory/2020-11-04/#SECURITY-2129",
    "versions": [
      {
        "lastVersion": "2.0.12",
        "pattern": "(1|2[.]0[.][0-9]|2[.]0[.]12)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2145",
    "type": "plugin",
    "name": "subversion",
    "message": "XXE vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2020-11-04/#SECURITY-2145",
    "versions": [
      {
        "lastVersion": "2.13.1",
        "pattern": "(1|2[.][0-9]|2[.]1[0-2]|2[.]13[.][01])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2108",
    "type": "plugin",
    "name": "shelve-project-plugin",
    "message": "CSRF vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2020-12-03/#SECURITY-2108",
    "versions": [
      {
        "lastVersion": "3.0",
        "pattern": "([12]|3[.]0)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2109-1",
    "type": "plugin",
    "name": "chaos-monkey",
    "message": "Missing permission checks",
    "url": "https://www.jenkins.io/security/advisory/2020-12-03/#SECURITY-2109%20(1)",
    "versions": [
      {
        "lastVersion": "0.3",
        "pattern": "(0[.][1-3])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2109-2",
    "type": "plugin",
    "name": "chaos-monkey",
    "message": "Missing permission checks",
    "url": "https://www.jenkins.io/security/advisory/2020-12-03/#SECURITY-2109%20(2)",
    "versions": [
      {
        "lastVersion": "0.4",
        "pattern": "(0[.][1-3])(|[.-].+)|0[.]4"
      }
    ]
  },
  {
    "id": "SECURITY-2146",
    "type": "plugin",
    "name": "cvs",
    "message": "XXE vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2020-12-03/#SECURITY-2146",
    "versions": [
      {
        "lastVersion": "2.16",
        "pattern": "(1|2[.][0-9]|2[.]1[0-6])(|[.-].+)"
      }
    ]
  },
  {
    "id": "core-2_275",
    "type": "core",
    "name": "core",
    "message": "Multiple security vulnerabilities in Jenkins 2.274 and earlier, LTS 2.263.1 and earlier",
    "url": "https://www.jenkins.io/security/advisory/2021-01-13/",
    "versions": [
      {
        "lastVersion": "2.274",
        "pattern": "(1|2[.][0-9]|2[.]1[0-9]|2[.]10[0-9]|2[.]11[0-9]|2[.]12[0-9]|2[.]13[0-8]|2[.]14[0-9]|2[.]15[0-9]|2[.]16[0-9]|2[.]17[0-9]|2[.]18[012345679]|2[.]19[0-9]|2[.]2[0-9]|2[.]20[0-9]|2[.]21[012345789]|2[.]22[0-9]|2[.]23[0-9]|2[.]24[0-9]|2[.]25[0-9]|2[.]26[012456789]|2[.]27[0-4]|2[.]3[0-9]|2[.]4[0-9]|2[.]5[0-9]|2[.]6[0-9]|2[.]7[0-9]|2[.]8[0-9]|2[.]9[0-9])(|[.-].+)|(2[.]263)"
      },
      {
        "lastVersion": "LTS 2.263.1",
        "pattern": "(1|2[.]107|2[.]121|2[.]138|2[.]150|2[.]164|2[.]176|2[.]19|2[.]190|2[.]204|2[.]222|2[.]235|2[.]249|2[.]263[.]1|2[.]32|2[.]46|2[.]60|2[.]7|2[.]73|2[.]89)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2057",
    "type": "plugin",
    "name": "ecutest",
    "message": "Credentials stored in plain text",
    "url": "https://www.jenkins.io/security/advisory/2021-01-13/#SECURITY-2057",
    "versions": [
      {
        "lastVersion": "2.23.1",
        "pattern": "(1|2[.][0-9]|2[.]1[0-9]|2[.]2[0-3])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2098",
    "type": "plugin",
    "name": "tics",
    "message": "XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2021-01-13/#SECURITY-2098",
    "versions": [
      {
        "lastVersion": "2020.3.0.6",
        "pattern": "(1|2020[.]3[.]0[.][0-6])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2156",
    "type": "plugin",
    "name": "bumblebee",
    "message": "Credentials stored in plain text",
    "url": "https://www.jenkins.io/security/advisory/2021-01-13/#SECURITY-2156",
    "versions": [
      {
        "lastVersion": "4.1.5",
        "pattern": "(3|4[.]0|4[.]1[.][0-5])(|[.-].+)"
      }
    ]
  },
  {
    "id": "core-2_276",
    "type": "core",
    "name": "core",
    "message": "Arbitrary file read vulnerability in workspace browsers",
    "url": "https://www.jenkins.io/security/advisory/2021-01-26/",
    "versions": [
      {
        "lastVersion": "2.275",
        "pattern": "(2[.]275)(|[.-].+)"
      },
      {
        "lastVersion": "LTS 2.263.2",
        "pattern": "(2[.]263[.]2)(|[.-].+)"
      }
    ]
  },
  {
    "id": "core-2_280",
    "type": "core",
    "name": "core",
    "message": "Privilege escalation vulnerability in bundled Spring Security library",
    "url": "https://www.jenkins.io/security/advisory/2021-02-19/",
    "versions": [
      {
        "lastVersion": "2.279",
        "pattern": "(2[.]26[6-9]|2[.]27[0-9])"
      }
    ]
  },
  {
    "id": "SECURITY-2003",
    "type": "plugin",
    "name": "configurationslicing",
    "message": "CSRF vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2021-02-24/#SECURITY-2003",
    "versions": [
      {
        "lastVersion": "1.51",
        "pattern": "(1[.]1[7-9]|1[.]2[0-9]|1[.]3[012356789]|1[.]4[01457]|1[.]5[01])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2150",
    "type": "plugin",
    "name": "support-core",
    "message": "Support bundles can include user session IDs",
    "url": "https://www.jenkins.io/security/advisory/2021-02-24/#SECURITY-2150",
    "versions": [
      {
        "lastVersion": "2.72",
        "pattern": "(1|2[.][013456789]|2[.]1[0-9]|2[.]2[01245789]|2[.]3[0-9]|2[.]4[0-9]|2[.]5[0-9]|2[.]6[012345679]|2[.]71)(|[.-].+)|(2[.]68|2[.]7[02])"
      }
    ]
  },
  {
    "id": "SECURITY-2168",
    "type": "plugin",
    "name": "artifact-repository-parameter",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2021-02-24/#SECURITY-2168",
    "versions": [
      {
        "lastVersion": "1.0.0",
        "pattern": "(1[.]0[.]0)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2183",
    "type": "plugin",
    "name": "repository-connector",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2021-02-24/#SECURITY-2183",
    "versions": [
      {
        "lastVersion": "2.0.2",
        "pattern": "([01]|2[.]0[.][0-2])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2188-1",
    "type": "plugin",
    "name": "claim",
    "message": "XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2021-02-24/#SECURITY-2188%20(1)",
    "versions": [
      {
        "lastVersion": "2.18.1",
        "pattern": "(2[.][012356789]|2[.]1[0-7]|2[.]18[.]1)(|[.-].+)|(2[.]18)"
      }
    ]
  },
  {
    "id": "SECURITY-2188-2",
    "type": "plugin",
    "name": "claim",
    "message": "CSRF vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2021-02-24/#SECURITY-2188%20(2)",
    "versions": [
      {
        "lastVersion": "2.18.1",
        "pattern": "(2[.][012356789]|2[.]1[0-7]|2[.]18[.]1)(|[.-].+)|(2[.]18)"
      }
    ]
  },
  {
    "id": "SECURITY-2192",
    "type": "plugin",
    "name": "uno-choice",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2021-02-24/#SECURITY-2192",
    "versions": [
      {
        "lastVersion": "2.5.2",
        "pattern": "(2[.][0-4]|2[.]5[.][12])(|[.-].+)|(2[.]5)"
      }
    ]
  },
  {
    "id": "SECURITY-1764",
    "type": "plugin",
    "name": "libvirt-slave",
    "message": "CSRF vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2021-03-18/#SECURITY-1764",
    "versions": [
      {
        "lastVersion": "1.9.0",
        "pattern": "(1[.][78]|1[.]9[.]0)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2032",
    "type": "plugin",
    "name": "aws-credentials",
    "message": "Missing permission checks allows enumerating credentials IDs",
    "url": "https://www.jenkins.io/security/advisory/2021-03-18/#SECURITY-2032",
    "versions": [
      {
        "lastVersion": "1.28",
        "pattern": "(1[.]1[0-9]|1[.]2[0-7]|1[.][89])(|[.-].+)|(1[.]28)"
      }
    ]
  },
  {
    "id": "SECURITY-2041",
    "type": "plugin",
    "name": "warnings-ng",
    "message": "Missing permission checks allow listing workspace contents",
    "url": "https://www.jenkins.io/security/advisory/2021-03-18/#SECURITY-2041",
    "versions": [
      {
        "lastVersion": "8.4.4",
        "pattern": "([1-7]|8[.][0-4])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2180",
    "type": "plugin",
    "name": "matrix-auth",
    "message": "Incorrect permission checks may allow accessing some items",
    "url": "https://www.jenkins.io/security/advisory/2021-03-18/#SECURITY-2180",
    "versions": [
      {
        "lastVersion": "2.6.5",
        "pattern": "(1|2[.][0-4]|2[.]5[.]1|2[.]6[.][1245])(|[.-].+)|(2[.][56]|2[.]6[.]3)"
      }
    ]
  },
  {
    "id": "SECURITY-2182",
    "type": "plugin",
    "name": "role-strategy",
    "message": "Incorrect permission checks may allow accessing some items",
    "url": "https://www.jenkins.io/security/advisory/2021-03-18/#SECURITY-2182",
    "versions": [
      {
        "lastVersion": "3.1",
        "pattern": "([12]|3[.]0)(|[.-].+)|(3[.]1)"
      }
    ]
  },
  {
    "id": "SECURITY-2162",
    "type": "plugin",
    "name": "jabber",
    "message": "Passwords stored in plain text",
    "url": "https://www.jenkins.io/security/advisory/2021-03-30/#SECURITY-2162",
    "versions": [
      {
        "lastVersion": "1.41",
        "pattern": "(1[.]1[4-9]|1[.]2[0-9]|1[.]3[013456789]|1[.]4[01]|unspecified)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2222",
    "type": "plugin",
    "name": "extra-columns",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2021-03-30/#SECURITY-2222",
    "versions": [
      {
        "lastVersion": "1.22",
        "pattern": "(1[.][0-9]|1[.]1[0-9]|1[.]2[0-2])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2231",
    "type": "plugin",
    "name": "build-with-parameters",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2021-03-30/#SECURITY-2231",
    "versions": [
      {
        "lastVersion": "1.5",
        "pattern": "(1[.][1-4])(|[.-].+)|(1[.]5)"
      }
    ]
  },
  {
    "id": "SECURITY-2246",
    "type": "plugin",
    "name": "cloud-stats",
    "message": "Missing permission check",
    "url": "https://www.jenkins.io/security/advisory/2021-03-30/#SECURITY-2246",
    "versions": [
      {
        "lastVersion": "0.26",
        "pattern": "(0[.][1-9]|0[.]1[0-9]|0[.]2[0-6])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2250",
    "type": "plugin",
    "name": "dependency-track",
    "message": "CSRF vulnerability and missing permission checks allow capturing credentials",
    "url": "https://www.jenkins.io/security/advisory/2021-03-30/#SECURITY-2250",
    "versions": [
      {
        "lastVersion": "3.1.0",
        "pattern": "([12]|3[.]0|3[.]1[.]0)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2257",
    "type": "plugin",
    "name": "build-with-parameters",
    "message": "CSRF vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2021-03-30/#SECURITY-2257",
    "versions": [
      {
        "lastVersion": "1.5",
        "pattern": "(1[.][1-4])(|[.-].+)|(1[.]5)"
      }
    ]
  },
  {
    "id": "SECURITY-2261",
    "type": "plugin",
    "name": "rest-list-parameter",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2021-03-30/#SECURITY-2261",
    "versions": [
      {
        "lastVersion": "1.3.0",
        "pattern": "(1[.][0-2]|1[.]3[.]0)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2283-1",
    "type": "plugin",
    "name": "tfs",
    "message": "Missing permission check allows enumerating credentials IDs",
    "url": "https://www.jenkins.io/security/advisory/2021-03-30/#SECURITY-2283%20(1)",
    "versions": [
      {
        "lastVersion": "5.157.1",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2283-2",
    "type": "plugin",
    "name": "tfs",
    "message": "CSRF vulnerability and missing permission check allow capturing credentials",
    "url": "https://www.jenkins.io/security/advisory/2021-03-30/#SECURITY-2283%20(2)",
    "versions": [
      {
        "lastVersion": "5.157.1",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "core-2_287",
    "type": "core",
    "name": "core",
    "message": "Multiple security vulnerabilities in Jenkins 2.286 and earlier, LTS 2.277.1 and earlier",
    "url": "https://www.jenkins.io/security/advisory/2021-04-07/",
    "versions": [
      {
        "lastVersion": "2.286",
        "pattern": "(1|2[.][0-9]|2[.]1[0-9]|2[.]10[0-9]|2[.]11[0-9]|2[.]12[0-9]|2[.]13[0-8]|2[.]14[0-9]|2[.]15[0-9]|2[.]16[0-9]|2[.]17[0-9]|2[.]18[012345679]|2[.]19[0-9]|2[.]2[0-9]|2[.]20[0-9]|2[.]21[012345789]|2[.]22[0-9]|2[.]23[0-9]|2[.]24[0-9]|2[.]25[0-9]|2[.]26[0-9]|2[.]27[012345689]|2[.]28[0-6]|2[.]3[0-9]|2[.]4[0-9]|2[.]5[0-9]|2[.]6[0-9]|2[.]7[0-9]|2[.]8[0-9]|2[.]9[0-9])(|[.-].+)|(2[.]277)"
      },
      {
        "lastVersion": "LTS 2.277.1",
        "pattern": "(1|2[.]107|2[.]121|2[.]138|2[.]150|2[.]164|2[.]176|2[.]19|2[.]190|2[.]204|2[.]222|2[.]235|2[.]249|2[.]263|2[.]277[.]1|2[.]32|2[.]46|2[.]60|2[.]7|2[.]73|2[.]89)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2132",
    "type": "plugin",
    "name": "hp-application-automation-tools-plugin",
    "message": "CSRF vulnerability and missing permission checks",
    "url": "https://www.jenkins.io/security/advisory/2021-04-07/#SECURITY-2132",
    "versions": [
      {
        "lastVersion": "6.7",
        "pattern": "([1-5]|6[.][0-7])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2175",
    "type": "plugin",
    "name": "hp-application-automation-tools-plugin",
    "message": "Reflected XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2021-04-07/#SECURITY-2175",
    "versions": [
      {
        "lastVersion": "6.7",
        "pattern": "([1-5]|6[.][0-7])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2176",
    "type": "plugin",
    "name": "hp-application-automation-tools-plugin",
    "message": "SSL/TLS certificate validation unconditionally disabled",
    "url": "https://www.jenkins.io/security/advisory/2021-04-07/#SECURITY-2176",
    "versions": [
      {
        "lastVersion": "6.7",
        "pattern": "([1-5]|6[.][0-7])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2293",
    "type": "plugin",
    "name": "promoted-builds",
    "message": "CSRF vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2021-04-07/#SECURITY-2293",
    "versions": [
      {
        "lastVersion": "3.9",
        "pattern": "([12]|3[.][0123467])(|[.-].+)|(3[.][59])"
      }
    ]
  },
  {
    "id": "core-2_286",
    "type": "core",
    "name": "core",
    "message": "Denial of service vulnerability in bundled Jetty",
    "url": "https://www.jenkins.io/security/advisory/2021-04-20/",
    "versions": [
      {
        "lastVersion": "2.285",
        "pattern": "(1|2[.][0-9]|2[.]1[0-9]|2[.]10[0-9]|2[.]11[0-9]|2[.]12[0-9]|2[.]13[0-8]|2[.]14[0-9]|2[.]15[0-9]|2[.]16[0-9]|2[.]17[0-9]|2[.]18[012345679]|2[.]19[0-9]|2[.]2[0-9]|2[.]20[0-9]|2[.]21[012345789]|2[.]22[0-9]|2[.]23[0-9]|2[.]24[0-9]|2[.]25[0-9]|2[.]26[0-9]|2[.]27[012345689]|2[.]28[012345]|2[.]3[0-9]|2[.]4[0-9]|2[.]5[0-9]|2[.]6[0-9]|2[.]7[0-9]|2[.]8[0-9]|2[.]9[0-9])(|[.-].+)|(2[.]277)"
      },
      {
        "lastVersion": "LTS 2.277.2",
        "pattern": "(1|2[.]107|2[.]121|2[.]138|2[.]150|2[.]164|2[.]176|2[.]19|2[.]190|2[.]204|2[.]222|2[.]235|2[.]249|2[.]263|2[.]277[.][12]|2[.]32|2[.]46|2[.]60|2[.]7|2[.]73|2[.]89)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2202",
    "type": "plugin",
    "name": "config-file-provider",
    "message": "CSRF vulnerability allows deleting configuration files",
    "url": "https://www.jenkins.io/security/advisory/2021-04-21/#SECURITY-2202",
    "versions": [
      {
        "lastVersion": "3.7.0",
        "pattern": "([12]|3[.][1-6]|3[.]7[.]0)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2203",
    "type": "plugin",
    "name": "config-file-provider",
    "message": "Missing permission checks allow enumerating configuration file IDs",
    "url": "https://www.jenkins.io/security/advisory/2021-04-21/#SECURITY-2203",
    "versions": [
      {
        "lastVersion": "3.7.0",
        "pattern": "([12]|3[.][1-6]|3[.]7[.]0)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2204",
    "type": "plugin",
    "name": "config-file-provider",
    "message": "XXE vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2021-04-21/#SECURITY-2204",
    "versions": [
      {
        "lastVersion": "3.7.0",
        "pattern": "([12]|3[.][1-6]|3[.]7[.]0)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2254",
    "type": "plugin",
    "name": "config-file-provider",
    "message": "Incorrect permission checks allow enumerating credentials IDs",
    "url": "https://www.jenkins.io/security/advisory/2021-04-21/#SECURITY-2254",
    "versions": [
      {
        "lastVersion": "3.7.0",
        "pattern": "([12]|3[.][1-6]|3[.]7[.]0)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2309",
    "type": "plugin",
    "name": "electricflow",
    "message": "Missing permission check allows scheduling builds",
    "url": "https://www.jenkins.io/security/advisory/2021-04-21/#SECURITY-2309",
    "versions": [
      {
        "lastVersion": "1.1.21",
        "pattern": "(1[.]0|1[.]1[.][1-9]|1[.]1[.]1[012345679]|1[.]1[.]2[01])(|[.-].+)|(1[.]1[.]18)"
      }
    ]
  },
  {
    "id": "SECURITY-2311",
    "type": "plugin",
    "name": "templating-engine",
    "message": "Remote code execution vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2021-04-21/#SECURITY-2311",
    "versions": [
      {
        "lastVersion": "2.1",
        "pattern": "(1|2[.][01])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2200",
    "type": "plugin",
    "name": "s3",
    "message": "Missing permission checks allow obtaining metadata about artifacts",
    "url": "https://www.jenkins.io/security/advisory/2021-05-11/#SECURITY-2200",
    "versions": [
      {
        "lastVersion": "0.11.6",
        "pattern": "(0[.]10|0[.]11[.][012346]|0[.][2-9])(|[.-].+)|(0[.]11[.]5)"
      }
    ]
  },
  {
    "id": "SECURITY-2201",
    "type": "plugin",
    "name": "s3",
    "message": "Missing permission check",
    "url": "https://www.jenkins.io/security/advisory/2021-05-11/#SECURITY-2201",
    "versions": [
      {
        "lastVersion": "0.11.6",
        "pattern": "(0[.]10|0[.]11[.][012346]|0[.][2-9])(|[.-].+)|(0[.]11[.]5)"
      }
    ]
  },
  {
    "id": "SECURITY-2233",
    "type": "plugin",
    "name": "dashboard-view",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2021-05-11/#SECURITY-2233",
    "versions": [
      {
        "lastVersion": "2.15",
        "pattern": "(1|2[.][0-9]|2[.]1[01345])(|[.-].+)|(2[.]12)"
      }
    ]
  },
  {
    "id": "SECURITY-2251-1",
    "type": "plugin",
    "name": "xray-connector",
    "message": "CSRF vulnerability allows capturing credentials",
    "url": "https://www.jenkins.io/security/advisory/2021-05-11/#SECURITY-2251%20(1)",
    "versions": [
      {
        "lastVersion": "2.4.0",
        "pattern": "(2[.][1-3]|2[.]4[.]0)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2251-2",
    "type": "plugin",
    "name": "xray-connector",
    "message": "Missing permission check allows enumerating credentials IDs",
    "url": "https://www.jenkins.io/security/advisory/2021-05-11/#SECURITY-2251%20(2)",
    "versions": [
      {
        "lastVersion": "2.4.0",
        "pattern": "(2[.][1-3]|2[.]4[.]0)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2327",
    "type": "plugin",
    "name": "p4",
    "message": "CSRF vulnerability and missing permission checks",
    "url": "https://www.jenkins.io/security/advisory/2021-05-11/#SECURITY-2327",
    "versions": [
      {
        "lastVersion": "1.11.4",
        "pattern": "(1[.][0-9]|1[.]10|1[.]11[.][0-4])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2335",
    "type": "plugin",
    "name": "xcode-plugin",
    "message": "XXE vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2021-05-11/#SECURITY-2335",
    "versions": [
      {
        "lastVersion": "2.0.14",
        "pattern": "(1|2[.]0[.][012345689]|2[.]0[.]1[0-4])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2349",
    "type": "plugin",
    "name": "credentials",
    "message": "Reflected XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2021-05-11/#SECURITY-2349",
    "versions": [
      {
        "lastVersion": "2.3.18",
        "pattern": "(1|2[.][0-2]|2[.]3[.][12345689]|2[.]3[.]1[01278])(|[.-].+)|(2[.]3[.][07]|2[.]3[.]1[3-5])"
      }
    ]
  },
  {
    "id": "SECURITY-2198",
    "type": "plugin",
    "name": "markdown-formatter",
    "message": "XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2021-05-25/#SECURITY-2198",
    "versions": [
      {
        "lastVersion": "0.1.0",
        "pattern": "(0[.]1)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2339",
    "type": "plugin",
    "name": "fstrigger",
    "message": "XXE vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2021-05-25/#SECURITY-2339",
    "versions": [
      {
        "lastVersion": "0.40",
        "pattern": "(0[.][1-9]|0[.]1[0-9]|0[.]2[0-9]|0[.]3[0-9]|0[.]40)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2340",
    "type": "plugin",
    "name": "nuget",
    "message": "XXE vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2021-05-25/#SECURITY-2340",
    "versions": [
      {
        "lastVersion": "1.0",
        "pattern": "(0|1[.]0)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2341",
    "type": "plugin",
    "name": "urltrigger",
    "message": "XXE vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2021-05-25/#SECURITY-2341",
    "versions": [
      {
        "lastVersion": "0.48",
        "pattern": "(0[.][1-9]|0[.]1[013456789]|0[.]2[0-9]|0[.]3[0-9]|0[.]4[01345678])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1981",
    "type": "plugin",
    "name": "deployit-plugin",
    "message": "Missing permission check allows enumerating credentials IDs",
    "url": "https://www.jenkins.io/security/advisory/2021-06-10/#SECURITY-1981",
    "versions": [
      {
        "lastVersion": "10.0.1",
        "pattern": "(10[.]0[.][01]|[3-8])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1982",
    "type": "plugin",
    "name": "deployit-plugin",
    "message": "CSRF vulnerability and missing permission check allows capturing credentials",
    "url": "https://www.jenkins.io/security/advisory/2021-06-10/#SECURITY-1982",
    "versions": [
      {
        "lastVersion": "10.0.1",
        "pattern": "(10[.]0[.][01]|[3-8])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2367",
    "type": "plugin",
    "name": "kiuwanJenkinsPlugin",
    "message": "Reflected XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2021-06-10/#SECURITY-2367",
    "versions": [
      {
        "lastVersion": "1.6.0",
        "pattern": "(1[.][0-5]|1[.]6[.]0)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2370",
    "type": "plugin",
    "name": "kubernetes-cli",
    "message": "Missing permission checks allow enumerating credentials IDs",
    "url": "https://www.jenkins.io/security/advisory/2021-06-10/#SECURITY-2370",
    "versions": [
      {
        "lastVersion": "1.10.0",
        "pattern": "(0|1[.][0-9]|1[.]10[.]0)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2224",
    "type": "plugin",
    "name": "scriptler",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2021-06-16/#SECURITY-2224",
    "versions": [
      {
        "lastVersion": "3.2",
        "pattern": "([12]|3[.][12])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2390",
    "type": "plugin",
    "name": "scriptler",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2021-06-16/#SECURITY-2390",
    "versions": [
      {
        "lastVersion": "3.1",
        "pattern": "([12]|3[.]1)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2330",
    "type": "plugin",
    "name": "generic-webhook-trigger",
    "message": "XXE vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2021-06-18/#SECURITY-2330",
    "versions": [
      {
        "lastVersion": "1.72",
        "pattern": "(1[.][0-9]|1[.]1[0-9]|1[.]2[0-9]|1[.]3[0-9]|1[.]4[0-9]|1[.]5[0-9]|1[.]6[0-9]|1[.]7[12])(|[.-].+)"
      }
    ]
  },
  {
    "id": "core-2_300",
    "type": "core",
    "name": "core",
    "message": "Multiple security vulnerabilities in Jenkins 2.299 and earlier, LTS 2.289.1 and earlier",
    "url": "https://www.jenkins.io/security/advisory/2021-06-30/",
    "versions": [
      {
        "lastVersion": "2.299",
        "pattern": "(1|2[.][0-9]|2[.]1[0-9]|2[.]10[0-9]|2[.]11[0-9]|2[.]12[0-9]|2[.]13[0-8]|2[.]14[0-9]|2[.]15[0-9]|2[.]16[0-9]|2[.]17[0-9]|2[.]18[012345679]|2[.]19[0-9]|2[.]2[0-9]|2[.]20[0-9]|2[.]21[012345789]|2[.]22[0-9]|2[.]23[0-9]|2[.]24[0-9]|2[.]25[0-9]|2[.]26[0-9]|2[.]27[0-9]|2[.]28[0-8]|2[.]29[0-9]|2[.]3[0-9]|2[.]4[0-9]|2[.]5[0-9]|2[.]6[0-9]|2[.]7[0-9]|2[.]8[0-9]|2[.]9[0-9])(|[.-].+)|(2[.]289)"
      },
      {
        "lastVersion": "LTS 2.289.1",
        "pattern": "(1|2[.]107|2[.]121|2[.]138|2[.]150|2[.]164|2[.]176|2[.]19|2[.]190|2[.]204|2[.]222|2[.]235|2[.]249|2[.]263|2[.]277|2[.]289[.]1|2[.]32|2[.]46|2[.]60|2[.]7|2[.]73|2[.]89)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1995",
    "type": "plugin",
    "name": "requests",
    "message": "Missing permission check allows viewing pending requests",
    "url": "https://www.jenkins.io/security/advisory/2021-06-30/#SECURITY-1995",
    "versions": [
      {
        "lastVersion": "2.2.6",
        "pattern": "(2[.]0|2[.]2[.][1-6]|requests[-]2)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2136-1",
    "type": "plugin",
    "name": "requests",
    "message": "CSRF vulnerabilities",
    "url": "https://www.jenkins.io/security/advisory/2021-06-30/#SECURITY-2136%20(1)",
    "versions": [
      {
        "lastVersion": "2.2.12",
        "pattern": "(2[.]0|2[.]2[.][1-9]|2[.]2[.]1[0-2]|requests[-]2)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2136-2",
    "type": "plugin",
    "name": "requests",
    "message": "Missing permission check allows sending emails",
    "url": "https://www.jenkins.io/security/advisory/2021-06-30/#SECURITY-2136%20(2)",
    "versions": [
      {
        "lastVersion": "2.2.7",
        "pattern": "(2[.]0|2[.]2[.][1-7]|requests[-]2)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2329",
    "type": "plugin",
    "name": "seleniumhtmlreport",
    "message": "XXE vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2021-06-30/#SECURITY-2329",
    "versions": [
      {
        "lastVersion": "1.0",
        "pattern": "(0|1[.]0)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2387",
    "type": "plugin",
    "name": "cas-plugin",
    "message": "Open redirect vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2021-06-30/#SECURITY-2387",
    "versions": [
      {
        "lastVersion": "1.6.0",
        "pattern": "([1][.][0-5]|1[.]6[.]0)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2376",
    "type": "plugin",
    "name": "code-coverage-api",
    "message": "RCE vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2021-08-31/#SECURITY-2376",
    "versions": [
      {
        "lastVersion": "1.4.0",
        "pattern": "(1[.][0-3]|1[.]4[.]0)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2396",
    "type": "plugin",
    "name": "nomad",
    "message": "Password stored in plain text",
    "url": "https://www.jenkins.io/security/advisory/2021-08-31/#SECURITY-2396",
    "versions": [
      {
        "lastVersion": "0.7.4",
        "pattern": "(0[.][1-6]|0[.]7[.][014])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2411",
    "type": "plugin",
    "name": "nested-view",
    "message": "XXE vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2021-08-31/#SECURITY-2411",
    "versions": [
      {
        "lastVersion": "1.20",
        "pattern": "(1[.]1[012347]|1[.]20|1[.][6-9])(|[.-].+)|(1[.]19)"
      }
    ]
  },
  {
    "id": "SECURITY-2469",
    "type": "plugin",
    "name": "saml",
    "message": "CSRF protection for any URL can be bypassed",
    "url": "https://www.jenkins.io/security/advisory/2021-08-31/#SECURITY-2469",
    "versions": [
      {
        "lastVersion": "2.0.7",
        "pattern": "(0|1[.]0|1[.]1[.][0-7]|2[.]0[.][012567])(|[.-].+)|(2[.]0[.]3)"
      }
    ]
  },
  {
    "id": "SECURITY-2470",
    "type": "plugin",
    "name": "azure-ad",
    "message": "CSRF protection for any URL can be bypassed",
    "url": "https://www.jenkins.io/security/advisory/2021-08-31/#SECURITY-2470",
    "versions": [
      {
        "lastVersion": "179.vf6841393099e",
        "pattern": "([01]|146|15[0234578]|16[4578]|17[012345789])(|[.-].+)"
      }
    ]
  },
  {
    "id": "core-2_315",
    "type": "core",
    "name": "core",
    "message": "Multiple security vulnerabilities in Jenkins 2.314 and earlier, LTS 2.303.1 and earlier",
    "url": "https://www.jenkins.io/security/advisory/2021-10-06/",
    "versions": [
      {
        "lastVersion": "2.314",
        "pattern": "(1|2[.][0-9]|2[.]1[0-9]|2[.]10[0-9]|2[.]11[0-9]|2[.]12[0-9]|2[.]13[0-8]|2[.]14[0-9]|2[.]15[0-9]|2[.]16[0-9]|2[.]17[0-9]|2[.]18[012345679]|2[.]19[0-9]|2[.]2[0-9]|2[.]20[0-9]|2[.]21[012345789]|2[.]22[0-9]|2[.]23[0-9]|2[.]24[0-9]|2[.]25[0-9]|2[.]26[0-9]|2[.]27[0-9]|2[.]28[0-9]|2[.]29[0-9]|2[.]3[0-9]|2[.]30[012456789]|2[.]31[1-4]|2[.]4[0-9]|2[.]5[0-9]|2[.]6[0-9]|2[.]7[0-9]|2[.]8[0-9]|2[.]9[0-9])(|[.-].+)|(2[.]303)"
      },
      {
        "lastVersion": "LTS 2.303.1",
        "pattern": "(1|2[.]107|2[.]121|2[.]138|2[.]150|2[.]164|2[.]176|2[.]19|2[.]190|2[.]204|2[.]222|2[.]235|2[.]249|2[.]263|2[.]277|2[.]289|2[.]303[.]1|2[.]32|2[.]46|2[.]60|2[.]7|2[.]73|2[.]89)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2499",
    "type": "plugin",
    "name": "git",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2021-10-06/#SECURITY-2499",
    "versions": [
      {
        "lastVersion": "4.8.2",
        "pattern": "([1-3]|4[.][012456]|4[.]3[.]0|4[.]7[.][02]|4[.]8[.][0-2])(|[.-].+)|(4[.]7[.]1)"
      }
    ]
  },
  {
    "id": "core-2_319",
    "type": "core",
    "name": "core",
    "message": "Multiple security vulnerabilities in Jenkins 2.318 and earlier, LTS 2.303.2 and earlier",
    "url": "https://www.jenkins.io/security/advisory/2021-11-04/",
    "versions": [
      {
        "lastVersion": "2.318",
        "pattern": "(1|2[.][0-9]|2[.]1[0-9]|2[.]10[0-9]|2[.]11[0-9]|2[.]12[0-9]|2[.]13[0-8]|2[.]14[0-9]|2[.]15[0-9]|2[.]16[0-9]|2[.]17[0-9]|2[.]18[012345679]|2[.]19[0-9]|2[.]2[0-9]|2[.]20[0-9]|2[.]21[012345789]|2[.]22[0-9]|2[.]23[0-9]|2[.]24[0-9]|2[.]25[0-9]|2[.]26[0-9]|2[.]27[0-9]|2[.]28[0-9]|2[.]29[0-9]|2[.]3[0-9]|2[.]30[012456789]|2[.]31[1-8]|2[.]4[0-9]|2[.]5[0-9]|2[.]6[0-9]|2[.]7[0-9]|2[.]8[0-9]|2[.]9[0-9])(|[.-].+)|(2[.]303)"
      },
      {
        "lastVersion": "LTS 2.303.2",
        "pattern": "(1|2[.]107|2[.]121|2[.]138|2[.]150|2[.]164|2[.]176|2[.]19|2[.]190|2[.]204|2[.]222|2[.]235|2[.]249|2[.]263|2[.]277|2[.]289|2[.]303[.][12]|2[.]32|2[.]46|2[.]60|2[.]7|2[.]73|2[.]89)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2506",
    "type": "plugin",
    "name": "subversion",
    "message": "Path traversal vulnerability allows reading arbitrary files",
    "url": "https://www.jenkins.io/security/advisory/2021-11-04/#SECURITY-2506",
    "versions": [
      {
        "lastVersion": "2.15.0",
        "pattern": "(1|2[.][0-9]|2[.]1[0-4]|2[.]15[.]0)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2219",
    "type": "plugin",
    "name": "uno-choice",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2021-11-12/#SECURITY-2219",
    "versions": [
      {
        "lastVersion": "2.5.6",
        "pattern": "(2[.][0-4]|2[.]5[.][1-6])(|[.-].+)|(2[.]5)"
      }
    ]
  },
  {
    "id": "SECURITY-2394",
    "type": "plugin",
    "name": "performance",
    "message": "XXE vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2021-11-12/#SECURITY-2394",
    "versions": [
      {
        "lastVersion": "3.20",
        "pattern": "([1-3][.])(.+)"
      }
    ]
  },
  {
    "id": "SECURITY-2406",
    "type": "plugin",
    "name": "scriptler",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2021-11-12/#SECURITY-2406",
    "versions": [
      {
        "lastVersion": "3.3",
        "pattern": "(3[.][1-3])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2415",
    "type": "plugin",
    "name": "pom2config",
    "message": "XXE vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2021-11-12/#SECURITY-2415",
    "versions": [
      {
        "lastVersion": "1.2",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2488",
    "type": "plugin",
    "name": "dependency-check-jenkins-plugin",
    "message": "XXE vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2021-11-12/#SECURITY-2488",
    "versions": [
      {
        "lastVersion": "5.1.1",
        "pattern": "([1-4]|5[.]0|5[.]1[.][01])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2525",
    "type": "plugin",
    "name": "squashtm-publisher",
    "message": "Arbitrary file write vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2021-11-12/#SECURITY-2525",
    "versions": [
      {
        "lastVersion": "1.0.0",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "core-2_330",
    "type": "core",
    "name": "core",
    "message": "CSRF vulnerability in build triggers",
    "url": "https://www.jenkins.io/security/advisory/2022-01-12/",
    "versions": [
      {
        "lastVersion": "2.329",
        "pattern": "(1|2[.][0-9]|2[.]1[0-9]|2[.]10[0-9]|2[.]11[0-9]|2[.]12[0-9]|2[.]13[0-8]|2[.]14[0-9]|2[.]15[0-9]|2[.]16[0-9]|2[.]17[0-9]|2[.]18[012345679]|2[.]19[0-9]|2[.]2[0-9]|2[.]20[0-9]|2[.]21[012345789]|2[.]22[0-9]|2[.]23[0-9]|2[.]24[0-9]|2[.]25[0-9]|2[.]26[0-9]|2[.]27[0-9]|2[.]28[0-9]|2[.]29[0-9]|2[.]3[0-9]|2[.]30[0-9]|2[.]31[1-8]|2[.]32[0-9]|2[.]4[0-9]|2[.]5[0-9]|2[.]6[0-9]|2[.]7[0-9]|2[.]8[0-9]|2[.]9[0-9])(|[.-].+)|(2[.]319)"
      },
      {
        "lastVersion": "LTS 2.319.1",
        "pattern": "(1|2[.]107|2[.]121|2[.]138|2[.]150|2[.]164|2[.]176|2[.]19|2[.]190|2[.]204|2[.]222|2[.]235|2[.]249|2[.]263|2[.]277|2[.]289|2[.]303|2[.]319[.]1|2[.]32|2[.]46|2[.]60|2[.]7|2[.]73|2[.]89)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1025",
    "type": "plugin",
    "name": "batch-task",
    "message": "CSRF vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-01-12/#SECURITY-1025",
    "versions": [
      {
        "lastVersion": "1.19",
        "pattern": "(1[.]1[5-9])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1389",
    "type": "plugin",
    "name": "active-directory",
    "message": "User passwords transmitted in plain text",
    "url": "https://www.jenkins.io/security/advisory/2022-01-12/#SECURITY-1389",
    "versions": [
      {
        "lastVersion": "2.25",
        "pattern": "(1|2[.][023456789]|2[.]1[0-9]|2[.]2[02])(|[.-].+)|(2[.]2[3-5])"
      }
    ]
  },
  {
    "id": "SECURITY-1624",
    "type": "plugin",
    "name": "metrics",
    "message": "Access key stored in plain text",
    "url": "https://www.jenkins.io/security/advisory/2022-01-12/#SECURITY-1624",
    "versions": [
      {
        "lastVersion": "4.0.2.8",
        "pattern": "(3|4[.]0[.]2[.][0-6])(|[.-].+)|(4[.]0[.]2[.][78])"
      }
    ]
  },
  {
    "id": "SECURITY-1878",
    "type": "plugin",
    "name": "docker-commons",
    "message": "OS command execution vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-01-12/#SECURITY-1878",
    "versions": [
      {
        "lastVersion": "1.17",
        "pattern": "(1[.][0-9]|1[.]1[0-7])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2017",
    "type": "plugin",
    "name": "matrix-project",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-01-12/#SECURITY-2017",
    "versions": [
      {
        "lastVersion": "1.19",
        "pattern": "(1[.][0-9]|1[.]1[012345679])(|[.-].+)|(1[.]18)"
      }
    ]
  },
  {
    "id": "SECURITY-2033",
    "type": "plugin",
    "name": "cloudbees-bitbucket-branch-source",
    "message": "Missing permission checks allow enumerating credentials IDs",
    "url": "https://www.jenkins.io/security/advisory/2022-01-12/#SECURITY-2033",
    "versions": [
      {
        "lastVersion": "737.vdf9dc06105be",
        "pattern": "(1|2[.][0-8]|2[.]9[.][012345689]|2[.]9[.]10|72[36]|73[147])(|[.-].+)|(2[.]9[.]11|2[.]9[.]7)"
      }
    ]
  },
  {
    "id": "SECURITY-2090",
    "type": "plugin",
    "name": "warnings-ng",
    "message": "Path traversal vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-01-12/#SECURITY-2090",
    "versions": [
      {
        "lastVersion": "9.10.2",
        "pattern": "([1-8]|9[.]0[.][01]|9[.][1234689]|9[.]10[.][0-2]|9[.]5[.][01]|9[.]7[.]0)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2141",
    "type": "plugin",
    "name": "configuration-as-code",
    "message": "Non-constant time token comparison",
    "url": "https://www.jenkins.io/security/advisory/2022-01-12/#SECURITY-2141",
    "versions": [
      {
        "lastVersion": "1.55",
        "pattern": "(1[.][0-8]|1[.]0[-]rc[1-3]|1[.]1[0-9]|1[.]2[0-9]|1[.]3[012345689]|1[.]4[012345689]|1[.]5[0-2])(|[.-].+)|(1[.]47|1[.]5[3-5])"
      }
    ]
  },
  {
    "id": "SECURITY-2163",
    "type": "plugin",
    "name": "mailer",
    "message": "CSRF vulnerability and missing permission checks",
    "url": "https://www.jenkins.io/security/advisory/2022-01-12/#SECURITY-2163",
    "versions": [
      {
        "lastVersion": "391.ve4a_38c1b_cf4b_",
        "pattern": "(1[.][1-9]|1[.]1[0-9]|1[.]2[0-9]|1[.]3[0-3]|391)(|[.-].+)|(1[.]34)"
      }
    ]
  },
  {
    "id": "SECURITY-2189",
    "type": "plugin",
    "name": "ssh-agent",
    "message": "Missing permission checks allow enumerating credentials IDs",
    "url": "https://www.jenkins.io/security/advisory/2022-01-12/#SECURITY-2189",
    "versions": [
      {
        "lastVersion": "1.23",
        "pattern": "(0|1[.][0-9]|1[.]1[0-9]|1[.]2[01])(|[.-].+)|(1[.]2[23])"
      }
    ]
  },
  {
    "id": "SECURITY-2213",
    "type": "plugin",
    "name": "hashicorp-vault-plugin",
    "message": "Improper credentials masking",
    "url": "https://www.jenkins.io/security/advisory/2022-01-12/#SECURITY-2213",
    "versions": [
      {
        "lastVersion": "3.7.0",
        "pattern": "([12]|3[.][0-7])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2287",
    "type": "plugin",
    "name": "publish-over-ssh",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-01-12/#SECURITY-2287",
    "versions": [
      {
        "lastVersion": "1.23",
        "pattern": "(0|1[.][0-9]|1[.]1[01234789]|1[.]2[0-3])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2290",
    "type": "plugin",
    "name": "publish-over-ssh",
    "message": "CSRF vulnerability and missing permission checks",
    "url": "https://www.jenkins.io/security/advisory/2022-01-12/#SECURITY-2290",
    "versions": [
      {
        "lastVersion": "1.23",
        "pattern": "(0|1[.][0-9]|1[.]1[01234789]|1[.]2[0-3])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2291",
    "type": "plugin",
    "name": "publish-over-ssh",
    "message": "Password stored in plain text",
    "url": "https://www.jenkins.io/security/advisory/2022-01-12/#SECURITY-2291",
    "versions": [
      {
        "lastVersion": "1.23",
        "pattern": "(0|1[.][0-9]|1[.]1[01234789]|1[.]2[0-3])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2307",
    "type": "plugin",
    "name": "publish-over-ssh",
    "message": "Path traversal vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-01-12/#SECURITY-2307",
    "versions": [
      {
        "lastVersion": "1.23",
        "pattern": "(0|1[.][0-9]|1[.]1[01234789]|1[.]2[0-3])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2342",
    "type": "plugin",
    "name": "credentials-binding",
    "message": "Missing permission check allows validating secret file credentials IDs",
    "url": "https://www.jenkins.io/security/advisory/2022-01-12/#SECURITY-2342",
    "versions": [
      {
        "lastVersion": "1.27",
        "pattern": "(1[.][0-9]|1[.]1[0-9]|1[.]2[012356])(|[.-].+)|(1[.]2[47])"
      }
    ]
  },
  {
    "id": "SECURITY-2467",
    "type": "plugin",
    "name": "cloudbees-bitbucket-branch-source",
    "message": "CSRF vulnerability allows capturing credentials",
    "url": "https://www.jenkins.io/security/advisory/2022-01-12/#SECURITY-2467",
    "versions": [
      {
        "lastVersion": "737.vdf9dc06105be",
        "pattern": "(1|2[.][0-8]|2[.]9[.][012345689]|2[.]9[.]10|72[36]|73[147])(|[.-].+)|(2[.]9[.]11|2[.]9[.]7)"
      }
    ]
  },
  {
    "id": "SECURITY-2522-1",
    "type": "plugin",
    "name": "conjur-credentials",
    "message": "Agent-to-controller security bypass allows decrypting secrets",
    "url": "https://www.jenkins.io/security/advisory/2022-01-12/#SECURITY-2522%20(1)",
    "versions": [
      {
        "lastVersion": "1.0.9",
        "pattern": "(1[.]0[.][2456789])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2522-2",
    "type": "plugin",
    "name": "conjur-credentials",
    "message": "Agent-to-controller security bypass allows retrieving all credentials",
    "url": "https://www.jenkins.io/security/advisory/2022-01-12/#SECURITY-2522%20(2)",
    "versions": [
      {
        "lastVersion": "1.0.9",
        "pattern": "(1[.]0[.][2456789])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2546",
    "type": "plugin",
    "name": "debian-package-builder",
    "message": "Agent-to-controller security bypass",
    "url": "https://www.jenkins.io/security/advisory/2022-01-12/#SECURITY-2546",
    "versions": [
      {
        "lastVersion": "1.6.11",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2547",
    "type": "plugin",
    "name": "badge",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-01-12/#SECURITY-2547",
    "versions": [
      {
        "lastVersion": "1.9",
        "pattern": "(1[.][0-8])(|[.-].+)|(1[.]9)"
      }
    ]
  },
  {
    "id": "core-2_334",
    "type": "core",
    "name": "core",
    "message": "DoS vulnerability in bundled XStream library",
    "url": "https://www.jenkins.io/security/advisory/2022-02-09/",
    "versions": [
      {
        "lastVersion": "2.333",
        "pattern": "(1|2[.][0-9]|2[.]1[0-9]|2[.]10[0-9]|2[.]11[0-9]|2[.]12[0-9]|2[.]13[0-8]|2[.]14[0-9]|2[.]15[0-9]|2[.]16[0-9]|2[.]17[0-9]|2[.]18[012345679]|2[.]19[0-9]|2[.]2[0-9]|2[.]20[0-9]|2[.]21[012345789]|2[.]22[0-9]|2[.]23[0-9]|2[.]24[0-9]|2[.]25[0-9]|2[.]26[0-9]|2[.]27[0-9]|2[.]28[0-9]|2[.]29[0-9]|2[.]3[0-9]|2[.]30[0-9]|2[.]31[1-8]|2[.]32[0-9]|2[.]33[013]|2[.]4[0-9]|2[.]5[0-9]|2[.]6[0-9]|2[.]7[0-9]|2[.]8[0-9]|2[.]9[0-9])(|[.-].+)|(2[.]319)|(2[.]332)"
      },
      {
        "lastVersion": "LTS 2.319.2",
        "pattern": "(1|2[.]107|2[.]121|2[.]138|2[.]150|2[.]164|2[.]176|2[.]19|2[.]190|2[.]204|2[.]222|2[.]235|2[.]249|2[.]263|2[.]277|2[.]289|2[.]303|2[.]319[.][12]|2[.]32|2[.]46|2[.]60|2[.]7|2[.]73|2[.]89)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1017",
    "type": "plugin",
    "name": "checkmarx",
    "message": "CSRF vulnerability and missing permission checks allow capturing credentials",
    "url": "https://www.jenkins.io/security/advisory/2022-02-15/#SECURITY-1017",
    "versions": [
      {
        "lastVersion": "2022.2.1",
        "pattern": "(202[01]|2022[.]1|2022[.]2[.]1|[78])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1377",
    "type": "plugin",
    "name": "sinatra-chef-builder",
    "message": "CSRF vulnerability and missing permission checks allow XXE",
    "url": "https://www.jenkins.io/security/advisory/2022-02-15/#SECURITY-1377",
    "versions": [
      {
        "lastVersion": "1.20",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1833",
    "type": "plugin",
    "name": "gitlab-oauth",
    "message": "Open redirect vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-02-15/#SECURITY-1833",
    "versions": [
      {
        "lastVersion": "1.13",
        "pattern": "1[.]([0-9]|1[0-3])(|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1988",
    "type": "plugin",
    "name": "swamp",
    "message": "CSRF vulnerability and missing permission check allows capturing credentials",
    "url": "https://www.jenkins.io/security/advisory/2022-02-15/#SECURITY-1988",
    "versions": [
      {
        "lastVersion": "1.2.6",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2177",
    "type": "plugin",
    "name": "dbCharts",
    "message": "CSRF vulnerability and missing permission checks",
    "url": "https://www.jenkins.io/security/advisory/2022-02-15/#SECURITY-2177",
    "versions": [
      {
        "lastVersion": "0.5.2",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2186",
    "type": "plugin",
    "name": "support-core",
    "message": "Sensitive data stored in plain text",
    "url": "https://www.jenkins.io/security/advisory/2022-02-15/#SECURITY-2186",
    "versions": [
      {
        "lastVersion": "2.79",
        "pattern": "(1|2[.][013456789]|2[.]1[0-9]|2[.]2[01245789]|2[.]3[0-9]|2[.]4[0-9]|2[.]5[0-9]|2[.]6[0-9]|2[.]7[0134578]|2[.]72[.]1)(|[.-].+)|(2[.]7[269])"
      }
    ]
  },
  {
    "id": "SECURITY-2214",
    "type": "plugin",
    "name": "fortify",
    "message": "Path traversal vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-02-15/#SECURITY-2214",
    "versions": [
      {
        "lastVersion": "20.2.34",
        "pattern": "(19|20[.]1|20[.]2[.]34)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2266",
    "type": "plugin",
    "name": "custom-checkbox-parameter",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-02-15/#SECURITY-2266",
    "versions": [
      {
        "lastVersion": "1.1",
        "pattern": "(1[.][01])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2268",
    "type": "plugin",
    "name": "agent-server-parameter",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-02-15/#SECURITY-2268",
    "versions": [
      {
        "lastVersion": "1.0",
        "pattern": "(1[.]0)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2280",
    "type": "plugin",
    "name": "convertigo-mobile-platform",
    "message": "Missing synchronization vulnerability allow to capture passwords",
    "url": "https://www.jenkins.io/security/advisory/2022-02-15/#SECURITY-2280",
    "versions": [
      {
        "lastVersion": "1.1",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2323",
    "type": "plugin",
    "name": "scp",
    "message": "CSRF vulnerability and missing permission check",
    "url": "https://www.jenkins.io/security/advisory/2022-02-15/#SECURITY-2323",
    "versions": [
      {
        "lastVersion": "1.8",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2324",
    "type": "plugin",
    "name": "team-views",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-02-15/#SECURITY-2324",
    "versions": [
      {
        "lastVersion": "0.9.0",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2334",
    "type": "plugin",
    "name": "promoted-builds-simple",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-02-15/#SECURITY-2334",
    "versions": [
      {
        "lastVersion": "1.9",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2350",
    "type": "plugin",
    "name": "conjur-credentials",
    "message": "Missing permission check allows enumerating credentials IDs",
    "url": "https://www.jenkins.io/security/advisory/2022-02-15/#SECURITY-2350",
    "versions": [
      {
        "lastVersion": "1.0.11",
        "pattern": "(1[.]0[.]1[01]|1[.]0[.][2456789])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2422",
    "type": "plugin",
    "name": "workflow-cps-global-lib",
    "message": "Sandbox bypass vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-02-15/#SECURITY-2422",
    "versions": [
      {
        "lastVersion": "552.vd9cc05b8a2e1",
        "pattern": "(1|2[.][0-9]|2[.]1[012345679]|2[.]20|54[458]|552[.]vd9cc05b8a2e1)(|[.-].+)|(2[.]18|2[.]21)"
      }
    ]
  },
  {
    "id": "SECURITY-2429",
    "type": "plugin",
    "name": "hashicorp-vault-plugin",
    "message": "Agent-to-controller security bypass",
    "url": "https://www.jenkins.io/security/advisory/2022-02-15/#SECURITY-2429",
    "versions": [
      {
        "lastVersion": "3.8.0",
        "pattern": "([1-3])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2441",
    "type": "plugin",
    "name": "workflow-cps-global-lib",
    "message": "Sandbox bypass vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-02-15/#SECURITY-2441",
    "versions": [
      {
        "lastVersion": "552.vd9cc05b8a2e1",
        "pattern": "(1|2[.][0-9]|2[.]1[012345679]|2[.]20|54[458]|552[.]vd9cc05b8a2e1)(|[.-].+)|(2[.]18|2[.]21)"
      }
    ]
  },
  {
    "id": "SECURITY-2443",
    "type": "plugin",
    "name": "workflow-cps",
    "message": "Sensitive information disclosure",
    "url": "https://www.jenkins.io/security/advisory/2022-02-15/#SECURITY-2443",
    "versions": [
      {
        "lastVersion": "2648.va9433432b33c",
        "pattern": "(1|2633|264[046]|2648[.]va9433432b33c|2[.][0-9]|2[.]1[0-9]|2[.]2[0-9]|2[.]3[0-9]|2[.]4[0-9]|2[.]5[0-9]|2[.]6[0-9]|2[.]7[0-9]|2[.]8[0-9]|2[.]9[013])(|[.-].+)|(2[.]9[24])"
      }
    ]
  },
  {
    "id": "SECURITY-2463-workflow-cps",
    "type": "plugin",
    "name": "workflow-cps",
    "message": "OS command execution vulnerabilities in Pipeline-related plugins",
    "url": "https://www.jenkins.io/security/advisory/2022-02-15/#SECURITY-2463",
    "versions": [
      {
        "lastVersion": "2648.va9433432b33c",
        "pattern": "(1|2633|264[046]|2648[.]va9433432b33c|2[.][0-9]|2[.]1[0-9]|2[.]2[0-9]|2[.]3[0-9]|2[.]4[0-9]|2[.]5[0-9]|2[.]6[0-9]|2[.]7[0-9]|2[.]8[0-9]|2[.]9[013])(|[.-].+)|(2[.]9[24])"
      }
    ]
  },
  {
    "id": "SECURITY-2463-workflow-cps-global-lib",
    "type": "plugin",
    "name": "workflow-cps-global-lib",
    "message": "OS command execution vulnerabilities in Pipeline-related plugins",
    "url": "https://www.jenkins.io/security/advisory/2022-02-15/#SECURITY-2463",
    "versions": [
      {
        "lastVersion": "552.vd9cc05b8a2e1",
        "pattern": "(1|2[.][0-9]|2[.]1[012345679]|2[.]20|54[458]|552[.]vd9cc05b8a2e1)(|[.-].+)|(2[.]18|2[.]21)"
      }
    ]
  },
  {
    "id": "SECURITY-2463-workflow-multibranch",
    "type": "plugin",
    "name": "workflow-multibranch",
    "message": "OS command execution vulnerabilities in Pipeline-related plugins",
    "url": "https://www.jenkins.io/security/advisory/2022-02-15/#SECURITY-2463",
    "versions": [
      {
        "lastVersion": "706.vd43c65dec013",
        "pattern": "(1|2[.][0-9]|2[.]1[0-9]|2[.]2[01245]|696[.]v52535c46f4c9|70[46])(|[.-].+)|(2[.]2[36])"
      }
    ]
  },
  {
    "id": "SECURITY-2519",
    "type": "plugin",
    "name": "pipeline-build-step",
    "message": "Password parameter default values exposed",
    "url": "https://www.jenkins.io/security/advisory/2022-02-15/#SECURITY-2519",
    "versions": [
      {
        "lastVersion": "2.15",
        "pattern": "(2[.][0-9]|2[.]1[0124])(|[.-].+)|(2[.]1[35])"
      }
    ]
  },
  {
    "id": "SECURITY-2521",
    "type": "plugin",
    "name": "hashicorp-vault-plugin",
    "message": "Path traversal vulnerability allows reading arbitrary files",
    "url": "https://www.jenkins.io/security/advisory/2022-02-15/#SECURITY-2521",
    "versions": [
      {
        "lastVersion": "336.v182c0fbaaeb7",
        "pattern": "([1-3]|336)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2536",
    "type": "plugin",
    "name": "embotics-vcommander",
    "message": "CSRF vulnerability and missing permission checks allow capturing credentials",
    "url": "https://www.jenkins.io/security/advisory/2022-02-15/#SECURITY-2536",
    "versions": [
      {
        "lastVersion": "1.10",
        "pattern": "(1)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2545",
    "type": "plugin",
    "name": "autonomiq",
    "message": "CSRF vulnerability and missing permission check",
    "url": "https://www.jenkins.io/security/advisory/2022-02-15/#SECURITY-2545",
    "versions": [
      {
        "lastVersion": "1.15",
        "pattern": "(1[.]1[0135])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2548",
    "type": "plugin",
    "name": "doktor",
    "message": "Agent-to-controller security bypass vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-02-15/#SECURITY-2548",
    "versions": [
      {
        "lastVersion": "0.4.1",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2586",
    "type": "plugin",
    "name": "workflow-cps-global-lib",
    "message": "Sandbox bypass vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-02-15/#SECURITY-2586",
    "versions": [
      {
        "lastVersion": "552.vd9cc05b8a2e1",
        "pattern": "(1|2[.][0-9]|2[.]1[012345679]|2[.]20|54[458]|552[.]vd9cc05b8a2e1)(|[.-].+)|(2[.]18|2[.]21)"
      }
    ]
  },
  {
    "id": "SECURITY-2592",
    "type": "plugin",
    "name": "generic-webhook-trigger",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-02-15/#SECURITY-2592",
    "versions": [
      {
        "lastVersion": "1.81",
        "pattern": "(1[.][0-9]|1[.]1[0-9]|1[.]2[0-9]|1[.]3[0-9]|1[.]4[0-9]|1[.]5[0-9]|1[.]6[0-9]|1[.]7[12456789]|1[.]8[01])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2613-workflow-cps",
    "type": "plugin",
    "name": "workflow-cps",
    "message": "Vulnerabilities in multiple Pipeline-related plugins allow reading arbitrary files on the controller",
    "url": "https://www.jenkins.io/security/advisory/2022-02-15/#SECURITY-2613",
    "versions": [
      {
        "lastVersion": "2648.va9433432b33c",
        "pattern": "(1|2633|264[046]|2648[.]va9433432b33c|2[.][0-9]|2[.]1[0-9]|2[.]2[0-9]|2[.]3[0-9]|2[.]4[0-9]|2[.]5[0-9]|2[.]6[0-9]|2[.]7[0-9]|2[.]8[0-9]|2[.]9[013])(|[.-].+)|(2[.]9[24])"
      }
    ]
  },
  {
    "id": "SECURITY-2613-workflow-cps-global-lib",
    "type": "plugin",
    "name": "workflow-cps-global-lib",
    "message": "Vulnerabilities in multiple Pipeline-related plugins allow reading arbitrary files on the controller",
    "url": "https://www.jenkins.io/security/advisory/2022-02-15/#SECURITY-2613",
    "versions": [
      {
        "lastVersion": "552.vd9cc05b8a2e1",
        "pattern": "(1|2[.][0-9]|2[.]1[012345679]|2[.]20|54[458]|552[.]vd9cc05b8a2e1)(|[.-].+)|(2[.]18|2[.]21)"
      }
    ]
  },
  {
    "id": "SECURITY-2613-workflow-multibranch",
    "type": "plugin",
    "name": "workflow-multibranch",
    "message": "Vulnerabilities in multiple Pipeline-related plugins allow reading arbitrary files on the controller",
    "url": "https://www.jenkins.io/security/advisory/2022-02-15/#SECURITY-2613",
    "versions": [
      {
        "lastVersion": "706.vd43c65dec013",
        "pattern": "(1|2[.][0-9]|2[.]1[0-9]|2[.]2[01245]|696[.]v52535c46f4c9|70[46])(|[.-].+)|(2[.]2[36])"
      }
    ]
  },
  {
    "id": "SECURITY-1350",
    "type": "plugin",
    "name": "extended-choice-parameter",
    "message": "CSRF vulnerability and missing permission checks allow SSRF",
    "url": "https://www.jenkins.io/security/advisory/2022-03-15/#SECURITY-1350",
    "versions": [
      {
        "lastVersion": "346.vd87693c5a_86c",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1351",
    "type": "plugin",
    "name": "extended-choice-parameter",
    "message": "Arbitrary JSON and property file read vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-03-15/#SECURITY-1351",
    "versions": [
      {
        "lastVersion": "346.vd87693c5a_86c",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1886",
    "type": "plugin",
    "name": "global-build-stats",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-03-15/#SECURITY-1886",
    "versions": [
      {
        "lastVersion": "282.v79ca_e079d1b_1",
        "pattern": "(1|244|269|282)(|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1891",
    "type": "plugin",
    "name": "gitlab-oauth",
    "message": "Client Secret stored in plain text",
    "url": "https://www.jenkins.io/security/advisory/2022-03-15/#SECURITY-1891",
    "versions": [
      {
        "lastVersion": "1.13",
        "pattern": "1[.]([0-9]|1[0-3])(|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-2096",
    "type": "plugin",
    "name": "kubernetes-cd",
    "message": "Arbitrary file read vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-03-15/#SECURITY-2096",
    "versions": [
      {
        "lastVersion": "2.3.1",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2124",
    "type": "plugin",
    "name": "semantic-versioning-plugin",
    "message": "Agent-to-controller security bypass",
    "url": "https://www.jenkins.io/security/advisory/2022-03-15/#SECURITY-2124",
    "versions": [
      {
        "lastVersion": "1.13",
        "pattern": "(1[.][02346789]|1[.]1[03])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2159",
    "type": "plugin",
    "name": "dbCharts",
    "message": "Passwords stored in plain text",
    "url": "https://www.jenkins.io/security/advisory/2022-03-15/#SECURITY-2159",
    "versions": [
      {
        "lastVersion": "0.5.2",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2167",
    "type": "plugin",
    "name": "list-git-branches-parameter",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-03-15/#SECURITY-2167",
    "versions": [
      {
        "lastVersion": "0.0.9",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2185",
    "type": "plugin",
    "name": "parameterized-trigger",
    "message": "Sensitive parameter values captured in build metadata files",
    "url": "https://www.jenkins.io/security/advisory/2022-03-15/#SECURITY-2185",
    "versions": [
      {
        "lastVersion": "2.43",
        "pattern": "(2[.]1[0-9]|2[.]2[0-9]|2[.]3[0-9]|2[.]42|2[.][5-9])(|[.-].+)|(2[.]4[013])"
      }
    ]
  },
  {
    "id": "SECURITY-2232",
    "type": "plugin",
    "name": "extended-choice-parameter",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-03-15/#SECURITY-2232",
    "versions": [
      {
        "lastVersion": "346.vd87693c5a_86c",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2238",
    "type": "plugin",
    "name": "vmware-vrealize-codestream",
    "message": "Passwords stored in plain text",
    "url": "https://www.jenkins.io/security/advisory/2022-03-15/#SECURITY-2238",
    "versions": [
      {
        "lastVersion": "1.2",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2252",
    "type": "plugin",
    "name": "environment-dashboard",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-03-15/#SECURITY-2252",
    "versions": [
      {
        "lastVersion": "1.1.10",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2273",
    "type": "plugin",
    "name": "incapptic-connect-uploader",
    "message": "Personal tokens stored in plain text",
    "url": "https://www.jenkins.io/security/advisory/2022-03-15/#SECURITY-2273",
    "versions": [
      {
        "lastVersion": "1.15",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2274",
    "type": "plugin",
    "name": "release-helper",
    "message": "CSRF vulnerability and missing permission checks",
    "url": "https://www.jenkins.io/security/advisory/2022-03-15/#SECURITY-2274",
    "versions": [
      {
        "lastVersion": "1.3.3",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2351",
    "type": "plugin",
    "name": "aws-credentials",
    "message": "CSRF vulnerability and missing permission checks",
    "url": "https://www.jenkins.io/security/advisory/2022-03-15/#SECURITY-2351",
    "versions": [
      {
        "lastVersion": "189.v3551d5642995",
        "pattern": "(189|1[.]1[0-9]|1[.]2[012345679]|1[.]28[.]1|1[.]3[013]|1[.][89])(|[.-].+)|(1[.]28|1[.]32)"
      }
    ]
  },
  {
    "id": "SECURITY-2557",
    "type": "plugin",
    "name": "favorite",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-03-15/#SECURITY-2557",
    "versions": [
      {
        "lastVersion": "2.4.0",
        "pattern": "(1|2[.][0-2]|2[.]3[.][0-2]|2[.]4[.]0)(|[.-].+)|(2[.]3[.]3)"
      }
    ]
  },
  {
    "id": "SECURITY-2559",
    "type": "plugin",
    "name": "dashboard-view",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-03-15/#SECURITY-2559",
    "versions": [
      {
        "lastVersion": "2.18",
        "pattern": "(1|2[.][0-9]|2[.]1[0-5])(|[.-].+)|(2[.]1[6-8])"
      }
    ]
  },
  {
    "id": "SECURITY-2636",
    "type": "plugin",
    "name": "kubernetes-cd",
    "message": "Missing permission checks allow enumerating credentials IDs",
    "url": "https://www.jenkins.io/security/advisory/2022-03-15/#SECURITY-2636",
    "versions": [
      {
        "lastVersion": "2.3.1",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2646",
    "type": "plugin",
    "name": "folder-auth",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-03-15/#SECURITY-2646",
    "versions": [
      {
        "lastVersion": "1.3",
        "pattern": "(1[.][0-3])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2681",
    "type": "plugin",
    "name": "kubernetes-cd",
    "message": "CSRF vulnerability and missing permission checks allow capturing credentials",
    "url": "https://www.jenkins.io/security/advisory/2022-03-15/#SECURITY-2681",
    "versions": [
      {
        "lastVersion": "2.3.1",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1892",
    "type": "plugin",
    "name": "ci-with-toad-edge",
    "message": "XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-03-29/#SECURITY-1892",
    "versions": [
      {
        "lastVersion": "2.3",
        "pattern": "(2[.][23])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1896",
    "type": "plugin",
    "name": "flaky-test-handler",
    "message": "XXE vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-03-29/#SECURITY-1896",
    "versions": [
      {
        "lastVersion": "1.2.1",
        "pattern": "(1[.][01]|1[.]2[.][01])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1897",
    "type": "plugin",
    "name": "phoenix-autotest",
    "message": "XXE vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-03-29/#SECURITY-1897",
    "versions": [
      {
        "lastVersion": "1.3",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1899",
    "type": "plugin",
    "name": "covcomplplot",
    "message": "XXE vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-03-29/#SECURITY-1899",
    "versions": [
      {
        "lastVersion": "1.1.1",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1932",
    "type": "plugin",
    "name": "sitemonitor",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-03-29/#SECURITY-1932",
    "versions": [
      {
        "lastVersion": "0.6",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2062-1",
    "type": "plugin",
    "name": "ownership",
    "message": "CSRF vulnerability and missing permission check",
    "url": "https://www.jenkins.io/security/advisory/2022-03-29/#SECURITY-2062%20(1)",
    "versions": [
      {
        "lastVersion": "0.13.0",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2062-2",
    "type": "plugin",
    "name": "ownership",
    "message": "CSRF vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-03-29/#SECURITY-2062%20(2)",
    "versions": [
      {
        "lastVersion": "0.13.0",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2079",
    "type": "plugin",
    "name": "proxmox",
    "message": "Password stored in plain text",
    "url": "https://www.jenkins.io/security/advisory/2022-03-29/#SECURITY-2079",
    "versions": [
      {
        "lastVersion": "0.5.0",
        "pattern": "(0[.][245])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2081",
    "type": "plugin",
    "name": "proxmox",
    "message": "SSL/TLS certificate validation globally disabled",
    "url": "https://www.jenkins.io/security/advisory/2022-03-29/#SECURITY-2081",
    "versions": [
      {
        "lastVersion": "0.6.0",
        "pattern": "(0[.][2456])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2082",
    "type": "plugin",
    "name": "proxmox",
    "message": "CSRF vulnerability and missing permission checks",
    "url": "https://www.jenkins.io/security/advisory/2022-03-29/#SECURITY-2082",
    "versions": [
      {
        "lastVersion": "0.7.0",
        "pattern": "(0[.][2456]|0[.]7[.]0)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2161",
    "type": "plugin",
    "name": "instant-messaging",
    "message": "Passwords stored in plain text",
    "url": "https://www.jenkins.io/security/advisory/2022-03-29/#SECURITY-2161",
    "versions": [
      {
        "lastVersion": "1.41",
        "pattern": "(1[.]1[4-9]|1[.]2[012345789]|1[.]3[02345789]|1[.]4[01])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2236",
    "type": "plugin",
    "name": "JiraTestResultReporter",
    "message": "CSRF vulnerability and missing permission check",
    "url": "https://www.jenkins.io/security/advisory/2022-03-29/#SECURITY-2236",
    "versions": [
      {
        "lastVersion": "165.v817928553942",
        "pattern": "([12]|16[25])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2241",
    "type": "plugin",
    "name": "rocketchatnotifier",
    "message": "CSRF vulnerability and missing permission check",
    "url": "https://www.jenkins.io/security/advisory/2022-03-29/#SECURITY-2241",
    "versions": [
      {
        "lastVersion": "1.4.10",
        "pattern": "(0|1[.][0-4])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2262",
    "type": "plugin",
    "name": "selected-tests-executor",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-03-29/#SECURITY-2262",
    "versions": [
      {
        "lastVersion": "1.3.3",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2285",
    "type": "plugin",
    "name": "ownership",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-03-29/#SECURITY-2285",
    "versions": [
      {
        "lastVersion": "0.13.0",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2338",
    "type": "plugin",
    "name": "selected-tests-executor",
    "message": "Arbitrary file read vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-03-29/#SECURITY-2338",
    "versions": [
      {
        "lastVersion": "1.3.3",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2633",
    "type": "plugin",
    "name": "ci-with-toad-edge",
    "message": "Arbitrary file read vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-03-29/#SECURITY-2633",
    "versions": [
      {
        "lastVersion": "2.3",
        "pattern": "(2[.][23])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2635",
    "type": "plugin",
    "name": "ci-with-toad-edge",
    "message": "Missing permission check",
    "url": "https://www.jenkins.io/security/advisory/2022-03-29/#SECURITY-2635",
    "versions": [
      {
        "lastVersion": "2.3",
        "pattern": "(2[.][23])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2639",
    "type": "plugin",
    "name": "atlassian-bitbucket-server-integration",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-03-29/#SECURITY-2639",
    "versions": [
      {
        "lastVersion": "3.1.0",
        "pattern": "([12]|3[.][01])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2640",
    "type": "plugin",
    "name": "atlassian-bitbucket-server-integration",
    "message": "Missing permission checks",
    "url": "https://www.jenkins.io/security/advisory/2022-03-29/#SECURITY-2640",
    "versions": [
      {
        "lastVersion": "3.1.0",
        "pattern": "([12]|3[.][01])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2654",
    "type": "plugin",
    "name": "ci-with-toad-edge",
    "message": "Path traversal vulnerability on Windows",
    "url": "https://www.jenkins.io/security/advisory/2022-03-29/#SECURITY-2654",
    "versions": [
      {
        "lastVersion": "2.3",
        "pattern": "(2[.][23])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2683",
    "type": "plugin",
    "name": "phoenix-autotest",
    "message": "Path traversal vulnerability allows reading arbitrary files",
    "url": "https://www.jenkins.io/security/advisory/2022-03-29/#SECURITY-2683",
    "versions": [
      {
        "lastVersion": "1.3",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2684",
    "type": "plugin",
    "name": "phoenix-autotest",
    "message": "Arbitrary file read vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-03-29/#SECURITY-2684",
    "versions": [
      {
        "lastVersion": "1.3",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2685",
    "type": "plugin",
    "name": "phoenix-autotest",
    "message": "Missing permission checks allow enumerating credentials IDs",
    "url": "https://www.jenkins.io/security/advisory/2022-03-29/#SECURITY-2685",
    "versions": [
      {
        "lastVersion": "1.3",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1951",
    "type": "plugin",
    "name": "workflow-cps-global-lib",
    "message": "Untrusted users can modify some Pipeline libraries",
    "url": "https://www.jenkins.io/security/advisory/2022-04-12/#SECURITY-1951",
    "versions": [
      {
        "lastVersion": "564.ve62a_4eb_b_e039",
        "pattern": "(1|2[.][0-9]|2[.]1[0-9]|2[.]20|2[.]21[.]1|54[458]|552|56[14])(|[.-].+)|(2[.]21)"
      }
    ]
  },
  {
    "id": "SECURITY-2045",
    "type": "plugin",
    "name": "google-compute-engine",
    "message": "Private key stored in plain text",
    "url": "https://www.jenkins.io/security/advisory/2022-04-12/#SECURITY-2045",
    "versions": [
      {
        "lastVersion": "4.3.8",
        "pattern": "([1-3]|4[.][0-2]|4[.]3[.][01234578])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2075",
    "type": "plugin",
    "name": "subversion",
    "message": "CSRF vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-04-12/#SECURITY-2075",
    "versions": [
      {
        "lastVersion": "2.15.3",
        "pattern": "(1|2[.][0-9]|2[.]1[0-4]|2[.]15[.][0-3])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2321",
    "type": "plugin",
    "name": "publish-over-ftp",
    "message": "CSRF vulnerability and missing permission checks",
    "url": "https://www.jenkins.io/security/advisory/2022-04-12/#SECURITY-2321",
    "versions": [
      {
        "lastVersion": "1.16",
        "pattern": "(0|1[.][0-9]|1[.]1[0-6])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2617-credentials",
    "type": "plugin",
    "name": "credentials",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-04-12/#SECURITY-2617",
    "versions": [
      {
        "lastVersion": "1111.v35a_307992395",
        "pattern": "(1|1055|1061|1074[.]v60e6c29b_b_44b_|1087[.]v16065d268466|1105|1111|2[.][0-5]|2[.]6[.]2)(|[.-].+)|(2[.]6[.]1)"
      }
    ]
  },
  {
    "id": "SECURITY-2617-cvs",
    "type": "plugin",
    "name": "cvs",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-04-12/#SECURITY-2617",
    "versions": [
      {
        "lastVersion": "2.19",
        "pattern": "(1|2[.][0-9]|2[.]1[0-8])(|[.-].+)|(2[.]19)"
      }
    ]
  },
  {
    "id": "SECURITY-2617-extended-choice-parameter",
    "type": "plugin",
    "name": "extended-choice-parameter",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-04-12/#SECURITY-2617",
    "versions": [
      {
        "lastVersion": "346.vd87693c5a_86c",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2617-gerrit-trigger",
    "type": "plugin",
    "name": "gerrit-trigger",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-04-12/#SECURITY-2617",
    "versions": [
      {
        "lastVersion": "2.35.2",
        "pattern": "(2[.]1[0-9]|2[.]2[0-9]|2[.][3-9]|2[.]3[0-4]|2[.]35[.][0-2])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2617-git-parameter",
    "type": "plugin",
    "name": "git-parameter",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-04-12/#SECURITY-2617",
    "versions": [
      {
        "lastVersion": "0.9.15",
        "pattern": "(0[.][1-8]|0[.]9[.][0-9]|0[.]9[.]1[0-5])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2617-jira",
    "type": "plugin",
    "name": "jira",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-04-12/#SECURITY-2617",
    "versions": [
      {
        "lastVersion": "3.7",
        "pattern": "([12]|3[.][0-5])(|[.-].+)|(3[.][67])"
      }
    ]
  },
  {
    "id": "SECURITY-2617-jobgenerator",
    "type": "plugin",
    "name": "jobgenerator",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-04-12/#SECURITY-2617",
    "versions": [
      {
        "lastVersion": "1.22",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2617-mask-passwords",
    "type": "plugin",
    "name": "mask-passwords",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-04-12/#SECURITY-2617",
    "versions": [
      {
        "lastVersion": "3.0",
        "pattern": "(2|3[.]0)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2617-nodelabelparameter",
    "type": "plugin",
    "name": "nodelabelparameter",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-04-12/#SECURITY-2617",
    "versions": [
      {
        "lastVersion": "1.10.3",
        "pattern": "(0|1[.][0-9]|1[.]10[.][0-2])(|[.-].+)|(1[.]10[.]3)"
      }
    ]
  },
  {
    "id": "SECURITY-2617-promoted-builds",
    "type": "plugin",
    "name": "promoted-builds",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-04-12/#SECURITY-2617",
    "versions": [
      {
        "lastVersion": "873.v6149db_d64130",
        "pattern": "([12]|3[.][012345679]|3[.]11|867|873)(|[.-].+)|(3[.]10)"
      }
    ]
  },
  {
    "id": "SECURITY-2617-subversion",
    "type": "plugin",
    "name": "subversion",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-04-12/#SECURITY-2617",
    "versions": [
      {
        "lastVersion": "2.15.3",
        "pattern": "(1|2[.][0-9]|2[.]1[0-4]|2[.]15[.][0-3])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2655",
    "type": "plugin",
    "name": "promoted-builds",
    "message": "Promotion names are not validated when using Job DSL",
    "url": "https://www.jenkins.io/security/advisory/2022-04-12/#SECURITY-2655",
    "versions": [
      {
        "lastVersion": "873.v6149db_d64130",
        "pattern": "([12]|3[.][012345679]|3[.]11|867|873)(|[.-].+)|(3[.]10)"
      }
    ]
  },
  {
    "id": "SECURITY-1969",
    "type": "plugin",
    "name": "storable-configs-plugin",
    "message": "XXE vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-05-17/#SECURITY-1969",
    "versions": [
      {
        "lastVersion": "1.0",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2093",
    "type": "plugin",
    "name": "ssh",
    "message": "CSRF vulnerability and missing permission checks allow capturing credentials",
    "url": "https://www.jenkins.io/security/advisory/2022-05-17/#SECURITY-2093",
    "versions": [
      {
        "lastVersion": "2.6.1",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2116",
    "type": "plugin",
    "name": "script-security",
    "message": "CSRF vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-05-17/#SECURITY-2116",
    "versions": [
      {
        "lastVersion": "1158.v7c1b_73a_69a_08",
        "pattern": "(1118|1125|113[18]|114[06]|1145[.]vb_cf6cf6ed960|1158|1[.][0-9]|1[.]1[0-9]|1[.]2[0-9]|1[.]3[013456789]|1[.]4[0-9]|1[.]5[0-9]|1[.]6[0-9]|1[.]7[0-7])(|[.-].+)|(1[.]78)"
      }
    ]
  },
  {
    "id": "SECURITY-2267",
    "type": "plugin",
    "name": "autocomplete-parameter",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-05-17/#SECURITY-2267",
    "versions": [
      {
        "lastVersion": "1.1",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2315",
    "type": "plugin",
    "name": "ssh",
    "message": "Missing permission check allows enumerating credentials IDs",
    "url": "https://www.jenkins.io/security/advisory/2022-05-17/#SECURITY-2315",
    "versions": [
      {
        "lastVersion": "2.6.1",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2322",
    "type": "plugin",
    "name": "autocomplete-parameter",
    "message": "CSRF vulnerability results in RCE",
    "url": "https://www.jenkins.io/security/advisory/2022-05-17/#SECURITY-2322",
    "versions": [
      {
        "lastVersion": "1.1",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2478-git",
    "type": "plugin",
    "name": "git",
    "message": "Multiple SCM plugins can check out from the controller file system",
    "url": "https://www.jenkins.io/security/advisory/2022-05-17/#SECURITY-2478",
    "versions": [
      {
        "lastVersion": "4.11.1",
        "pattern": "([1-3]|4[.][0-8]|4[.]10|4[.]11[.][01]|4[.]9[.]0)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2478-mercurial",
    "type": "plugin",
    "name": "mercurial",
    "message": "Multiple SCM plugins can check out from the controller file system",
    "url": "https://www.jenkins.io/security/advisory/2022-05-17/#SECURITY-2478",
    "versions": [
      {
        "lastVersion": "2.16",
        "pattern": "(1|2[.][0-9]|2[.]1[0-4])(|[.-].+)|(2[.]1[56])"
      }
    ]
  },
  {
    "id": "SECURITY-2478-repo",
    "type": "plugin",
    "name": "repo",
    "message": "Multiple SCM plugins can check out from the controller file system",
    "url": "https://www.jenkins.io/security/advisory/2022-05-17/#SECURITY-2478",
    "versions": [
      {
        "lastVersion": "1.14.0",
        "pattern": "(1[.][012356789]|1[.]1[0-3]|1[.]14[.]0)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2502",
    "type": "plugin",
    "name": "blueocean",
    "message": "CSRF vulnerability and missing permission checks",
    "url": "https://www.jenkins.io/security/advisory/2022-05-17/#SECURITY-2502",
    "versions": [
      {
        "lastVersion": "1.25.3",
        "pattern": "(1[.][0-9]|1[.]1[013456789]|1[.]2[1-4]|1[.]25[.][1-3])(|[.-].+)|(1[.]25[.]0)"
      }
    ]
  },
  {
    "id": "SECURITY-2600",
    "type": "plugin",
    "name": "rundeck",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-05-17/#SECURITY-2600",
    "versions": [
      {
        "lastVersion": "3.6.10",
        "pattern": "([12]|3[.][01345]|3[.]6[.][12345679]|3[.]6[.]10)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2604",
    "type": "plugin",
    "name": "windows-slaves",
    "message": "Multiple vulnerabilities in Windows Remote Command library",
    "url": "https://www.jenkins.io/security/advisory/2022-05-17/#SECURITY-2604",
    "versions": [
      {
        "lastVersion": "1.8",
        "pattern": "(1[.][0-7])(|[.-].+)|(1[.]8)"
      }
    ]
  },
  {
    "id": "SECURITY-2717-JDK_Parameter_Plugin",
    "type": "plugin",
    "name": "JDK_Parameter_Plugin",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-05-17/#SECURITY-2717",
    "versions": [
      {
        "lastVersion": "1.0",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2717-app-detector",
    "type": "plugin",
    "name": "app-detector",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-05-17/#SECURITY-2717",
    "versions": [
      {
        "lastVersion": "1.0.8",
        "pattern": "(1[.]0[.][01234568])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2717-autocomplete-parameter",
    "type": "plugin",
    "name": "autocomplete-parameter",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-05-17/#SECURITY-2717",
    "versions": [
      {
        "lastVersion": "1.1",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2717-global-variable-string-parameter",
    "type": "plugin",
    "name": "global-variable-string-parameter",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-05-17/#SECURITY-2717",
    "versions": [
      {
        "lastVersion": "1.2",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2717-multiselect-parameter",
    "type": "plugin",
    "name": "multiselect-parameter",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-05-17/#SECURITY-2717",
    "versions": [
      {
        "lastVersion": "1.3",
        "pattern": "(1[.][1-3])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2717-promoted-builds-simple",
    "type": "plugin",
    "name": "promoted-builds-simple",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-05-17/#SECURITY-2717",
    "versions": [
      {
        "lastVersion": "1.9",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2717-random-string-parameter",
    "type": "plugin",
    "name": "random-string-parameter",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-05-17/#SECURITY-2717",
    "versions": [
      {
        "lastVersion": "1.0",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2717-selection-tasks-plugin",
    "type": "plugin",
    "name": "selection-tasks-plugin",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-05-17/#SECURITY-2717",
    "versions": [
      {
        "lastVersion": "1.0",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2717-vboxwrapper",
    "type": "plugin",
    "name": "vboxwrapper",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-05-17/#SECURITY-2717",
    "versions": [
      {
        "lastVersion": "1.3",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2753",
    "type": "plugin",
    "name": "gitlab-plugin",
    "message": "Missing permission check allows enumerating credentials IDs",
    "url": "https://www.jenkins.io/security/advisory/2022-05-17/#SECURITY-2753",
    "versions": [
      {
        "lastVersion": "1.5.31",
        "pattern": "(1[.][0-4]|1[.]5[.][0-9]|1[.]5[.]1[01239]|1[.]5[.]2[023456789]|1[.]5[.]3[01])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-359",
    "type": "plugin",
    "name": "workflow-cps",
    "message": "Sandbox bypass vulnerability through implicitly allowlisted platform Groovy files",
    "url": "https://www.jenkins.io/security/advisory/2022-05-17/#SECURITY-359",
    "versions": [
      {
        "lastVersion": "2689.v434009a_31b_f1",
        "pattern": "(1|2633|264[0468]|265[69]|2660|268[026789]|2683[.]vd0a_8f6a_1c263|2[.][0-9]|2[.]1[0-9]|2[.]2[0-9]|2[.]3[0-9]|2[.]4[0-9]|2[.]5[0-9]|2[.]6[0-9]|2[.]7[0-9]|2[.]8[0-9]|2[.]9[0-3]|2[.]94[.]1)(|[.-].+)|(2[.]94)"
      }
    ]
  },
  {
    "id": "SECURITY-714",
    "type": "plugin",
    "name": "blueocean-pipeline-scm-api",
    "message": "User-scoped credentials exposed to other users",
    "url": "https://www.jenkins.io/security/advisory/2022-05-17/#SECURITY-714",
    "versions": [
      {
        "lastVersion": "1.25.3",
        "pattern": "(1[.][1-9]|1[.]1[013456789]|1[.]2[1-4]|1[.]25[.][1-3])(|[.-].+)|(1[.]25[.]0)"
      }
    ]
  },
  {
    "id": "core-2_356",
    "type": "core",
    "name": "core",
    "message": "Multiple security vulnerabilities in Jenkins 2.355 and earlier, LTS 2.332.3 and earlier",
    "url": "https://www.jenkins.io/security/advisory/2022-06-22/",
    "versions": [
      {
        "lastVersion": "2.355",
        "pattern": "(1|2[.][0-9]|2[.]1[0-9]|2[.]10[0-9]|2[.]11[0-9]|2[.]12[0-9]|2[.]13[0-8]|2[.]14[0-9]|2[.]15[0-9]|2[.]16[0-9]|2[.]17[0-9]|2[.]18[012345679]|2[.]19[0-9]|2[.]2[0-9]|2[.]20[0-9]|2[.]21[012345789]|2[.]22[0-9]|2[.]23[0-9]|2[.]24[0-9]|2[.]25[0-9]|2[.]26[0-9]|2[.]27[0-9]|2[.]28[0-9]|2[.]29[0-9]|2[.]3[0-9]|2[.]30[0-9]|2[.]31[1-9]|2[.]32[0-9]|2[.]33[013456789]|2[.]34[0-57-9]|2[.]35[045]|2[.]4[0-9]|2[.]5[0-9]|2[.]6[0-9]|2[.]7[0-9]|2[.]8[0-9]|2[.]9[0-9])(|[.-].+)|(2[.]332|2[.]346)"
      },
      {
        "lastVersion": "LTS 2.332.3",
        "pattern": "(1|2[.]107|2[.]121|2[.]138|2[.]150|2[.]164|2[.]176|2[.]19|2[.]190|2[.]204|2[.]222|2[.]235|2[.]249|2[.]263|2[.]277|2[.]289|2[.]303|2[.]319|2[.]32|2[.]332[.][1-3]|2[.]46|2[.]60|2[.]7|2[.]73|2[.]89)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2064",
    "type": "plugin",
    "name": "convertigo-mobile-platform",
    "message": "Passwords stored in plain text",
    "url": "https://www.jenkins.io/security/advisory/2022-06-22/#SECURITY-2064",
    "versions": [
      {
        "lastVersion": "1.1",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2066",
    "type": "plugin",
    "name": "easyqa",
    "message": "User passwords stored in plain text",
    "url": "https://www.jenkins.io/security/advisory/2022-06-22/#SECURITY-2066",
    "versions": [
      {
        "lastVersion": "1.0",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2089",
    "type": "plugin",
    "name": "squashtm-publisher",
    "message": "Passwords stored in plain text",
    "url": "https://www.jenkins.io/security/advisory/2022-06-22/#SECURITY-2089",
    "versions": [
      {
        "lastVersion": "1.0.0",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2240",
    "type": "plugin",
    "name": "jianliao",
    "message": "CSRF vulnerability and missing permission checks",
    "url": "https://www.jenkins.io/security/advisory/2022-06-22/#SECURITY-2240",
    "versions": [
      {
        "lastVersion": "1.1",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2248",
    "type": "plugin",
    "name": "beaker-builder",
    "message": "CSRF vulnerability and missing permission checks",
    "url": "https://www.jenkins.io/security/advisory/2022-06-22/#SECURITY-2248",
    "versions": [
      {
        "lastVersion": "1.10",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2249",
    "type": "plugin",
    "name": "threadfix",
    "message": "CSRF vulnerability and missing permission check",
    "url": "https://www.jenkins.io/security/advisory/2022-06-22/#SECURITY-2249",
    "versions": [
      {
        "lastVersion": "1.5.4",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2276",
    "type": "plugin",
    "name": "convertigo-mobile-platform",
    "message": "CSRF vulnerability and missing permission checks",
    "url": "https://www.jenkins.io/security/advisory/2022-06-22/#SECURITY-2276",
    "versions": [
      {
        "lastVersion": "1.1",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2279",
    "type": "plugin",
    "name": "vmware-vrealize-orchestrator",
    "message": "CSRF vulnerability and missing permission check",
    "url": "https://www.jenkins.io/security/advisory/2022-06-22/#SECURITY-2279",
    "versions": [
      {
        "lastVersion": "3.0",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2281",
    "type": "plugin",
    "name": "easyqa",
    "message": "CSRF vulnerability and missing permission checks",
    "url": "https://www.jenkins.io/security/advisory/2022-06-22/#SECURITY-2281",
    "versions": [
      {
        "lastVersion": "1.0",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2549",
    "type": "plugin",
    "name": "xunit",
    "message": "Agent-to-controller security bypass",
    "url": "https://www.jenkins.io/security/advisory/2022-06-22/#SECURITY-2549",
    "versions": [
      {
        "lastVersion": "3.0.8",
        "pattern": "([12]|3[.]0)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2567",
    "type": "plugin",
    "name": "embeddable-build-status",
    "message": "Reflected XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-06-22/#SECURITY-2567",
    "versions": [
      {
        "lastVersion": "2.0.3",
        "pattern": "2[.]0[.]3"
      }
    ]
  },
  {
    "id": "SECURITY-2705",
    "type": "plugin",
    "name": "pipeline-input-step",
    "message": "Arbitrary file write vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-06-22/#SECURITY-2705",
    "versions": [
      {
        "lastVersion": "448.v37cea_9a_10a_70",
        "pattern": "(2[.][0-9]|2[.]1[01]|2[.]12[.]1|427|44[68]|447[.]v95e5a_6e3502a_)(|[.-].+)|(2[.]12)"
      }
    ]
  },
  {
    "id": "SECURITY-2760",
    "type": "plugin",
    "name": "junit",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-06-22/#SECURITY-2760",
    "versions": [
      {
        "lastVersion": "1119.va_a_5e9068da_d7",
        "pattern": "(1119[.]va_a_5e9068da_d7|1[.][0-9]|1[.]1[01234589]|1[.]2[0-9]|1[.]3[0-9]|1[.]4[1-9]|1[.]5[012456789]|1[.]6[0-3])(|[.-].+)|(1[.]53)"
      }
    ]
  },
  {
    "id": "SECURITY-2768",
    "type": "plugin",
    "name": "nested-view",
    "message": "Reflected XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-06-22/#SECURITY-2768",
    "versions": [
      {
        "lastVersion": "1.25",
        "pattern": "(1[.]1[0123479]|1[.]2[0-5]|1[.][6-9])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2784-StashBranchParameter",
    "type": "plugin",
    "name": "StashBranchParameter",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-06-22/#SECURITY-2784",
    "versions": [
      {
        "lastVersion": "0.3.0",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2784-agent-server-parameter",
    "type": "plugin",
    "name": "agent-server-parameter",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-06-22/#SECURITY-2784",
    "versions": [
      {
        "lastVersion": "1.1",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2784-cavisson-ns-nd-integration",
    "type": "plugin",
    "name": "cavisson-ns-nd-integration",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-06-22/#SECURITY-2784",
    "versions": [
      {
        "lastVersion": "4.8.0.77",
        "pattern": "(4[.]6|4[.]8[.]0[.]77)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2784-crx-content-package-deployer",
    "type": "plugin",
    "name": "crx-content-package-deployer",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-06-22/#SECURITY-2784",
    "versions": [
      {
        "lastVersion": "1.9",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2784-date-parameter",
    "type": "plugin",
    "name": "date-parameter",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-06-22/#SECURITY-2784",
    "versions": [
      {
        "lastVersion": "0.0.4",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2784-dynamic_extended_choice_parameter",
    "type": "plugin",
    "name": "dynamic_extended_choice_parameter",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-06-22/#SECURITY-2784",
    "versions": [
      {
        "lastVersion": "1.0.1",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2784-filesystem-list-parameter-plugin",
    "type": "plugin",
    "name": "filesystem-list-parameter-plugin",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-06-22/#SECURITY-2784",
    "versions": [
      {
        "lastVersion": "0.0.7",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2784-hidden-parameter",
    "type": "plugin",
    "name": "hidden-parameter",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-06-22/#SECURITY-2784",
    "versions": [
      {
        "lastVersion": "0.0.4",
        "pattern": "(0[.]0[.]4)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2784-image-tag-parameter",
    "type": "plugin",
    "name": "image-tag-parameter",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-06-22/#SECURITY-2784",
    "versions": [
      {
        "lastVersion": "1.10",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2784-maven-metadata-plugin",
    "type": "plugin",
    "name": "maven-metadata-plugin",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-06-22/#SECURITY-2784",
    "versions": [
      {
        "lastVersion": "2.1",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2784-ontrack",
    "type": "plugin",
    "name": "ontrack",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-06-22/#SECURITY-2784",
    "versions": [
      {
        "lastVersion": "4.0.0",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2784-packageversion",
    "type": "plugin",
    "name": "packageversion",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-06-22/#SECURITY-2784",
    "versions": [
      {
        "lastVersion": "1.0.1",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2784-readonly-parameters",
    "type": "plugin",
    "name": "readonly-parameters",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-06-22/#SECURITY-2784",
    "versions": [
      {
        "lastVersion": "1.0.0",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2784-repository-connector",
    "type": "plugin",
    "name": "repository-connector",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-06-22/#SECURITY-2784",
    "versions": [
      {
        "lastVersion": "2.2.0",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2784-rest-list-parameter",
    "type": "plugin",
    "name": "rest-list-parameter",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-06-22/#SECURITY-2784",
    "versions": [
      {
        "lastVersion": "1.5.2",
        "pattern": "(1[.][0-5])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2784-sauce-ondemand",
    "type": "plugin",
    "name": "sauce-ondemand",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-06-22/#SECURITY-2784",
    "versions": [
      {
        "lastVersion": "1.204",
        "pattern": "(1[.]1[0-9]|1[.]10[0-9]|1[.]11[0-9]|1[.]12[0-9]|1[.]13[0-9]|1[.]14[0-9]|1[.]15[0-9]|1[.]16[0-9]|1[.]17[0-9]|1[.]18[0-9]|1[.]19[0123479]|1[.]2[0-9]|1[.]20[124]|1[.]3[0-9]|1[.]4[0-9]|1[.][5-9]|1[.]5[0-9]|1[.]6[0-9]|1[.]7[0-8]|1[.]8[0-9]|1[.]9[0-9])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2792",
    "type": "plugin",
    "name": "embeddable-build-status",
    "message": "Path traversal vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-06-22/#SECURITY-2792",
    "versions": [
      {
        "lastVersion": "2.0.3",
        "pattern": "(1|2[.]0[.][1-3])(|[.-].+)|(2[.]0)"
      }
    ]
  },
  {
    "id": "SECURITY-2794",
    "type": "plugin",
    "name": "embeddable-build-status",
    "message": "Improper authorization bypasses ViewStatus permission requirement",
    "url": "https://www.jenkins.io/security/advisory/2022-06-22/#SECURITY-2794",
    "versions": [
      {
        "lastVersion": "2.0.3",
        "pattern": "(1|2[.]0[.][1-3])(|[.-].+)|(2[.]0)"
      }
    ]
  },
  {
    "id": "SECURITY-1118",
    "type": "plugin",
    "name": "build-metrics",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-06-30/#SECURITY-1118",
    "versions": [
      {
        "lastVersion": "1.3",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1877",
    "type": "plugin",
    "name": "opsgenie",
    "message": "API Key stored in plain text",
    "url": "https://www.jenkins.io/security/advisory/2022-06-30/#SECURITY-1877",
    "versions": [
      {
        "lastVersion": "1.10",
        "pattern": "(1[.][0-9]|1[.]10)(|[.-].*)"
      }
    ]
  },
  {
    "id": "SECURITY-1919",
    "type": "plugin",
    "name": "project-inheritance",
    "message": "XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-06-30/#SECURITY-1919",
    "versions": [
      {
        "lastVersion": "21.04.03",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1926",
    "type": "plugin",
    "name": "matrix-reloaded",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-06-30/#SECURITY-1926",
    "versions": [
      {
        "lastVersion": "1.1.3",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1939",
    "type": "plugin",
    "name": "xfpanel",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-06-30/#SECURITY-1939",
    "versions": [
      {
        "lastVersion": "2.0.1",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1996",
    "type": "plugin",
    "name": "rrod",
    "message": "Incorrect permission check",
    "url": "https://www.jenkins.io/security/advisory/2022-06-30/#SECURITY-1996",
    "versions": [
      {
        "lastVersion": "1.1.0",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2000",
    "type": "plugin",
    "name": "recipe",
    "message": "CSRF vulnerability and missing permission checks allow XXE",
    "url": "https://www.jenkins.io/security/advisory/2022-06-30/#SECURITY-2000",
    "versions": [
      {
        "lastVersion": "1.2",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2002",
    "type": "plugin",
    "name": "xpath-config-viewer",
    "message": "Missing permission check allows accessing XPath Configuration Viewer page",
    "url": "https://www.jenkins.io/security/advisory/2022-06-30/#SECURITY-2002",
    "versions": [
      {
        "lastVersion": "1.1.1",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2016",
    "type": "plugin",
    "name": "matrix-reloaded",
    "message": "CSRF vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-06-30/#SECURITY-2016",
    "versions": [
      {
        "lastVersion": "1.1.3",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2055",
    "type": "plugin",
    "name": "cisco-spark",
    "message": "Token stored in plain text",
    "url": "https://www.jenkins.io/security/advisory/2022-06-30/#SECURITY-2055",
    "versions": [
      {
        "lastVersion": "1.1.1",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2056",
    "type": "plugin",
    "name": "build-notifications",
    "message": "Tokens stored in plain text",
    "url": "https://www.jenkins.io/security/advisory/2022-06-30/#SECURITY-2056",
    "versions": [
      {
        "lastVersion": "1.5.0",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2061",
    "type": "plugin",
    "name": "failedJobDeactivator",
    "message": "CSRF vulnerability and missing permission checks allow disabling jobs",
    "url": "https://www.jenkins.io/security/advisory/2022-06-30/#SECURITY-2061",
    "versions": [
      {
        "lastVersion": "1.2.1",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2070",
    "type": "plugin",
    "name": "ec2-deployment-dashboard",
    "message": "Password stored in plain text",
    "url": "https://www.jenkins.io/security/advisory/2022-06-30/#SECURITY-2070",
    "versions": [
      {
        "lastVersion": "1.0.10",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2073",
    "type": "plugin",
    "name": "elasticsearch-query",
    "message": "Password stored in plain text",
    "url": "https://www.jenkins.io/security/advisory/2022-06-30/#SECURITY-2073",
    "versions": [
      {
        "lastVersion": "1.2",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2080",
    "type": "plugin",
    "name": "hpe-network-virtualization",
    "message": "Passwords stored in plain text",
    "url": "https://www.jenkins.io/security/advisory/2022-06-30/#SECURITY-2080",
    "versions": [
      {
        "lastVersion": "1.0",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2083",
    "type": "plugin",
    "name": "jigomerge",
    "message": "Password stored in plain text",
    "url": "https://www.jenkins.io/security/advisory/2022-06-30/#SECURITY-2083",
    "versions": [
      {
        "lastVersion": "0.9",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2088",
    "type": "plugin",
    "name": "rocketchatnotifier",
    "message": "Secrets stored in plain text",
    "url": "https://www.jenkins.io/security/advisory/2022-06-30/#SECURITY-2088",
    "versions": [
      {
        "lastVersion": "1.5.2",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2155",
    "type": "plugin",
    "name": "rqm-plugin",
    "message": "Password stored in plain text",
    "url": "https://www.jenkins.io/security/advisory/2022-06-30/#SECURITY-2155",
    "versions": [
      {
        "lastVersion": "2.8",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2160",
    "type": "plugin",
    "name": "skype-notifier",
    "message": "Password stored in plain text",
    "url": "https://www.jenkins.io/security/advisory/2022-06-30/#SECURITY-2160",
    "versions": [
      {
        "lastVersion": "1.1.0",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2165",
    "type": "plugin",
    "name": "validating-email-parameter",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-06-30/#SECURITY-2165",
    "versions": [
      {
        "lastVersion": "1.10",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2220",
    "type": "plugin",
    "name": "plot",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-06-30/#SECURITY-2220",
    "versions": [
      {
        "lastVersion": "2.1.10",
        "pattern": "(1|2[.]0|2[.]1[.][0-9]|2[.]1[.]10)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2316",
    "type": "plugin",
    "name": "gitlab-plugin",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-06-30/#SECURITY-2316",
    "versions": [
      {
        "lastVersion": "1.5.34",
        "pattern": "(1[.][0-4]|1[.]5[.][0-9]|1[.]5[.]1[01239]|1[.]5[.]2[023456789]|1[.]5[.]3[0-4])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2332",
    "type": "plugin",
    "name": "rich-text-publisher-plugin",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-06-30/#SECURITY-2332",
    "versions": [
      {
        "lastVersion": "1.4",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2643",
    "type": "plugin",
    "name": "build-metrics",
    "message": "Missing permission checks",
    "url": "https://www.jenkins.io/security/advisory/2022-06-30/#SECURITY-2643",
    "versions": [
      {
        "lastVersion": "1.3",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2650",
    "type": "plugin",
    "name": "requests",
    "message": "Incorrect permission check allows viewing pending requests",
    "url": "https://www.jenkins.io/security/advisory/2022-06-30/#SECURITY-2650",
    "versions": [
      {
        "lastVersion": "2.2.16",
        "pattern": "(2[.]0|2[.]2[.][1-9]|2[.]2[.]1[0-6]|requests[-]2)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2657",
    "type": "plugin",
    "name": "rrod",
    "message": "CSRF vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-06-30/#SECURITY-2657",
    "versions": [
      {
        "lastVersion": "1.1.0",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2658",
    "type": "plugin",
    "name": "xpath-config-viewer",
    "message": "CSRF vulnerability and missing permission checks",
    "url": "https://www.jenkins.io/security/advisory/2022-06-30/#SECURITY-2658",
    "versions": [
      {
        "lastVersion": "1.1.1",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2773-1",
    "type": "plugin",
    "name": "xlrelease-plugin",
    "message": "Missing permission checks allow enumerating credentials IDs",
    "url": "https://www.jenkins.io/security/advisory/2022-06-30/#SECURITY-2773%20(1)",
    "versions": [
      {
        "lastVersion": "22.0.0",
        "pattern": "(10|[24567]|22[.]0[.]0)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2773-2",
    "type": "plugin",
    "name": "xlrelease-plugin",
    "message": "CSRF vulnerability and missing permission checks allow capturing credentials",
    "url": "https://www.jenkins.io/security/advisory/2022-06-30/#SECURITY-2773%20(2)",
    "versions": [
      {
        "lastVersion": "22.0.0",
        "pattern": "(10|[24567]|22[.]0[.]0)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2788",
    "type": "plugin",
    "name": "testng-plugin",
    "message": "XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-06-30/#SECURITY-2788",
    "versions": [
      {
        "lastVersion": "554.va4a552116332",
        "pattern": "([01]|55[24])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2798-1",
    "type": "plugin",
    "name": "ec2-deployment-dashboard",
    "message": "Missing permission checks allow enumerating credentials IDs",
    "url": "https://www.jenkins.io/security/advisory/2022-06-30/#SECURITY-2798%20(1)",
    "versions": [
      {
        "lastVersion": "1.0.10",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2798-2",
    "type": "plugin",
    "name": "ec2-deployment-dashboard",
    "message": "CSRF vulnerability and missing permission checks",
    "url": "https://www.jenkins.io/security/advisory/2022-06-30/#SECURITY-2798%20(2)",
    "versions": [
      {
        "lastVersion": "1.0.10",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2799",
    "type": "plugin",
    "name": "ec2-deployment-dashboard",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-06-30/#SECURITY-2799",
    "versions": [
      {
        "lastVersion": "1.0.10",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2806",
    "type": "plugin",
    "name": "rqm-plugin",
    "message": "Missing permission check allows enumerating credentials IDs",
    "url": "https://www.jenkins.io/security/advisory/2022-06-30/#SECURITY-2806",
    "versions": [
      {
        "lastVersion": "2.8",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1375-1",
    "type": "plugin",
    "name": "openshift-deployer",
    "message": "CSRF vulnerability and missing permission check",
    "url": "https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-1375%20(1)",
    "versions": [
      {
        "lastVersion": "1.2.0",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1375-2",
    "type": "plugin",
    "name": "openshift-deployer",
    "message": "CSRF vulnerability and missing permission check",
    "url": "https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-1375%20(2)",
    "versions": [
      {
        "lastVersion": "1.2.0",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1468",
    "type": "plugin",
    "name": "git-client",
    "message": "Missing hostname verification",
    "url": "https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-1468",
    "versions": [
      {
        "lastVersion": "3.11.0",
        "pattern": "([12]|3[.][0-9]|3[.]10[.]1|3[.]11[.]0)(|[.-].+)|(3[.]10[.]0)"
      }
    ]
  },
  {
    "id": "SECURITY-1849",
    "type": "plugin",
    "name": "github",
    "message": "Non-constant time webhook signature comparison",
    "url": "https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-1849",
    "versions": [
      {
        "lastVersion": "1.34.4",
        "pattern": "(0|1[.][0-9]|1[.]1[0-9]|1[.]2[0-9]|1[.]3[0-3]|1[.]34[.][024])(|[.-].+)|(1[.]34[.][13])"
      }
    ]
  },
  {
    "id": "SECURITY-2048",
    "type": "plugin",
    "name": "lucene-search",
    "message": "Missing permission checks",
    "url": "https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-2048",
    "versions": [
      {
        "lastVersion": "370.v62a5f618cd3a",
        "pattern": "([1-5]|358|370)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2053",
    "type": "plugin",
    "name": "http_request",
    "message": "Passwords stored in plain text",
    "url": "https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-2053",
    "versions": [
      {
        "lastVersion": "1.15",
        "pattern": "(1[.][1-9]|1[.]1[0-5])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2105-1",
    "type": "plugin",
    "name": "openstack-heat",
    "message": "CSRF vulnerability and missing permission checks",
    "url": "https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-2105%20(1)",
    "versions": [
      {
        "lastVersion": "1.5",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2105-2",
    "type": "plugin",
    "name": "openstack-heat",
    "message": "Missing permission checks allow listing the Jenkins controller file system",
    "url": "https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-2105%20(2)",
    "versions": [
      {
        "lastVersion": "1.5",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2205",
    "type": "plugin",
    "name": "deployer-framework",
    "message": "Missing permission check allows reading deployment logs",
    "url": "https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-2205",
    "versions": [
      {
        "lastVersion": "85.v1d1888e8c021",
        "pattern": "(1[.][0-2]|6[49]|75|85)(|[.-].+)|(1[.]3)"
      }
    ]
  },
  {
    "id": "SECURITY-2206",
    "type": "plugin",
    "name": "deployer-framework",
    "message": "Path traversal vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-2206",
    "versions": [
      {
        "lastVersion": "85.v1d1888e8c021",
        "pattern": "(1[.][0-2]|6[49]|75|85)(|[.-].+)|(1[.]3)"
      }
    ]
  },
  {
    "id": "SECURITY-2210",
    "type": "plugin",
    "name": "files-found-trigger",
    "message": "Missing permission check allows listing the Jenkins controller file system",
    "url": "https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-2210",
    "versions": [
      {
        "lastVersion": "1.5",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2402",
    "type": "plugin",
    "name": "rhnpush-plugin",
    "message": "Missing permission check allows listing workspace contents",
    "url": "https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-2402",
    "versions": [
      {
        "lastVersion": "0.5.1",
        "pattern": "(0[.][14]|0[.]5[.][01])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2403",
    "type": "plugin",
    "name": "rpmsign-plugin",
    "message": "Missing permission check allows listing workspace contents",
    "url": "https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-2403",
    "versions": [
      {
        "lastVersion": "0.5.0",
        "pattern": "(0[.][14]|0[.]5[.]0)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2404",
    "type": "plugin",
    "name": "android-signing",
    "message": "Missing permission check allows listing workspace contents",
    "url": "https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-2404",
    "versions": [
      {
        "lastVersion": "2.2.5",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2413",
    "type": "plugin",
    "name": "clif-performance-testing",
    "message": "Arbitrary file write vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-2413",
    "versions": [
      {
        "lastVersion": "70.v7214dfdb_32ec",
        "pattern": "(1|64|70)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2593",
    "type": "plugin",
    "name": "hashicorp-vault-plugin",
    "message": "Missing permission checks allow capturing credentials",
    "url": "https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-2593",
    "versions": [
      {
        "lastVersion": "354.vdb_858fd6b_f48",
        "pattern": "([1-3]|336|35[14])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2619",
    "type": "plugin",
    "name": "compuware-topaz-utilities",
    "message": "Missing permission checks",
    "url": "https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-2619",
    "versions": [
      {
        "lastVersion": "1.0.8",
        "pattern": "(1[.]0[.][2-8])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2621",
    "type": "plugin",
    "name": "compuware-scm-downloader",
    "message": "Missing permission checks",
    "url": "https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-2621",
    "versions": [
      {
        "lastVersion": "2.0.12",
        "pattern": "(1|2[.]0[.][0-9]|2[.]0[.]1[0-2])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2626",
    "type": "plugin",
    "name": "compuware-xpediter-code-coverage",
    "message": "Missing permission checks",
    "url": "https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-2626",
    "versions": [
      {
        "lastVersion": "1.0.7",
        "pattern": "(1[.]0[.][0-7])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2628",
    "type": "plugin",
    "name": "compuware-ispw-operations",
    "message": "Missing permission checks",
    "url": "https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-2628",
    "versions": [
      {
        "lastVersion": "1.0.8",
        "pattern": "(1[.]0[.][2-8])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2629",
    "type": "plugin",
    "name": "compuware-ispw-operations",
    "message": "Agent-to-controller security bypass",
    "url": "https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-2629",
    "versions": [
      {
        "lastVersion": "1.0.8",
        "pattern": "(1[.]0[.][2-8])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2630",
    "type": "plugin",
    "name": "compuware-zadviser-api",
    "message": "Agent-to-controller security bypass",
    "url": "https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-2630",
    "versions": [
      {
        "lastVersion": "1.0.3",
        "pattern": "(1[.]0[.][0-3])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2656",
    "type": "plugin",
    "name": "google-cloud-backup",
    "message": "CSRF vulnerability and missing permission check",
    "url": "https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-2656",
    "versions": [
      {
        "lastVersion": "0.6",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2665-1",
    "type": "plugin",
    "name": "repository-connector",
    "message": "Missing permission checks allow enumerating credentials IDs",
    "url": "https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-2665%20(1)",
    "versions": [
      {
        "lastVersion": "2.2.0",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2665-2",
    "type": "plugin",
    "name": "repository-connector",
    "message": "Missing permission check allows listing the Jenkins controller file system",
    "url": "https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-2665%20(2)",
    "versions": [
      {
        "lastVersion": "2.2.0",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2682",
    "type": "plugin",
    "name": "dynamic_extended_choice_parameter",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-2682",
    "versions": [
      {
        "lastVersion": "1.0.1",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2686",
    "type": "plugin",
    "name": "maven-metadata-plugin",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-2686",
    "versions": [
      {
        "lastVersion": "2.2",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2747",
    "type": "plugin",
    "name": "buckminster",
    "message": "Missing permission check",
    "url": "https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-2747",
    "versions": [
      {
        "lastVersion": "1.1.1",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2762",
    "type": "plugin",
    "name": "external-monitor-job",
    "message": "CSRF vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-2762",
    "versions": [
      {
        "lastVersion": "191.v363d0d1efdf8",
        "pattern": "(189|191|1[.][0-6])(|[.-].+)|(1[.]7)"
      }
    ]
  },
  {
    "id": "SECURITY-2764",
    "type": "plugin",
    "name": "deployer-framework",
    "message": "Path traversal vulnerability allows reading arbitrary files",
    "url": "https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-2764",
    "versions": [
      {
        "lastVersion": "85.v1d1888e8c021",
        "pattern": "(1[.][0-2]|6[49]|75|85)(|[.-].+)|(1[.]3)"
      }
    ]
  },
  {
    "id": "SECURITY-2766",
    "type": "plugin",
    "name": "jobConfigHistory",
    "message": "CSRF vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-2766",
    "versions": [
      {
        "lastVersion": "1155.v28a_46a_cc06a_5",
        "pattern": "([12]|1119|113[39]|114[68]|1155)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2790-1",
    "type": "plugin",
    "name": "coverity",
    "message": "Missing permission check allows enumerating credentials IDs",
    "url": "https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-2790%20(1)",
    "versions": [
      {
        "lastVersion": "1.11.4",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2790-2",
    "type": "plugin",
    "name": "coverity",
    "message": "CSRF vulnerability and missing permission check allow capturing credentials",
    "url": "https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-2790%20(2)",
    "versions": [
      {
        "lastVersion": "1.11.4",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2812",
    "type": "plugin",
    "name": "lucene-search",
    "message": "Reflected XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-2812",
    "versions": [
      {
        "lastVersion": "370.v62a5f618cd3a",
        "pattern": "([1-5]|358|370)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-284",
    "type": "plugin",
    "name": "git",
    "message": "Lack of authentication mechanism in webhook",
    "url": "https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-284",
    "versions": [
      {
        "lastVersion": "4.11.3",
        "pattern": "([1-3]|4[.][0-8]|4[.]10|4[.]11[.][0-3]|4[.]9[.][0-2])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2157",
    "type": "plugin",
    "name": "collabnet",
    "message": "RabbitMQ password stored in plain text",
    "url": "https://www.jenkins.io/security/advisory/2022-08-23/#SECURITY-2157",
    "versions": [
      {
        "lastVersion": "2.0.8",
        "pattern": "(1|2[.]0[.][1-8])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2448",
    "type": "plugin",
    "name": "kubernetes-cd",
    "message": "RCE vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-08-23/#SECURITY-2448",
    "versions": [
      {
        "lastVersion": "2.3.1",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2765",
    "type": "plugin",
    "name": "jobConfigHistory",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-08-23/#SECURITY-2765",
    "versions": [
      {
        "lastVersion": "1165.v8cc9fd1f4597",
        "pattern": "([12]|1119|113[39]|114[68]|115[56]|116[35])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2796",
    "type": "plugin",
    "name": "git",
    "message": "Improper masking of credentials",
    "url": "https://www.jenkins.io/security/advisory/2022-08-23/#SECURITY-2796",
    "versions": [
      {
        "lastVersion": "4.11.4",
        "pattern": "([1-3]|4[.][0-8]|4[.]10|4[.]11[.][0-4]|4[.]9[.][0-3])(|[.-].+)"
      }
    ]
  },
  {
    "id": "core-2_263",
    "type": "core",
    "name": "core",
    "message": "HTTP/2 denial of service vulnerability in bundled Jetty",
    "url": "https://www.jenkins.io/security/advisory/2022-09-09/",
    "versions": [
      {
        "lastVersion": "LTS 2.346.3",
        "pattern": "(1|2[.]107|2[.]121|2[.]138|2[.]150|2[.]164|2[.]176|2[.]19|2[.]190|2[.]204|2[.]222|2[.]235|2[.]249|2[.]277|2[.]289|2[.]303|2[.]319|2[.]32|2[.]332|2[.]346|2[.]46|2[.]60|2[.]7|2[.]73|2[.]89)(|[.-].+)"
      },
      {
        "lastVersion": "2.362",
        "pattern": "(1|2[.][0-9]|2[.]1[0-9]|2[.]10[0-9]|2[.]11[0-9]|2[.]12[0-9]|2[.]13[0-8]|2[.]14[0-9]|2[.]15[0-9]|2[.]16[0-9]|2[.]17[0-9]|2[.]18[012345679]|2[.]19[0-9]|2[.]2[0-9]|2[.]20[0-9]|2[.]21[012345789]|2[.]22[0-9]|2[.]23[0-9]|2[.]24[0-9]|2[.]25[0-9]|2[.]26[012456789]|2[.]27[0-9]|2[.]28[0-9]|2[.]29[0-9]|2[.]3[0-9]|2[.]30[0-9]|2[.]31[1-9]|2[.]32[0-9]|2[.]33[0-9]|2[.]34[0-9]|2[.]35[0456789]|2[.]36[0234567]|2[.]4[0-9]|2[.]5[0-9]|2[.]6[0-9]|2[.]7[0-9]|2[.]8[0-9]|2[.]9[0-9])(|[.-].+)|(2[.]361)"
      }
    ]
  },
  {
    "id": "core-2_370",
    "type": "core",
    "name": "core",
    "message": "XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-09-21/",
    "versions": [
      {
        "lastVersion": "2.369",
        "pattern": "(2[.]36[7-9])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1737",
    "type": "plugin",
    "name": "DotCi",
    "message": "RCE vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-1737",
    "versions": [
      {
        "lastVersion": "2.40.00",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1870",
    "type": "plugin",
    "name": "walti",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-1870",
    "versions": [
      {
        "lastVersion": "1.0.1",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1994",
    "type": "plugin",
    "name": "build-publisher",
    "message": "Missing permission check",
    "url": "https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-1994",
    "versions": [
      {
        "lastVersion": "1.22",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2001",
    "type": "plugin",
    "name": "extreme-feedback",
    "message": "Missing permission check",
    "url": "https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2001",
    "versions": [
      {
        "lastVersion": "1.7",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2051",
    "type": "plugin",
    "name": "security-inspector",
    "message": "CSRF vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2051",
    "versions": [
      {
        "lastVersion": "117.v6eecc36919c2",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2068",
    "type": "plugin",
    "name": "smalltest",
    "message": "Missing hostname validation",
    "url": "https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2068",
    "versions": [
      {
        "lastVersion": "1.0.4",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2069",
    "type": "plugin",
    "name": "view26",
    "message": "Missing hostname validation",
    "url": "https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2069",
    "versions": [
      {
        "lastVersion": "1.0.7",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2139",
    "type": "plugin",
    "name": "build-publisher",
    "message": "Path traversal and CSRF vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2139",
    "versions": [
      {
        "lastVersion": "1.22",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2169",
    "type": "plugin",
    "name": "rundeck",
    "message": "Missing webhook endpoint authorization",
    "url": "https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2169",
    "versions": [
      {
        "lastVersion": "3.6.11",
        "pattern": "([12]|3[.][01345]|3[.]6[.][12345679]|3[.]6[.]1[01])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2170",
    "type": "plugin",
    "name": "rundeck",
    "message": "Missing permission checks",
    "url": "https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2170",
    "versions": [
      {
        "lastVersion": "3.6.11",
        "pattern": "([12]|3[.][01345]|3[.]6[.][12345679]|3[.]6[.]1[01])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2237",
    "type": "plugin",
    "name": "ws-execution-manager",
    "message": "CSRF vulnerability and missing permission check allow capturing credentials",
    "url": "https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2237",
    "versions": [
      {
        "lastVersion": "10.0.3.503",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2243",
    "type": "plugin",
    "name": "bigpanda-jenkins",
    "message": "API key stored in plain text",
    "url": "https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2243",
    "versions": [
      {
        "lastVersion": "1.4.0",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2645",
    "type": "plugin",
    "name": "wildfly-deployer",
    "message": "Path traversal vulnerability allows reading arbitrary files",
    "url": "https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2645",
    "versions": [
      {
        "lastVersion": "1.0.2",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2708",
    "type": "plugin",
    "name": "scm-httpclient",
    "message": "CSRF vulnerability and missing permission check allow capturing credentials",
    "url": "https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2708",
    "versions": [
      {
        "lastVersion": "1.5",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2710",
    "type": "plugin",
    "name": "apprenda",
    "message": "Missing permission check allows enumerating credentials IDs",
    "url": "https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2710",
    "versions": [
      {
        "lastVersion": "2.2.0",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2737",
    "type": "plugin",
    "name": "cavisson-ns-nd-integration",
    "message": "CSRF vulnerability and missing permission check",
    "url": "https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2737",
    "versions": [
      {
        "lastVersion": "4.8.0.129",
        "pattern": "(4[.]6|4[.]8[.]0[.]129|4[.]8[.]0[.]77)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2751",
    "type": "plugin",
    "name": "cons3rt",
    "message": "CSRF vulnerability and missing permission checks allow capturing credentials",
    "url": "https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2751",
    "versions": [
      {
        "lastVersion": "1.0.0",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2752",
    "type": "plugin",
    "name": "cons3rt",
    "message": "Missing permission checks allow enumerating credentials IDs",
    "url": "https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2752",
    "versions": [
      {
        "lastVersion": "1.0.0",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2759",
    "type": "plugin",
    "name": "cons3rt",
    "message": "API token stored in plain text",
    "url": "https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2759",
    "versions": [
      {
        "lastVersion": "1.0.0",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2805",
    "type": "plugin",
    "name": "rqm-plugin",
    "message": "XXE vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2805",
    "versions": [
      {
        "lastVersion": "2.8",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2821",
    "type": "plugin",
    "name": "anchore-container-scanner",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2821",
    "versions": [
      {
        "lastVersion": "1.0.24",
        "pattern": "(1[.]0[.][0-9]|1[.]0[.]1[0-9]|1[.]0[.]2[0-4])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2832",
    "type": "plugin",
    "name": "compuware-common-configuration",
    "message": "XXE vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2832",
    "versions": [
      {
        "lastVersion": "1.0.14",
        "pattern": "(1[.]0[.]1[0-4]|1[.]0[.][2-9])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2858",
    "type": "plugin",
    "name": "cavisson-ns-nd-integration",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2858",
    "versions": [
      {
        "lastVersion": "4.8.0.146",
        "pattern": "(4[.]6|4[.]8[.]0[.]129|4[.]8[.]0[.]13[04]|4[.]8[.]0[.]14[236]|4[.]8[.]0[.]77)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2867",
    "type": "plugin",
    "name": "DotCi",
    "message": "Lack of authentication mechanism webhook",
    "url": "https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2867",
    "versions": [
      {
        "lastVersion": "2.40.00",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2884",
    "type": "plugin",
    "name": "DotCi",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2884",
    "versions": [
      {
        "lastVersion": "2.40.00",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2337",
    "type": "plugin",
    "name": "repo",
    "message": "XXE vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2337",
    "versions": [
      {
        "lastVersion": "1.15.0",
        "pattern": "(1[.][012356789]|1[.]1[0-5])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2480",
    "type": "plugin",
    "name": "s3explorer",
    "message": "AWS secrets displayed without masking",
    "url": "https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2480",
    "versions": [
      {
        "lastVersion": "1.0.8",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2551",
    "type": "plugin",
    "name": "nunit",
    "message": "Agent-to-controller security bypass vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2551",
    "versions": [
      {
        "lastVersion": "0.27",
        "pattern": "(0[.]1[1-9]|0[.]2[0-7])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2620",
    "type": "plugin",
    "name": "compuware-topaz-utilities",
    "message": "Agent-to-controller security bypass vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2620",
    "versions": [
      {
        "lastVersion": "1.0.8",
        "pattern": "(1[.]0[.][2-8])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2622",
    "type": "plugin",
    "name": "compuware-scm-downloader",
    "message": "Agent-to-controller security bypass vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2622",
    "versions": [
      {
        "lastVersion": "2.0.12",
        "pattern": "(1|2[.]0[.][0-9]|2[.]0[.]1[0-2])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2623",
    "type": "plugin",
    "name": "compuware-topaz-for-total-test",
    "message": "Missing permission checks allow enumerating credentials IDs",
    "url": "https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2623",
    "versions": [
      {
        "lastVersion": "2.4.10",
        "pattern": "(1|2[.][0-3]|2[.]4[.][1234578]|2[.]4[.]10)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2624",
    "type": "plugin",
    "name": "compuware-topaz-for-total-test",
    "message": "Agent-to-controller security bypass vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2624",
    "versions": [
      {
        "lastVersion": "2.4.8",
        "pattern": "(1|2[.][0-3]|2[.]4[.][1234578])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2625",
    "type": "plugin",
    "name": "compuware-topaz-for-total-test",
    "message": "XXE vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2625",
    "versions": [
      {
        "lastVersion": "2.4.8",
        "pattern": "(1|2[.][0-3]|2[.]4[.][1234578])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2627",
    "type": "plugin",
    "name": "compuware-xpediter-code-coverage",
    "message": "Agent-to-controller security bypass vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2627",
    "versions": [
      {
        "lastVersion": "1.0.7",
        "pattern": "(1[.]0[.][0-7])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2631",
    "type": "plugin",
    "name": "compuware-strobe-measurement",
    "message": "Missing permission check allows enumerating credentials IDs",
    "url": "https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2631",
    "versions": [
      {
        "lastVersion": "1.0.1",
        "pattern": "(1[.]0[.][01])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2791",
    "type": "plugin",
    "name": "job-import-plugin",
    "message": "Missing permission check allows enumerating credentials IDs",
    "url": "https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2791",
    "versions": [
      {
        "lastVersion": "3.5",
        "pattern": "([12]|3[.][0-5])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2797",
    "type": "plugin",
    "name": "custom-checkbox-parameter",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2797",
    "versions": [
      {
        "lastVersion": "1.4",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2824-1-script-security",
    "type": "plugin",
    "name": "script-security",
    "message": "Sandbox bypass vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2824%20(1)",
    "versions": [
      {
        "lastVersion": "1183.v774b_0b_0a_a_451",
        "pattern": "(1|1118|1125|113[18]|114[056]|1158|1172|1175[.]v4b_d517d6db_f0|1183)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2824-1-workflow-cps",
    "type": "plugin",
    "name": "workflow-cps",
    "message": "Sandbox bypass vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2824%20(1)",
    "versions": [
      {
        "lastVersion": "2802.v5ea_628154b_c2",
        "pattern": "([12]|2633|264[0468]|265[69]|2660|268[0236789]|2692|270[56]|2710|2725|2729[.]vea_17b_79ed57a_|2746[.]v0da_83a_332669|2759[.]v87459c4eea_ca_|2784|280[12])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2824-2-pipeline-groovy-lib",
    "type": "plugin",
    "name": "pipeline-groovy-lib",
    "message": "Sandbox bypass vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2824%20(2)",
    "versions": [
      {
        "lastVersion": "612.v84da_9c54906d",
        "pattern": "(589|59[18]|593[.]va_a_fc25d520e9|612[.]v84da_9c54906d)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2824-2-workflow-cps-global-lib",
    "type": "plugin",
    "name": "workflow-cps-global-lib",
    "message": "Sandbox bypass vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2824%20(2)",
    "versions": [
      {
        "lastVersion": "583.vf3b_454e43966",
        "pattern": "([12]|54[458]|552|56[146]|57[05]|58[13])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2828",
    "type": "plugin",
    "name": "pipeline-stage-view",
    "message": "CSRF protection for any URL can be bypassed",
    "url": "https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2828",
    "versions": [
      {
        "lastVersion": "2.26",
        "pattern": "(1|2[.][012345689]|2[.]1[0-9]|2[.]2[012356])(|[.-].+)|(2[.]24)"
      }
    ]
  },
  {
    "id": "SECURITY-2831",
    "type": "plugin",
    "name": "mercurial",
    "message": "Webhook endpoint discloses job names to unauthorized users",
    "url": "https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2831",
    "versions": [
      {
        "lastVersion": "1251.va_b_121f184902",
        "pattern": "([12]|1251)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2836",
    "type": "plugin",
    "name": "contrast-continuous-application-security",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2836",
    "versions": [
      {
        "lastVersion": "3.9",
        "pattern": "([12]|3[.][0-9])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2844",
    "type": "plugin",
    "name": "katalon",
    "message": "Agent-to-controller security bypass vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2844",
    "versions": [
      {
        "lastVersion": "1.0.32",
        "pattern": "(1[.]0[.]32)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2845-1",
    "type": "plugin",
    "name": "katalon",
    "message": "Missing permission checks allow capturing credentials",
    "url": "https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2845%20(1)",
    "versions": [
      {
        "lastVersion": "1.0.32",
        "pattern": "(1[.]0[.]32)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2845-2",
    "type": "plugin",
    "name": "katalon",
    "message": "CSRF vulnerability allows capturing credentials",
    "url": "https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2845%20(2)",
    "versions": [
      {
        "lastVersion": "1.0.33",
        "pattern": "(1[.]0[.]3[23])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2846",
    "type": "plugin",
    "name": "katalon",
    "message": "API keys stored in plain text",
    "url": "https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2846",
    "versions": [
      {
        "lastVersion": "1.0.32",
        "pattern": "(1[.]0[.]32)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2852",
    "type": "plugin",
    "name": "tuleap-git-branch-source",
    "message": "Lack of webhook authentication mechanism",
    "url": "https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2852",
    "versions": [
      {
        "lastVersion": "3.2.4",
        "pattern": "([12]|3[.][01]|3[.]2[.][0-4])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2863",
    "type": "plugin",
    "name": "xframium",
    "message": "Content-Security-Policy protection for user content disabled",
    "url": "https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2863",
    "versions": [
      {
        "lastVersion": "1.0.22",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2864",
    "type": "plugin",
    "name": "screenrecorder",
    "message": "Content-Security-Policy protection for user content disabled",
    "url": "https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2864",
    "versions": [
      {
        "lastVersion": "0.7",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2865",
    "type": "plugin",
    "name": "neuvector-vulnerability-scanner",
    "message": "Content-Security-Policy protection for user content disabled",
    "url": "https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2865",
    "versions": [
      {
        "lastVersion": "1.21",
        "pattern": "(1[.][0-9]|1[.]1[0-9]|1[.]2[01])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2866",
    "type": "plugin",
    "name": "fireline",
    "message": "Content-Security-Policy protection for user content can be disabled",
    "url": "https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2866",
    "versions": [
      {
        "lastVersion": "1.7.2",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2874",
    "type": "plugin",
    "name": "generic-webhook-trigger",
    "message": "Non-constant time webhook token comparison",
    "url": "https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2874",
    "versions": [
      {
        "lastVersion": "1.84.1",
        "pattern": "(0|1[.][0-9]|1[.]1[0-9]|1[.]2[0-9]|1[.]3[0-9]|1[.]4[0-9]|1[.]5[0-9]|1[.]6[0-9]|1[.]7[12456789]|1[.]8[0-3]|1[.]84[.]1)(|[.-].+)|(1[.]84)"
      }
    ]
  },
  {
    "id": "SECURITY-2877",
    "type": "plugin",
    "name": "gitlab-plugin",
    "message": "Non-constant time webhook token comparison",
    "url": "https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2877",
    "versions": [
      {
        "lastVersion": "1.5.35",
        "pattern": "(1[.][0-4]|1[.]5[.][0-9]|1[.]5[.]1[01239]|1[.]5[.]2[023456789]|1[.]5[.]3[0-5])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2880",
    "type": "plugin",
    "name": "pipeline-input-step",
    "message": "CSRF protection for any URL can be bypassed",
    "url": "https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2880",
    "versions": [
      {
        "lastVersion": "451.vf1a_a_4f405289",
        "pattern": "(2|427|44[6-8]|449[.]v77f0e8b_845c4|451)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2881",
    "type": "plugin",
    "name": "workflow-support",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2881",
    "versions": [
      {
        "lastVersion": "838.va_3a_087b_4055b",
        "pattern": "([1-3]|792|804|81[35789]|820|827[.]v7ef666c4d65c|83[38])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2094",
    "type": "plugin",
    "name": "reverse-proxy-auth-plugin",
    "message": "Password stored in plain text",
    "url": "https://www.jenkins.io/security/advisory/2022-11-15/#SECURITY-2094",
    "versions": [
      {
        "lastVersion": "1.7.3",
        "pattern": "(1[.][023456]|1[.]7[.][013])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2564",
    "type": "plugin",
    "name": "script-security",
    "message": "Whole-script approval vulnerable to SHA-1 collisions",
    "url": "https://www.jenkins.io/security/advisory/2022-11-15/#SECURITY-2564",
    "versions": [
      {
        "lastVersion": "1189.vb_a_b_7c8fd5fde",
        "pattern": "(1|1118|1125|113[18]|114[056]|1158|1172|1175[.]1177|1175[.]v4b_d517d6db_f0|118[349])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2802",
    "type": "plugin",
    "name": "bart",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-11-15/#SECURITY-2802",
    "versions": [
      {
        "lastVersion": "1.0.3",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2804",
    "type": "plugin",
    "name": "support-core",
    "message": "Incorrect permission checks",
    "url": "https://www.jenkins.io/security/advisory/2022-11-15/#SECURITY-2804",
    "versions": [
      {
        "lastVersion": "1206.v14049fa_b_d860",
        "pattern": "([12]|1124|1130|114[08]|1158|1162|117[24]|1195|1201[.]v8d1f54a_6ec7c|1204|1206[.]v14049fa_b_d860)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2842",
    "type": "plugin",
    "name": "config-rotator",
    "message": "Arbitrary file read vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-11-15/#SECURITY-2842",
    "versions": [
      {
        "lastVersion": "2.0.1",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2843",
    "type": "plugin",
    "name": "dockerhub-notification",
    "message": "Lack of authentication mechanism for webhook",
    "url": "https://www.jenkins.io/security/advisory/2022-11-15/#SECURITY-2843",
    "versions": [
      {
        "lastVersion": "2.6.2",
        "pattern": "(1|2[.][0-5]|2[.]6[.]1)(|[.-].+)|(2[.]6[.][02])"
      }
    ]
  },
  {
    "id": "SECURITY-2853",
    "type": "plugin",
    "name": "xpdev",
    "message": "Lack of authentication mechanism for webhook",
    "url": "https://www.jenkins.io/security/advisory/2022-11-15/#SECURITY-2853",
    "versions": [
      {
        "lastVersion": "1.0",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2857",
    "type": "plugin",
    "name": "loaderio-jenkins-plugin",
    "message": "Missing permission check allows enumerating credentials IDs",
    "url": "https://www.jenkins.io/security/advisory/2022-11-15/#SECURITY-2857",
    "versions": [
      {
        "lastVersion": "1.0.1",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2888",
    "type": "plugin",
    "name": "junit",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-11-15/#SECURITY-2888",
    "versions": [
      {
        "lastVersion": "1159.v0b_396e1e07dd",
        "pattern": "(1|1119[.]1121|1119[.]va_a_5e9068da_d7|1143[.]v8d9a_e3355270|1144|115[0369])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2910-1",
    "type": "plugin",
    "name": "cavisson-ns-nd-integration",
    "message": "SSL/TLS certificate validation globally and unconditionally disabled",
    "url": "https://www.jenkins.io/security/advisory/2022-11-15/#SECURITY-2910%20(1)",
    "versions": [
      {
        "lastVersion": "4.8.0.143",
        "pattern": "(4[.]6|4[.]8[.]0[.]129|4[.]8[.]0[.]13[04]|4[.]8[.]0[.]14[23]|4[.]8[.]0[.]77)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2910-2",
    "type": "plugin",
    "name": "cavisson-ns-nd-integration",
    "message": "SSL/TLS certificate validation unconditionally disabled",
    "url": "https://www.jenkins.io/security/advisory/2022-11-15/#SECURITY-2910%20(2)",
    "versions": [
      {
        "lastVersion": "4.8.0.149",
        "pattern": "(4[.]6|4[.]8[.]0[.]129|4[.]8[.]0[.]13[04]|4[.]8[.]0[.]14[23678]|4[.]8[.]0[.]77)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2912",
    "type": "plugin",
    "name": "cavisson-ns-nd-integration",
    "message": "Passwords stored in plain text",
    "url": "https://www.jenkins.io/security/advisory/2022-11-15/#SECURITY-2912",
    "versions": [
      {
        "lastVersion": "4.8.0.143",
        "pattern": "(4[.]6|4[.]8[.]0[.]129|4[.]8[.]0[.]13[04]|4[.]8[.]0[.]14[23]|4[.]8[.]0[.]77)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2920",
    "type": "plugin",
    "name": "delete-log-plugin",
    "message": "CSRF vulnerability and missing permission check",
    "url": "https://www.jenkins.io/security/advisory/2022-11-15/#SECURITY-2920",
    "versions": [
      {
        "lastVersion": "1.0",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2921",
    "type": "plugin",
    "name": "cccc",
    "message": "XXE vulnerability on agents",
    "url": "https://www.jenkins.io/security/advisory/2022-11-15/#SECURITY-2921",
    "versions": [
      {
        "lastVersion": "0.6",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2927",
    "type": "plugin",
    "name": "sourcemonitor",
    "message": "XXE vulnerability on agents",
    "url": "https://www.jenkins.io/security/advisory/2022-11-15/#SECURITY-2927",
    "versions": [
      {
        "lastVersion": "0.2",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2937",
    "type": "plugin",
    "name": "osf-builder-suite-xml-linter",
    "message": "XXE vulnerability on agents",
    "url": "https://www.jenkins.io/security/advisory/2022-11-15/#SECURITY-2937",
    "versions": [
      {
        "lastVersion": "1.0.2",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2938",
    "type": "plugin",
    "name": "cluster-stats",
    "message": "CSRF vulnerability and missing permission check",
    "url": "https://www.jenkins.io/security/advisory/2022-11-15/#SECURITY-2938",
    "versions": [
      {
        "lastVersion": "0.4.6",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2941",
    "type": "plugin",
    "name": "japex",
    "message": "XXE vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-11-15/#SECURITY-2941",
    "versions": [
      {
        "lastVersion": "1.7",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2946",
    "type": "plugin",
    "name": "naginator",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-11-15/#SECURITY-2946",
    "versions": [
      {
        "lastVersion": "1.18.1",
        "pattern": "(1[.]1[0-7]|1[.]18[.]1|1[.][6-9])(|[.-].+)|(1[.]18)"
      }
    ]
  },
  {
    "id": "SECURITY-2947",
    "type": "plugin",
    "name": "associated-files",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-11-15/#SECURITY-2947",
    "versions": [
      {
        "lastVersion": "0.2.1",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2948",
    "type": "plugin",
    "name": "pipeline-utility-steps",
    "message": "Remote code execution vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-11-15/#SECURITY-2948",
    "versions": [
      {
        "lastVersion": "2.13.0",
        "pattern": "(1|2[.][0-9]|2[.]1[0-2]|2[.]13[.]0)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2949",
    "type": "plugin",
    "name": "pipeline-utility-steps",
    "message": "Arbitrary file read vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-11-15/#SECURITY-2949",
    "versions": [
      {
        "lastVersion": "2.13.1",
        "pattern": "(1|2[.][0-9]|2[.]1[0-2]|2[.]13[.][01])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-766",
    "type": "plugin",
    "name": "violations",
    "message": "XXE vulnerability on agents",
    "url": "https://www.jenkins.io/security/advisory/2022-11-15/#SECURITY-766",
    "versions": [
      {
        "lastVersion": "0.7.11",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-1002",
    "type": "plugin",
    "name": "sonar-gerrit",
    "message": "CSRF vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-12-07/#SECURITY-1002",
    "versions": [
      {
        "lastVersion": "377.v8f3808963dc5",
        "pattern": "([12]|3[4-6][0-9]|37[0-7])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2661",
    "type": "plugin",
    "name": "gitea",
    "message": "Improper credentials masking",
    "url": "https://www.jenkins.io/security/advisory/2022-12-07/#SECURITY-2661",
    "versions": [
      {
        "lastVersion": "1.4.4",
        "pattern": "(1[.][0-3]|1[.]4[.]0[-][-]rc182|1[.]4[.][1-4])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2810",
    "type": "plugin",
    "name": "custom-build-properties",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-12-07/#SECURITY-2810",
    "versions": [
      {
        "lastVersion": "2.79.vc095ccc85094",
        "pattern": "(1|2[.]7[39])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2814",
    "type": "plugin",
    "name": "spring-config",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-12-07/#SECURITY-2814",
    "versions": [
      {
        "lastVersion": "2.0.0",
        "pattern": "(1|2[.]0[.]0)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2869",
    "type": "plugin",
    "name": "checkmarx",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-12-07/#SECURITY-2869",
    "versions": [
      {
        "lastVersion": "2022.3.3",
        "pattern": "(202[01]|2022[.][1-3]|[78])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2940",
    "type": "plugin",
    "name": "plot",
    "message": "XXE vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-12-07/#SECURITY-2940",
    "versions": [
      {
        "lastVersion": "2.1.11",
        "pattern": "(1|2[.]0|2[.]1[.][0-9]|2[.]1[.]1[01])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2967",
    "type": "plugin",
    "name": "google-login",
    "message": "Open redirect vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2022-12-07/#SECURITY-2967",
    "versions": [
      {
        "lastVersion": "1.6",
        "pattern": "(1[.][4-6])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2091",
    "type": "plugin",
    "name": "testquality-updater",
    "message": "Password stored in plain text",
    "url": "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2091",
    "versions": [
      {
        "lastVersion": "1.3",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2137",
    "type": "plugin",
    "name": "gerrit-trigger",
    "message": "CSRF vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2137",
    "versions": [
      {
        "lastVersion": "2.38.0",
        "pattern": "(2[.]1[0-9]|2[.]2[0-9]|2[.][3-9]|2[.]3[0-7]|2[.]38[.]0)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2292",
    "type": "plugin",
    "name": "mstest",
    "message": "XXE vulnerability on agents",
    "url": "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2292",
    "versions": [
      {
        "lastVersion": "1.0.0",
        "pattern": "(0|1[.]0[.]0)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2709",
    "type": "plugin",
    "name": "visualexpert",
    "message": "Path traversal vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2709",
    "versions": [
      {
        "lastVersion": "2.0",
        "pattern": "(1|2[.]0)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2741",
    "type": "plugin",
    "name": "TestComplete",
    "message": "XXE vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2741",
    "versions": [
      {
        "lastVersion": "2.8.1",
        "pattern": "(1|2[.][0-8])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2745",
    "type": "plugin",
    "name": "bearychat",
    "message": "CSRF vulnerability and missing permission check",
    "url": "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2745",
    "versions": [
      {
        "lastVersion": "3.0.2",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2767",
    "type": "plugin",
    "name": "github-pr-coverage-status",
    "message": "Tokens and password stored in plain text",
    "url": "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2767",
    "versions": [
      {
        "lastVersion": "2.2.0",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2772-1",
    "type": "plugin",
    "name": "macstadium-orka",
    "message": "Missing permission checks allow enumerating credentials IDs",
    "url": "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2772%20(1)",
    "versions": [
      {
        "lastVersion": "1.31",
        "pattern": "(1[.][0-9]|1[.]1[023456789]|1[.]2[012356789]|1[.]3[01])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2772-2",
    "type": "plugin",
    "name": "macstadium-orka",
    "message": "CSRF vulnerability and missing permission checks allow capturing credentials",
    "url": "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2772%20(2)",
    "versions": [
      {
        "lastVersion": "1.31",
        "pattern": "(1[.][0-9]|1[.]1[023456789]|1[.]2[012356789]|1[.]3[01])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2774",
    "type": "plugin",
    "name": "jira-steps",
    "message": "Keys stored in plain text",
    "url": "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2774",
    "versions": [
      {
        "lastVersion": "2.0.165.v8846cf59f3db",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2778",
    "type": "plugin",
    "name": "rabbitmq-consumer",
    "message": "CSRF vulnerability and missing permission check",
    "url": "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2778",
    "versions": [
      {
        "lastVersion": "2.8",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2786",
    "type": "plugin",
    "name": "jira-steps",
    "message": "CSRF vulnerability and missing permission checks",
    "url": "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2786",
    "versions": [
      {
        "lastVersion": "2.0.165.v8846cf59f3db",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2787",
    "type": "plugin",
    "name": "view-cloner",
    "message": "Passwords stored in plain text",
    "url": "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2787",
    "versions": [
      {
        "lastVersion": "1.1",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2789-1",
    "type": "plugin",
    "name": "ghprb",
    "message": "Missing permission check allows enumerating credentials IDs",
    "url": "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2789%20(1)",
    "versions": [
      {
        "lastVersion": "1.42.2",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2789-2",
    "type": "plugin",
    "name": "ghprb",
    "message": "CSRF vulnerability and missing permission checks",
    "url": "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2789%20(2)",
    "versions": [
      {
        "lastVersion": "1.42.2",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2800",
    "type": "plugin",
    "name": "testquality-updater",
    "message": "CSRF vulnerability and missing permission check",
    "url": "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2800",
    "versions": [
      {
        "lastVersion": "1.3",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2803",
    "type": "plugin",
    "name": "cisco-spark-notifier",
    "message": "Missing permission checks allow enumerating credentials IDs",
    "url": "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2803",
    "versions": [
      {
        "lastVersion": "1.1.1",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2973-1",
    "type": "plugin",
    "name": "semantic-versioning-plugin",
    "message": "Agent-to-controller security bypass",
    "url": "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2973%20(1)",
    "versions": [
      {
        "lastVersion": "1.14",
        "pattern": "(1[.][02346789]|1[.]1[034])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2973-2",
    "type": "plugin",
    "name": "semantic-versioning-plugin",
    "message": "XXE vulnerability on agents",
    "url": "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2973%20(2)",
    "versions": [
      {
        "lastVersion": "1.14",
        "pattern": "(1[.][02346789]|1[.]1[034])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2978",
    "type": "plugin",
    "name": "oic-auth",
    "message": "Session fixation vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2978",
    "versions": [
      {
        "lastVersion": "2.4",
        "pattern": "(1|2[.][0-4])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2980",
    "type": "plugin",
    "name": "azure-ad",
    "message": "Session fixation vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2980",
    "versions": [
      {
        "lastVersion": "303.va_91ef20ee49f",
        "pattern": "([01]|146|15[0234578]|16[4578]|17[012345789]|18[034589]|19[0145]|21[38]|23[34]|241|267|30[38])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2981",
    "type": "plugin",
    "name": "bitbucket-oauth",
    "message": "CSRF vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2981",
    "versions": [
      {
        "lastVersion": "0.12",
        "pattern": "(0[.][1-9]|0[.]1[0-2])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2982",
    "type": "plugin",
    "name": "bitbucket-oauth",
    "message": "Session fixation vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2982",
    "versions": [
      {
        "lastVersion": "0.12",
        "pattern": "(0[.][1-9]|0[.]1[0-2])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2985",
    "type": "plugin",
    "name": "pwauth",
    "message": "Path traversal vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2985",
    "versions": [
      {
        "lastVersion": "0.4",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2986",
    "type": "plugin",
    "name": "keycloak",
    "message": "CSRF vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2986",
    "versions": [
      {
        "lastVersion": "2.3.0",
        "pattern": "(2[.][0-2]|2[.]3[.]0)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2987",
    "type": "plugin",
    "name": "keycloak",
    "message": "Session fixation vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2987",
    "versions": [
      {
        "lastVersion": "2.3.0",
        "pattern": "(2[.][0-2]|2[.]3[.]0)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2995",
    "type": "plugin",
    "name": "openid",
    "message": "CSRF vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2995",
    "versions": [
      {
        "lastVersion": "2.4",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2996",
    "type": "plugin",
    "name": "openid",
    "message": "Session fixation vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2996",
    "versions": [
      {
        "lastVersion": "2.4",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2997",
    "type": "plugin",
    "name": "openid",
    "message": "Open redirect vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2997",
    "versions": [
      {
        "lastVersion": "2.4",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-3016",
    "type": "plugin",
    "name": "script-security",
    "message": "Sandbox bypass vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-3016",
    "versions": [
      {
        "lastVersion": "1228.vd93135a_2fb_25",
        "pattern": "(1|1118|1125|113[18]|114[056]|1158|1172|1175[.]117[79]|1175[.]v4b_d517d6db_f0|118[349]|1190|1209|1218|1228)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-3022",
    "type": "plugin",
    "name": "kubernetes-credentials-provider",
    "message": "Exposure of system-scoped Kubernetes credentials",
    "url": "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-3022",
    "versions": [
      {
        "lastVersion": "1.208.v128ee9800c04",
        "pattern": "(0|1[.]19[69]|1[.]20[168])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1756",
    "type": "plugin",
    "name": "azure-credentials",
    "message": "CSRF vulnerability and missing permission checks",
    "url": "https://www.jenkins.io/security/advisory/2023-02-15/#SECURITY-1756",
    "versions": [
      {
        "lastVersion": "253.v887e0f9e898b",
        "pattern": "([1-4]|177|18[0129]|19[0678]|216|242|25[23])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-1757",
    "type": "plugin",
    "name": "azure-credentials",
    "message": "Missing permission checks allow enumerating credentials IDs",
    "url": "https://www.jenkins.io/security/advisory/2023-02-15/#SECURITY-1757",
    "versions": [
      {
        "lastVersion": "253.v887e0f9e898b",
        "pattern": "([1-4]|177|18[0129]|19[0678]|216|242|25[23])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2793-1",
    "type": "plugin",
    "name": "synopsys-coverity",
    "message": "Missing permission checks allow enumerating credentials IDs",
    "url": "https://www.jenkins.io/security/advisory/2023-02-15/#SECURITY-2793%20(1)",
    "versions": [
      {
        "lastVersion": "3.0.2",
        "pattern": "([12]|3[.]0[.][0-2])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2793-2",
    "type": "plugin",
    "name": "synopsys-coverity",
    "message": "CSRF vulnerability and missing permission checks allow capturing credentials",
    "url": "https://www.jenkins.io/security/advisory/2023-02-15/#SECURITY-2793%20(2)",
    "versions": [
      {
        "lastVersion": "3.0.2",
        "pattern": "([12]|3[.]0[.][0-2])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2931",
    "type": "plugin",
    "name": "email-ext",
    "message": "XSS vulnerability in bundled email templates",
    "url": "https://www.jenkins.io/security/advisory/2023-02-15/#SECURITY-2931",
    "versions": [
      {
        "lastVersion": "2.93",
        "pattern": "(2[.]1[012345689]|2[.]2[01245789]|2[.]3[0-9]|2[.]4[0-7]|2[.]5[0-9]|2[.]6[012345689]|2[.]7[1-9]|2[.]8[0-8]|2[.]89[.]1|2[.]9[0-2])(|[.-].+)|(2[.]89|2[.]93)"
      }
    ]
  },
  {
    "id": "SECURITY-2934",
    "type": "plugin",
    "name": "email-ext",
    "message": "Stored XSS vulnerability in custom email templates",
    "url": "https://www.jenkins.io/security/advisory/2023-02-15/#SECURITY-2934",
    "versions": [
      {
        "lastVersion": "2.93",
        "pattern": "(2[.]1[012345689]|2[.]2[01245789]|2[.]3[0-9]|2[.]4[0-7]|2[.]5[0-9]|2[.]6[012345689]|2[.]7[1-9]|2[.]8[0-8]|2[.]89[.]1|2[.]9[0-2])(|[.-].+)|(2[.]89|2[.]93)"
      }
    ]
  },
  {
    "id": "SECURITY-2939",
    "type": "plugin",
    "name": "email-ext",
    "message": "Script Security sandbox bypass vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2023-02-15/#SECURITY-2939",
    "versions": [
      {
        "lastVersion": "2.93",
        "pattern": "(2[.]1[012345689]|2[.]2[01245789]|2[.]3[0-9]|2[.]4[0-7]|2[.]5[0-9]|2[.]6[012345689]|2[.]7[1-9]|2[.]8[0-8]|2[.]89[.]1|2[.]9[0-2])(|[.-].+)|(2[.]89|2[.]93)"
      }
    ]
  },
  {
    "id": "SECURITY-3019",
    "type": "plugin",
    "name": "pipeline-build-step",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2023-02-15/#SECURITY-3019",
    "versions": [
      {
        "lastVersion": "2.18",
        "pattern": "(2[.][0-9]|2[.]1[0-7])(|[.-].+)|(2[.]18)"
      }
    ]
  },
  {
    "id": "SECURITY-3032",
    "type": "plugin",
    "name": "junit",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2023-02-15/#SECURITY-3032",
    "versions": [
      {
        "lastVersion": "1166.va_436e268e972",
        "pattern": "(1|1119[.]112[12]|1119[.]va_a_5e9068da_d7|114[34]|115[0369]|1160|1166[.]va_436e268e972)(|[.-].+)"
      }
    ]
  },
  {
    "id": "core-2_394",
    "type": "core",
    "name": "core",
    "message": "Multiple security vulnerabilities in Jenkins 2.393 and earlier, LTS 2.375.3 and earlier",
    "url": "https://www.jenkins.io/security/advisory/2023-03-08/",
    "versions": [
      {
        "lastVersion": "2.393",
        "pattern": "(1|2[.][0-9]|2[.]1[0-9]|2[.]10[0-9]|2[.]11[0-9]|2[.]12[0-9]|2[.]13[0-8]|2[.]14[0-9]|2[.]15[0-9]|2[.]16[0-9]|2[.]17[0-9]|2[.]18[012345679]|2[.]19[0-9]|2[.]2[0-9]|2[.]20[0-9]|2[.]21[012345789]|2[.]22[0-9]|2[.]23[0-9]|2[.]24[0-9]|2[.]25[0-9]|2[.]26[0-9]|2[.]27[0-9]|2[.]28[0-9]|2[.]29[0-9]|2[.]3[0-9]|2[.]30[0-9]|2[.]31[1-9]|2[.]32[0-9]|2[.]33[0-9]|2[.]34[0-9]|2[.]35[0456789]|2[.]36[0-9]|2[.]37[012346789]|2[.]38[012345689]|2[.]39[0-3]|2[.]4[0-9]|2[.]5[0-9]|2[.]6[0-9]|2[.]7[0-9]|2[.]8[0-9]|2[.]9[0-9])(|[.-].+)|(2[.]375|2[.]387)"
      },
      {
        "lastVersion": "LTS 2.375.3",
        "pattern": "(1|2[.]107|2[.]121|2[.]138|2[.]150|2[.]164|2[.]176|2[.]19|2[.]190|2[.]204|2[.]222|2[.]235|2[.]249|2[.]263|2[.]277|2[.]289|2[.]303|2[.]319|2[.]32|2[.]332|2[.]346|2[.]361|2[.]375[.][1-3]|2[.]46|2[.]60|2[.]7|2[.]73|2[.]89)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2809",
    "type": "plugin",
    "name": "cppcheck",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2023-03-21/#SECURITY-2809",
    "versions": [
      {
        "lastVersion": "1.26",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2813",
    "type": "plugin",
    "name": "mashup-portlets-plugin",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2023-03-21/#SECURITY-2813",
    "versions": [
      {
        "lastVersion": "1.1.2",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2885",
    "type": "plugin",
    "name": "pipeline-aggregator-view",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2023-03-21/#SECURITY-2885",
    "versions": [
      {
        "lastVersion": "1.13",
        "pattern": "(1[.][0-9]|1[.]1[1-3])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2925",
    "type": "plugin",
    "name": "crap4j",
    "message": "XXE vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2023-03-21/#SECURITY-2925",
    "versions": [
      {
        "lastVersion": "0.9",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2926",
    "type": "plugin",
    "name": "vs-code-metrics",
    "message": "XXE vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2023-03-21/#SECURITY-2926",
    "versions": [
      {
        "lastVersion": "1.7",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2928",
    "type": "plugin",
    "name": "perfpublisher",
    "message": "XXE vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2023-03-21/#SECURITY-2928",
    "versions": [
      {
        "lastVersion": "8.09",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2930",
    "type": "plugin",
    "name": "absint-a3",
    "message": "XXE vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2023-03-21/#SECURITY-2930",
    "versions": [
      {
        "lastVersion": "1.1.0",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2942",
    "type": "plugin",
    "name": "phabricator-plugin",
    "message": "XXE vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2023-03-21/#SECURITY-2942",
    "versions": [
      {
        "lastVersion": "2.1.5",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2956",
    "type": "plugin",
    "name": "remote-jobs-view-plugin",
    "message": "XXE vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2023-03-21/#SECURITY-2956",
    "versions": [
      {
        "lastVersion": "0.0.3",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2963",
    "type": "plugin",
    "name": "convert-to-pipeline",
    "message": "CSRF vulnerability results in RCE",
    "url": "https://www.jenkins.io/security/advisory/2023-03-21/#SECURITY-2963",
    "versions": [
      {
        "lastVersion": "1.0",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2966",
    "type": "plugin",
    "name": "convert-to-pipeline",
    "message": "Command injection vulnerability results in RCE",
    "url": "https://www.jenkins.io/security/advisory/2023-03-21/#SECURITY-2966",
    "versions": [
      {
        "lastVersion": "1.0",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-3053",
    "type": "plugin",
    "name": "role-strategy",
    "message": "Incorrect permission checks",
    "url": "https://www.jenkins.io/security/advisory/2023-03-21/#SECURITY-3053",
    "versions": [
      {
        "lastVersion": "587.v2872c41fa_e51",
        "pattern": "([1-3]|48[348]|50[168]|510|52[16]|530|54[68]|55[25]|56[129]|575|584|587[.]v2872c41fa_e51)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-3061",
    "type": "plugin",
    "name": "jacoco",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2023-03-21/#SECURITY-3061",
    "versions": [
      {
        "lastVersion": "3.3.2",
        "pattern": "([12]|3[.][0-2]|3[.]3[.][01])(|[.-].+)|(3[.]3[.]2)"
      }
    ]
  },
  {
    "id": "SECURITY-3067-1",
    "type": "plugin",
    "name": "octoperf",
    "message": "CSRF vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2023-03-21/#SECURITY-3067%20(1)",
    "versions": [
      {
        "lastVersion": "4.5.0",
        "pattern": "([1-3]|4[.][0-4]|4[.]5[.]0)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-3067-2",
    "type": "plugin",
    "name": "octoperf",
    "message": "Missing permission check",
    "url": "https://www.jenkins.io/security/advisory/2023-03-21/#SECURITY-3067%20(2)",
    "versions": [
      {
        "lastVersion": "4.5.1",
        "pattern": "([1-3]|4[.][0-4]|4[.]5[.][01])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-3067-3",
    "type": "plugin",
    "name": "octoperf",
    "message": "Missing permission check allows enumerating credentials IDs",
    "url": "https://www.jenkins.io/security/advisory/2023-03-21/#SECURITY-3067%20(3)",
    "versions": [
      {
        "lastVersion": "4.5.2",
        "pattern": "([1-3]|4[.][0-4]|4[.]5[.][0-2])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-3067-4",
    "type": "plugin",
    "name": "octoperf",
    "message": "CSRF vulnerability and missing permission checks",
    "url": "https://www.jenkins.io/security/advisory/2023-03-21/#SECURITY-3067%20(4)",
    "versions": [
      {
        "lastVersion": "4.5.2",
        "pattern": "([1-3]|4[.][0-4]|4[.]5[.][0-2])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2837",
    "type": "plugin",
    "name": "thycotic-secret-server",
    "message": "Missing permission check allows enumerating credentials IDs",
    "url": "https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-2837",
    "versions": [
      {
        "lastVersion": "1.0.2",
        "pattern": "(1[.]0[.][0-2])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2840",
    "type": "plugin",
    "name": "image-tag-parameter",
    "message": "Disabled SSL/TLS certificate validation for existing configurations",
    "url": "https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-2840",
    "versions": [
      {
        "lastVersion": "2.0",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2841",
    "type": "plugin",
    "name": "neuvector-vulnerability-scanner",
    "message": "SSL/TLS certificate validation unconditionally disabled",
    "url": "https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-2841",
    "versions": [
      {
        "lastVersion": "1.22",
        "pattern": "(1)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2849",
    "type": "plugin",
    "name": "quayio-trigger",
    "message": "Lack of authentication mechanism webhook",
    "url": "https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-2849",
    "versions": [
      {
        "lastVersion": "0.1",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2850",
    "type": "plugin",
    "name": "quayio-trigger",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-2850",
    "versions": [
      {
        "lastVersion": "0.1",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2851",
    "type": "plugin",
    "name": "spoonscript",
    "message": "Lack of authentication mechanism webhook",
    "url": "https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-2851",
    "versions": [
      {
        "lastVersion": "1.3",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2872",
    "type": "plugin",
    "name": "assembla-merge-request-builder",
    "message": "Lack of authentication mechanism webhook",
    "url": "https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-2872",
    "versions": [
      {
        "lastVersion": "1.1.13",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2873",
    "type": "plugin",
    "name": "fogbugz",
    "message": "Lack of authentication mechanism webhook",
    "url": "https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-2873",
    "versions": [
      {
        "lastVersion": "2.2.17",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2944",
    "type": "plugin",
    "name": "consul-kv-builder",
    "message": "Token stored and displayed in plain text",
    "url": "https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-2944",
    "versions": [
      {
        "lastVersion": "2.0.13",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2945",
    "type": "plugin",
    "name": "reportportal",
    "message": "Tokens stored and displayed in plain text",
    "url": "https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-2945",
    "versions": [
      {
        "lastVersion": "0.5",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2950",
    "type": "plugin",
    "name": "reportportal",
    "message": "CSRF vulnerability and missing permission check",
    "url": "https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-2950",
    "versions": [
      {
        "lastVersion": "0.5",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2992",
    "type": "plugin",
    "name": "wso2id-oauth",
    "message": "Client secret stored and displayed in plain text",
    "url": "https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-2992",
    "versions": [
      {
        "lastVersion": "1.0",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-3013",
    "type": "plugin",
    "name": "lucene-search",
    "message": "CSRF vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-3013",
    "versions": [
      {
        "lastVersion": "387.v938a_ecb_f7fe9",
        "pattern": "([1-5]|358|370|38[79])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-3075-azure-keyvault",
    "type": "plugin",
    "name": "azure-keyvault",
    "message": "Improper masking of credentials",
    "url": "https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-3075",
    "versions": [
      {
        "lastVersion": "187.va_cd5fecd198a_",
        "pattern": "([0-2]|11[69]|12[012369]|13[16]|14[36]|15[49]|16[01]|18[57])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-3075-kubernetes",
    "type": "plugin",
    "name": "kubernetes",
    "message": "Improper masking of credentials",
    "url": "https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-3075",
    "versions": [
      {
        "lastVersion": "3909.v1f2c633e8590",
        "pattern": "([01]|3538|3546|3568|3578|3580|3600|3622|3636|3646|3651|3663|3670[.]v6ca_059233222|369[07]|370[46]|3718|3724|3734|3743|3794|380[02]|383[479]|384[25]|3852|3872|3883|389[36]|3900[.]va_dce992317b_4|3909)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-3075-thycotic-devops-secrets-vault",
    "type": "plugin",
    "name": "thycotic-devops-secrets-vault",
    "message": "Improper masking of credentials",
    "url": "https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-3075",
    "versions": [
      {
        "lastVersion": "1.0.0",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2196",
    "type": "plugin",
    "name": "pipeline-utility-steps",
    "message": "Arbitrary file write vulnerability on agents",
    "url": "https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-2196",
    "versions": [
      {
        "lastVersion": "2.15.2",
        "pattern": "(1|2[.][0-9]|2[.]1[0-4]|2[.]15[.][0-2])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2855-1",
    "type": "plugin",
    "name": "azure-vm-agents",
    "message": "Missing permission check allows enumerating credentials IDs",
    "url": "https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-2855%20(1)",
    "versions": [
      {
        "lastVersion": "852.v8d35f0960a_43",
        "pattern": "([01]|759|76[0134568]|77[45789]|78[01239]|79[34579]|80[1234568]|81[0356]|82[245]|84[256]|85[12])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2855-2",
    "type": "plugin",
    "name": "azure-vm-agents",
    "message": "CSRF vulnerability and missing permission checks",
    "url": "https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-2855%20(2)",
    "versions": [
      {
        "lastVersion": "852.v8d35f0960a_43",
        "pattern": "([01]|759|76[0134568]|77[45789]|78[01239]|79[34579]|80[1234568]|81[0356]|82[245]|84[256]|85[12])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2892",
    "type": "plugin",
    "name": "TestComplete",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-2892",
    "versions": [
      {
        "lastVersion": "2.9.1",
        "pattern": "(1|2[.][0-8]|2[.]9[.]1)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2903",
    "type": "plugin",
    "name": "loadcomplete",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-2903",
    "versions": [
      {
        "lastVersion": "1.0",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2962",
    "type": "plugin",
    "name": "cavisson-ns-nd-integration",
    "message": "Credentials displayed without masking",
    "url": "https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-2962",
    "versions": [
      {
        "lastVersion": "4.8.0.149",
        "pattern": "(4[.][68])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2990",
    "type": "plugin",
    "name": "wso2id-oauth",
    "message": "CSRF vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-2990",
    "versions": [
      {
        "lastVersion": "1.0",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2991",
    "type": "plugin",
    "name": "wso2id-oauth",
    "message": "Session fixation vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-2991",
    "versions": [
      {
        "lastVersion": "1.0",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2993",
    "type": "plugin",
    "name": "miniorange-saml-sp",
    "message": "CSRF vulnerability and missing permission checks allow XXE",
    "url": "https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-2993",
    "versions": [
      {
        "lastVersion": "2.0.2",
        "pattern": "(1|2[.]0)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2994",
    "type": "plugin",
    "name": "miniorange-saml-sp",
    "message": "CSRF vulnerability and missing permission check",
    "url": "https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-2994",
    "versions": [
      {
        "lastVersion": "2.0.0",
        "pattern": "(1|2[.]0[.]0)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-3000",
    "type": "plugin",
    "name": "cas-plugin",
    "message": "Session fixation vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-3000",
    "versions": [
      {
        "lastVersion": "1.6.2",
        "pattern": "(1[.][0-5]|1[.]6[.][0-2])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-3001-1",
    "type": "plugin",
    "name": "miniorange-saml-sp",
    "message": "Missing hostname validation",
    "url": "https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-3001%20(1)",
    "versions": [
      {
        "lastVersion": "2.0.2",
        "pattern": "(1|2[.]0)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-3001-2",
    "type": "plugin",
    "name": "miniorange-saml-sp",
    "message": "SSL/TLS certificate validation unconditionally disabled",
    "url": "https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-3001%20(2)",
    "versions": [
      {
        "lastVersion": "2.1.0",
        "pattern": "(1|2[.][01])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-3002",
    "type": "plugin",
    "name": "reverse-proxy-auth-plugin",
    "message": "CSRF vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-3002",
    "versions": [
      {
        "lastVersion": "1.7.4",
        "pattern": "(1[.][023456]|1[.]7[.][0134])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-3017",
    "type": "plugin",
    "name": "ansible",
    "message": "Secrets stored and displayed in plain text",
    "url": "https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-3017",
    "versions": [
      {
        "lastVersion": "204.v8191fd551eb_f",
        "pattern": "([01]|14[68]|174|204)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-3042",
    "type": "plugin",
    "name": "workflow-job",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-3042",
    "versions": [
      {
        "lastVersion": "1292.v27d8cc3e2602",
        "pattern": "([12]|1145|1156|1167|1174|118[01269]|120[36]|1207[.]ve6191ff089f8|122[69]|123[269]|124[69]|1254|1268|128[24]|1289[.]vd1c337fd5354|1292)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-3046",
    "type": "plugin",
    "name": "ldap",
    "message": "CSRF vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-3046",
    "versions": [
      {
        "lastVersion": "673.v034ec70ec2b_b_",
        "pattern": "(1|2[.][0-9]|2[.]1[12]|659|671[.]v2a_9192a_7419d|673)(|[.-].+)|(2[.]10)"
      }
    ]
  },
  {
    "id": "SECURITY-3047",
    "type": "plugin",
    "name": "testng-plugin",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-3047",
    "versions": [
      {
        "lastVersion": "730.v4c5283037693",
        "pattern": "([01]|55[245]|700|730[.]v4c5283037693)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-3077",
    "type": "plugin",
    "name": "hashicorp-vault-plugin",
    "message": "Improper masking of credentials",
    "url": "https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-3077",
    "versions": [
      {
        "lastVersion": "360.v0a_1c04cf807d",
        "pattern": "([1-3]|336|35[14569]|360)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-3083",
    "type": "plugin",
    "name": "tag-profiler",
    "message": "CSRF vulnerability and missing permission checks",
    "url": "https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-3083",
    "versions": [
      {
        "lastVersion": "0.2",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-3088-1",
    "type": "plugin",
    "name": "email-ext",
    "message": "Missing permission check",
    "url": "https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-3088%20(1)",
    "versions": [
      {
        "lastVersion": "2.96",
        "pattern": "(2[.]1[012345689]|2[.]2[01245789]|2[.]3[0-9]|2[.]4[0-7]|2[.]5[0-9]|2[.]6[012345689]|2[.]7[1-9]|2[.]8[0-8]|2[.]89[.]0[.]1|2[.]89[.]1|2[.]9[0-5])(|[.-].+)|(2[.]89|2[.]96)"
      }
    ]
  },
  {
    "id": "SECURITY-3088-2",
    "type": "plugin",
    "name": "email-ext",
    "message": "CSRF vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-3088%20(2)",
    "versions": [
      {
        "lastVersion": "2.96",
        "pattern": "(2[.]1[012345689]|2[.]2[01245789]|2[.]3[0-9]|2[.]4[0-7]|2[.]5[0-9]|2[.]6[012345689]|2[.]7[1-9]|2[.]8[0-8]|2[.]89[.]0[.]1|2[.]89[.]1|2[.]9[0-5])(|[.-].+)|(2[.]89|2[.]96)"
      }
    ]
  },
  {
    "id": "SECURITY-3118",
    "type": "plugin",
    "name": "codedx",
    "message": "CSRF vulnerability and missing permission checks",
    "url": "https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-3118",
    "versions": [
      {
        "lastVersion": "3.1.0",
        "pattern": "([1-3])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-3121",
    "type": "plugin",
    "name": "jenkinsci-appspider-plugin",
    "message": "CSRF vulnerability and missing permission check",
    "url": "https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-3121",
    "versions": [
      {
        "lastVersion": "1.0.15",
        "pattern": "(1[.]0[.]1[0-5]|1[.]0[.][2-8])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-3123",
    "type": "plugin",
    "name": "file-parameters",
    "message": "Arbitrary file write vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-3123",
    "versions": [
      {
        "lastVersion": "285.v757c5b_67a_c25",
        "pattern": "(110|146|191|205|264|285[.]v757c5b_67a_c25|89|9[01239])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-3125",
    "type": "plugin",
    "name": "sidebar-link",
    "message": "Path traversal vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-3125",
    "versions": [
      {
        "lastVersion": "2.2.1",
        "pattern": "(1|2[.][01]|2[.]2[.][01])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-3145",
    "type": "plugin",
    "name": "codedx",
    "message": "Missing permission checks",
    "url": "https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-3145",
    "versions": [
      {
        "lastVersion": "3.1.0",
        "pattern": "([1-3])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-3146",
    "type": "plugin",
    "name": "codedx",
    "message": "API keys stored and displayed in plain text",
    "url": "https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-3146",
    "versions": [
      {
        "lastVersion": "3.1.0",
        "pattern": "([1-3])(|[.-].+)"
      }
    ]
  },
  {
    "id": "core-2_400",
    "type": "core",
    "name": "core",
    "message": "CSRF bypass vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2023-06-14/",
    "versions": [
      {
        "lastVersion": "2.399",
        "pattern": "(1|2[.][0-9]|2[.]1[0-9]|2[.]10[0-9]|2[.]11[0-9]|2[.]12[0-9]|2[.]13[0-8]|2[.]14[0-9]|2[.]15[0-9]|2[.]16[0-9]|2[.]17[0-9]|2[.]18[012345679]|2[.]19[0-9]|2[.]2[0-9]|2[.]20[0-9]|2[.]21[012345789]|2[.]22[0-9]|2[.]23[0-9]|2[.]24[0-9]|2[.]25[0-9]|2[.]26[0-9]|2[.]27[0-9]|2[.]28[0-9]|2[.]29[0-9]|2[.]3[0-9]|2[.]30[0-9]|2[.]31[1-9]|2[.]32[0-9]|2[.]33[0-9]|2[.]34[0-9]|2[.]35[0456789]|2[.]36[0-9]|2[.]37[0-9]|2[.]38[0-9]|2[.]39[0-9]|2[.]4[0-9]|2[.]5[0-9]|2[.]6[0-9]|2[.]7[0-9]|2[.]8[0-9]|2[.]9[0-9])(|[.-].+)"
      },
      {
        "lastVersion": "LTS 2.387.3",
        "pattern": "(1|2[.]107|2[.]121|2[.]138|2[.]150|2[.]164|2[.]176|2[.]19|2[.]190|2[.]204|2[.]222|2[.]235|2[.]249|2[.]263|2[.]277|2[.]289|2[.]303|2[.]319|2[.]32|2[.]332|2[.]346|2[.]361|2[.]375|2[.]387|2[.]46|2[.]60|2[.]7|2[.]73|2[.]89)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2870",
    "type": "plugin",
    "name": "checkmarx",
    "message": "SSL/TLS certificate validation disabled by default",
    "url": "https://www.jenkins.io/security/advisory/2023-06-14/#SECURITY-2870",
    "versions": [
      {
        "lastVersion": "2022.4.3",
        "pattern": "(202[0-2]|[78])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2911",
    "type": "plugin",
    "name": "ease-plugin",
    "message": "CSRF vulnerability and missing permission checks",
    "url": "https://www.jenkins.io/security/advisory/2023-06-14/#SECURITY-2911",
    "versions": [
      {
        "lastVersion": "2.6",
        "pattern": "(1|2[.][01256])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2932",
    "type": "plugin",
    "name": "teamconcert",
    "message": "Missing permission checks",
    "url": "https://www.jenkins.io/security/advisory/2023-06-14/#SECURITY-2932",
    "versions": [
      {
        "lastVersion": "2.4.1",
        "pattern": "(1|2[.][12]|2[.]4[.][01])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2951",
    "type": "plugin",
    "name": "repository",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2023-06-14/#SECURITY-2951",
    "versions": [
      {
        "lastVersion": "1.10",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-3099",
    "type": "plugin",
    "name": "aws-codecommit-trigger",
    "message": "Arbitrary file read vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2023-06-14/#SECURITY-3099",
    "versions": [
      {
        "lastVersion": "3.0.12",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-3138",
    "type": "plugin",
    "name": "dimensionsscm",
    "message": "Missing permission check allows enumerating credentials IDs",
    "url": "https://www.jenkins.io/security/advisory/2023-06-14/#SECURITY-3138",
    "versions": [
      {
        "lastVersion": "0.9.3",
        "pattern": "(0[.][78]|0[.]9[.][0-2])(|[.-].+)|(0[.]9[.]3)"
      }
    ]
  },
  {
    "id": "SECURITY-3143",
    "type": "plugin",
    "name": "dimensionsscm",
    "message": "Exposure of system-scoped credentials",
    "url": "https://www.jenkins.io/security/advisory/2023-06-14/#SECURITY-3143",
    "versions": [
      {
        "lastVersion": "0.9.3",
        "pattern": "(0[.][78]|0[.]9[.][0-2])(|[.-].+)|(0[.]9[.]3)"
      }
    ]
  },
  {
    "id": "SECURITY-3155",
    "type": "plugin",
    "name": "sonargraph-integration",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2023-06-14/#SECURITY-3155",
    "versions": [
      {
        "lastVersion": "5.0.1",
        "pattern": "([1-4]|5[.]0[.][01])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-3156",
    "type": "plugin",
    "name": "repository",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2023-06-14/#SECURITY-3156",
    "versions": [
      {
        "lastVersion": "1.10",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-3166",
    "type": "plugin",
    "name": "template-workflows",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2023-06-14/#SECURITY-3166",
    "versions": [
      {
        "lastVersion": "41.v32d86a_313b_4a",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2988",
    "type": "plugin",
    "name": "assembla-auth",
    "message": "CSRF vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2023-07-12/#SECURITY-2988",
    "versions": [
      {
        "lastVersion": "1.14",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2998",
    "type": "plugin",
    "name": "openshift-login",
    "message": "Session fixation vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2023-07-12/#SECURITY-2998",
    "versions": [
      {
        "lastVersion": "1.1.0.227.v27e08dfb_1a_20",
        "pattern": "(0|1[.]0|1[.]1[.]0[.]227)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2999",
    "type": "plugin",
    "name": "openshift-login",
    "message": "Open redirect vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2023-07-12/#SECURITY-2999",
    "versions": [
      {
        "lastVersion": "1.1.0.227.v27e08dfb_1a_20",
        "pattern": "(0|1[.]0|1[.]1[.]0[.]227)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-3033",
    "type": "plugin",
    "name": "rebuild",
    "message": "CSRF vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2023-07-12/#SECURITY-3033",
    "versions": [
      {
        "lastVersion": "320.v5a_0933a_e7d61",
        "pattern": "(1|320)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-3044",
    "type": "plugin",
    "name": "oracle-cloud-infrastructure-compute",
    "message": "Missing SSH host key validation",
    "url": "https://www.jenkins.io/security/advisory/2023-07-12/#SECURITY-3044",
    "versions": [
      {
        "lastVersion": "1.0.16",
        "pattern": "(1[.]0[.][0-9]|1[.]0[.]1[0-6])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-3059",
    "type": "plugin",
    "name": "active-directory",
    "message": "Password transmitted in plain text",
    "url": "https://www.jenkins.io/security/advisory/2023-07-12/#SECURITY-3059",
    "versions": [
      {
        "lastVersion": "2.30",
        "pattern": "(1|2[.][023456789]|2[.]1[0-9]|2[.]2[023456789])(|[.-].+)|(2[.]30)"
      }
    ]
  },
  {
    "id": "SECURITY-3117",
    "type": "plugin",
    "name": "sumologic-publisher",
    "message": "CSRF vulnerability and missing permission checks",
    "url": "https://www.jenkins.io/security/advisory/2023-07-12/#SECURITY-3117",
    "versions": [
      {
        "lastVersion": "2.2.3",
        "pattern": "(1|2[.][01]|2[.]2[.][013])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-3119",
    "type": "plugin",
    "name": "benchmark-evaluator",
    "message": "CSRF vulnerability and missing permission checks",
    "url": "https://www.jenkins.io/security/advisory/2023-07-12/#SECURITY-3119",
    "versions": [
      {
        "lastVersion": "1.0.1",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-3122",
    "type": "plugin",
    "name": "test-results-aggregator",
    "message": "CSRF vulnerability and missing permission check",
    "url": "https://www.jenkins.io/security/advisory/2023-07-12/#SECURITY-3122",
    "versions": [
      {
        "lastVersion": "1.2.15",
        "pattern": "(1[.][01]|1[.]2[.][0-9]|1[.]2[.]1[0-5])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-3124",
    "type": "plugin",
    "name": "mathworks-polyspace",
    "message": "Arbitrary file read vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2023-07-12/#SECURITY-3124",
    "versions": [
      {
        "lastVersion": "1.0.5",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-3126",
    "type": "plugin",
    "name": "pipeline-restful-api",
    "message": "CSRF vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2023-07-12/#SECURITY-3126",
    "versions": [
      {
        "lastVersion": "0.11",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-3127",
    "type": "plugin",
    "name": "mabl-integration",
    "message": "CSRF vulnerability and missing permission checks allow capturing credentials",
    "url": "https://www.jenkins.io/security/advisory/2023-07-12/#SECURITY-3127",
    "versions": [
      {
        "lastVersion": "0.0.46",
        "pattern": "(0[.]0[.]1[023456789]|0[.]0[.]2[1235689]|0[.]0[.]3[012456789]|0[.]0[.]4[023456]|0[.]0[.][5-9])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-3128",
    "type": "plugin",
    "name": "macstadium-orka",
    "message": "Missing permission check allows capturing credentials",
    "url": "https://www.jenkins.io/security/advisory/2023-07-12/#SECURITY-3128",
    "versions": [
      {
        "lastVersion": "1.33",
        "pattern": "(1[.][0-9]|1[.]1[023456789]|1[.]2[012356789]|1[.]3[0-3])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-3130",
    "type": "plugin",
    "name": "datadog",
    "message": "Missing permission check allows capturing credentials",
    "url": "https://www.jenkins.io/security/advisory/2023-07-12/#SECURITY-3130",
    "versions": [
      {
        "lastVersion": "5.4.1",
        "pattern": "([0-4]|5[.][023]|5[.]4[.][01])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-3131",
    "type": "plugin",
    "name": "elasticbox",
    "message": "CSRF vulnerability and missing permission checks allow capturing credentials",
    "url": "https://www.jenkins.io/security/advisory/2023-07-12/#SECURITY-3131",
    "versions": [
      {
        "lastVersion": "5.0.1",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-3133",
    "type": "plugin",
    "name": "external-monitor-job",
    "message": "XXE vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2023-07-12/#SECURITY-3133",
    "versions": [
      {
        "lastVersion": "206.v9a_94ff0b_4a_10",
        "pattern": "(1|189|19[12]|20[36])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-3137-1",
    "type": "plugin",
    "name": "mabl-integration",
    "message": "Missing permission check allows enumerating credentials IDs",
    "url": "https://www.jenkins.io/security/advisory/2023-07-12/#SECURITY-3137%20(1)",
    "versions": [
      {
        "lastVersion": "0.0.46",
        "pattern": "(0[.]0[.]1[023456789]|0[.]0[.]2[1235689]|0[.]0[.]3[012456789]|0[.]0[.]4[023456]|0[.]0[.][5-9])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-3137-2",
    "type": "plugin",
    "name": "mabl-integration",
    "message": "Exposure of system-scoped credentials",
    "url": "https://www.jenkins.io/security/advisory/2023-07-12/#SECURITY-3137%20(2)",
    "versions": [
      {
        "lastVersion": "0.0.46",
        "pattern": "(0[.]0[.]1[023456789]|0[.]0[.]2[1235689]|0[.]0[.]3[012456789]|0[.]0[.]4[023456]|0[.]0[.][5-9])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-3164",
    "type": "plugin",
    "name": "miniorange-saml-sp",
    "message": "Missing permission check",
    "url": "https://www.jenkins.io/security/advisory/2023-07-12/#SECURITY-3164",
    "versions": [
      {
        "lastVersion": "2.3.0",
        "pattern": "(1|2[.][0-2]|2[.]3[.]0)(|[.-].+)"
      }
    ]
  },
  {
    "id": "core-2_416",
    "type": "core",
    "name": "core",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2023-07-26/",
    "versions": [
      {
        "lastVersion": "2.415",
        "pattern": "(1|2[.][0-9]|2[.]1[0-9]|2[.]10[0-9]|2[.]11[0-9]|2[.]12[0-9]|2[.]13[0-8]|2[.]14[0-9]|2[.]15[0-9]|2[.]16[0-9]|2[.]17[0-9]|2[.]18[012345679]|2[.]19[0-9]|2[.]2[0-9]|2[.]20[0-9]|2[.]21[012345789]|2[.]22[0-9]|2[.]23[0-9]|2[.]24[0-9]|2[.]25[0-9]|2[.]26[0-9]|2[.]27[0-9]|2[.]28[0-9]|2[.]29[0-9]|2[.]3[0-9]|2[.]30[0-9]|2[.]31[1-9]|2[.]32[0-9]|2[.]33[0-9]|2[.]34[0-9]|2[.]35[0456789]|2[.]36[0-9]|2[.]37[0-9]|2[.]38[0-9]|2[.]39[0-9]|2[.]4[0-9]|2[.]40[02345679]|2[.]41[0-35]|2[.]5[0-9]|2[.]6[0-9]|2[.]7[0-9]|2[.]8[0-9]|2[.]9[0-9])(|[.-].+)|(2[.]401|2[.]414)"
      },
      {
        "lastVersion": "LTS 2.401.2",
        "pattern": "(1|2[.]107|2[.]121|2[.]138|2[.]150|2[.]164|2[.]176|2[.]19|2[.]190|2[.]204|2[.]222|2[.]235|2[.]249|2[.]263|2[.]277|2[.]289|2[.]303|2[.]319|2[.]32|2[.]332|2[.]346|2[.]361|2[.]375|2[.]387|2[.]401[.][12]|2[.]46|2[.]60|2[.]7|2[.]73|2[.]89)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2696",
    "type": "plugin",
    "name": "gitlab-oauth",
    "message": "CSRF vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2023-07-26/#SECURITY-2696",
    "versions": [
      {
        "lastVersion": "1.17.1",
        "pattern": "(1[.][0-9]|1[.]1[0-7])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-3012",
    "type": "plugin",
    "name": "qualys-was",
    "message": "Incorrect permission checks allow capturing credentials",
    "url": "https://www.jenkins.io/security/advisory/2023-07-26/#SECURITY-3012",
    "versions": [
      {
        "lastVersion": "2.0.10",
        "pattern": "(2[.]0[.]10|2[.]0[.][3-9])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-3095",
    "type": "plugin",
    "name": "bazaar",
    "message": "CSRF vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2023-07-26/#SECURITY-3095",
    "versions": [
      {
        "lastVersion": "1.22",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-3129",
    "type": "plugin",
    "name": "servicenow-devops",
    "message": "CSRF vulnerability and missing permission check allow capturing credentials",
    "url": "https://www.jenkins.io/security/advisory/2023-07-26/#SECURITY-3129",
    "versions": [
      {
        "lastVersion": "1.38.0",
        "pattern": "(1[.]0|1[.]29|1[.]3[0-7]|1[.]38[.]0)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-3192",
    "type": "plugin",
    "name": "chef-identity",
    "message": "Secret displayed without masking",
    "url": "https://www.jenkins.io/security/advisory/2023-07-26/#SECURITY-3192",
    "versions": [
      {
        "lastVersion": "2.0.3",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-3208",
    "type": "plugin",
    "name": "gradle",
    "message": "Incorrect control flow breaks credentials masking in the build log",
    "url": "https://www.jenkins.io/security/advisory/2023-07-26/#SECURITY-3208",
    "versions": [
      {
        "lastVersion": "2.8",
        "pattern": "(2[.]8)"
      }
    ]
  },
  {
    "id": "SECURITY-2811",
    "type": "plugin",
    "name": "docker-swarm",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2023-08-16/#SECURITY-2811",
    "versions": [
      {
        "lastVersion": "1.11",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2894",
    "type": "plugin",
    "name": "gogs-webhook",
    "message": "Unsafe default behavior and information disclosure in webhook",
    "url": "https://www.jenkins.io/security/advisory/2023-08-16/#SECURITY-2894",
    "versions": [
      {
        "lastVersion": "1.0.15",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-3071",
    "type": "plugin",
    "name": "shortcut-job",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2023-08-16/#SECURITY-3071",
    "versions": [
      {
        "lastVersion": "0.4",
        "pattern": "(0[.]4)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-3090",
    "type": "plugin",
    "name": "config-file-provider",
    "message": "Improper masking of credentials",
    "url": "https://www.jenkins.io/security/advisory/2023-08-16/#SECURITY-3090",
    "versions": [
      {
        "lastVersion": "952.va_544a_6234b_46",
        "pattern": "([1-3]|938|951[.]v0461b_87b_721b_|952)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-3105",
    "type": "plugin",
    "name": "cloudbees-folder",
    "message": "CSRF vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2023-08-16/#SECURITY-3105",
    "versions": [
      {
        "lastVersion": "6.846.v23698686f0f6",
        "pattern": "([45]|6[.][0-9]|6[.]1[0-8]|6[.]688|6[.]708|6[.]714|6[.]72[29]|6[.]736|6[.]740|6[.]758|6[.]766|6[.]77[03]|6[.]784|6[.]79[257]|6[.]800|6[.]815|6[.]846)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-3106",
    "type": "plugin",
    "name": "cloudbees-folder",
    "message": "CSRF vulnerability may approve unsandboxed scripts",
    "url": "https://www.jenkins.io/security/advisory/2023-08-16/#SECURITY-3106",
    "versions": [
      {
        "lastVersion": "6.846.v23698686f0f6",
        "pattern": "([45]|6[.][0-9]|6[.]1[0-8]|6[.]688|6[.]708|6[.]714|6[.]72[29]|6[.]736|6[.]740|6[.]758|6[.]766|6[.]77[03]|6[.]784|6[.]79[257]|6[.]800|6[.]815|6[.]846)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-3109",
    "type": "plugin",
    "name": "cloudbees-folder",
    "message": "Information disclosure",
    "url": "https://www.jenkins.io/security/advisory/2023-08-16/#SECURITY-3109",
    "versions": [
      {
        "lastVersion": "6.846.v23698686f0f6",
        "pattern": "([45]|6[.][0-9]|6[.]1[0-8]|6[.]688|6[.]708|6[.]714|6[.]72[29]|6[.]736|6[.]740|6[.]758|6[.]766|6[.]77[03]|6[.]784|6[.]79[257]|6[.]800|6[.]815|6[.]846)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-3115",
    "type": "plugin",
    "name": "fortify",
    "message": "CSRF vulnerability and missing permission checks allow capturing credentials",
    "url": "https://www.jenkins.io/security/advisory/2023-08-16/#SECURITY-3115",
    "versions": [
      {
        "lastVersion": "22.1.38",
        "pattern": "(19|2[01]|22[.]1)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-3116",
    "type": "plugin",
    "name": "blueocean",
    "message": "CSRF vulnerability allows capturing credentials",
    "url": "https://www.jenkins.io/security/advisory/2023-08-16/#SECURITY-3116",
    "versions": [
      {
        "lastVersion": "1.27.5",
        "pattern": "(1[.][0-9]|1[.]1[013456789]|1[.]2[1-6]|1[.]27[.][0-3])(|[.-].+)|(1[.]27[.][45])"
      }
    ]
  },
  {
    "id": "SECURITY-3140",
    "type": "plugin",
    "name": "fortify",
    "message": "HTML injection vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2023-08-16/#SECURITY-3140",
    "versions": [
      {
        "lastVersion": "22.1.38",
        "pattern": "(19|2[01]|22[.]1)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-3153",
    "type": "plugin",
    "name": "maven-artifact-choicelistprovider",
    "message": "Exposure of system-scoped credentials",
    "url": "https://www.jenkins.io/security/advisory/2023-08-16/#SECURITY-3153",
    "versions": [
      {
        "lastVersion": "1.14",
        "pattern": "(1[.][0-9]|1[.]1[014])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-3196",
    "type": "plugin",
    "name": "nodejs",
    "message": "Improper masking of credentials",
    "url": "https://www.jenkins.io/security/advisory/2023-08-16/#SECURITY-3196",
    "versions": [
      {
        "lastVersion": "1.6.0",
        "pattern": "(0|1[.][0-5])(|[.-].+)|(1[.]6[.]0)"
      }
    ]
  },
  {
    "id": "SECURITY-3201",
    "type": "plugin",
    "name": "favorite-view",
    "message": "CSRF vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2023-08-16/#SECURITY-3201",
    "versions": [
      {
        "lastVersion": "5.v77a_37f62782d",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-3214-1",
    "type": "plugin",
    "name": "delphix",
    "message": "Missing permission check allows enumerating credentials IDs",
    "url": "https://www.jenkins.io/security/advisory/2023-08-16/#SECURITY-3214%20(1)",
    "versions": [
      {
        "lastVersion": "3.0.2",
        "pattern": "(3[.]0[.][12])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-3214-2",
    "type": "plugin",
    "name": "delphix",
    "message": "Exposure of system-scoped credentials",
    "url": "https://www.jenkins.io/security/advisory/2023-08-16/#SECURITY-3214%20(2)",
    "versions": [
      {
        "lastVersion": "3.0.2",
        "pattern": "(3[.]0[.][12])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-3223",
    "type": "plugin",
    "name": "flaky-test-handler",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2023-08-16/#SECURITY-3223",
    "versions": [
      {
        "lastVersion": "1.2.2",
        "pattern": "(1[.][01]|1[.]2[.][0-2])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-3229",
    "type": "plugin",
    "name": "tuleap-oauth",
    "message": "Non-constant time token comparison",
    "url": "https://www.jenkins.io/security/advisory/2023-08-16/#SECURITY-3229",
    "versions": [
      {
        "lastVersion": "1.1.20",
        "pattern": "(1[.]0|1[.]1[.][01345679]|1[.]1[.]1[0-9]|1[.]1[.]20)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2924",
    "type": "plugin",
    "name": "ivy",
    "message": "XXE vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2023-09-06/#SECURITY-2924",
    "versions": [
      {
        "lastVersion": "2.5",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-3018",
    "type": "plugin",
    "name": "qualys-cs",
    "message": "Incorrect permission checks",
    "url": "https://www.jenkins.io/security/advisory/2023-09-06/#SECURITY-3018",
    "versions": [
      {
        "lastVersion": "1.6.2.6",
        "pattern": "(1[.]6[.][01]|1[.]6[.]2[.][0-6])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-3064",
    "type": "plugin",
    "name": "ssh2easy",
    "message": "Disabled permissions can be granted",
    "url": "https://www.jenkins.io/security/advisory/2023-09-06/#SECURITY-3064",
    "versions": [
      {
        "lastVersion": "1.4",
        "pattern": "(1[.][0-4])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-3065",
    "type": "plugin",
    "name": "assembla-auth",
    "message": "Disabled permissions granted",
    "url": "https://www.jenkins.io/security/advisory/2023-09-06/#SECURITY-3065",
    "versions": [
      {
        "lastVersion": "1.14",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-3082",
    "type": "plugin",
    "name": "frugal-testing",
    "message": "CSRF vulnerability and missing permission checks",
    "url": "https://www.jenkins.io/security/advisory/2023-09-06/#SECURITY-3082",
    "versions": [
      {
        "lastVersion": "1.1",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-3093",
    "type": "plugin",
    "name": "ivy",
    "message": "CSRF vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2023-09-06/#SECURITY-3093",
    "versions": [
      {
        "lastVersion": "2.5",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-3101-1",
    "type": "plugin",
    "name": "aws-codecommit-trigger",
    "message": "Missing permission check allows enumerating credentials IDs",
    "url": "https://www.jenkins.io/security/advisory/2023-09-06/#SECURITY-3101%20(1)",
    "versions": [
      {
        "lastVersion": "3.0.12",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-3101-2",
    "type": "plugin",
    "name": "aws-codecommit-trigger",
    "message": "CSRF vulnerability and missing permission check",
    "url": "https://www.jenkins.io/security/advisory/2023-09-06/#SECURITY-3101%20(2)",
    "versions": [
      {
        "lastVersion": "3.0.12",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-3102",
    "type": "plugin",
    "name": "aws-codecommit-trigger",
    "message": "HTML injection vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2023-09-06/#SECURITY-3102",
    "versions": [
      {
        "lastVersion": "3.0.12",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-3165",
    "type": "plugin",
    "name": "bitbucket-push-and-pull-request",
    "message": "SSRF vulnerability allows capturing credentials",
    "url": "https://www.jenkins.io/security/advisory/2023-09-06/#SECURITY-3165",
    "versions": [
      {
        "firstVersion": "2.4.0",
        "lastVersion": "2.8.3",
        "pattern": "(2[.][4567]|2[.]8[.][0-3])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-3190",
    "type": "plugin",
    "name": "tap",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2023-09-06/#SECURITY-3190",
    "versions": [
      {
        "lastVersion": "2.3",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-3227",
    "type": "plugin",
    "name": "azure-ad",
    "message": "Non-constant time nonce comparison",
    "url": "https://www.jenkins.io/security/advisory/2023-09-06/#SECURITY-3227",
    "versions": [
      {
        "lastVersion": "396.v86ce29279947",
        "pattern": "([01]|146|15[0234578]|16[4578]|17[012345789]|18[034589]|19[0145]|21[38]|23[34]|241|267|30[368]|313|336|34[0589]|378[.]vd6e2874a_69eb_|385|39[1236])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-3228",
    "type": "plugin",
    "name": "google-login",
    "message": "Non-constant time token comparison",
    "url": "https://www.jenkins.io/security/advisory/2023-09-06/#SECURITY-3228",
    "versions": [
      {
        "lastVersion": "1.7",
        "pattern": "(1[.][0-7])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-3233",
    "type": "plugin",
    "name": "jobConfigHistory",
    "message": "Path traversal allows exploiting XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2023-09-06/#SECURITY-3233",
    "versions": [
      {
        "lastVersion": "1227.v7a_79fc4dc01f",
        "pattern": "([12]|1119|113[39]|114[68]|115[56]|116[356]|117[016]|118[37]|119[18]|120[67]|1212|1227)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-3235",
    "type": "plugin",
    "name": "jobConfigHistory",
    "message": "Path traversal allows exploiting XXE vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2023-09-06/#SECURITY-3235",
    "versions": [
      {
        "lastVersion": "1227.v7a_79fc4dc01f",
        "pattern": "([12]|1119|113[39]|114[68]|115[56]|116[356]|117[016]|118[37]|119[18]|120[67]|1212|1227)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-3257",
    "type": "plugin",
    "name": "pipeline-maven",
    "message": "Improper masking of credentials",
    "url": "https://www.jenkins.io/security/advisory/2023-09-06/#SECURITY-3257",
    "versions": [
      {
        "lastVersion": "1330.v18e473854496",
        "pattern": "([023]|1161|1195|120[135]|1226|123[59]|125[67]|127[49]|129[038]|1314|1322|1330)(|[.-].+)"
      }
    ]
  },
  {
    "id": "core-2_424",
    "type": "core",
    "name": "core",
    "message": "Multiple security vulnerabilities in Jenkins 2.423 and earlier, LTS 2.414.1 and earlier",
    "url": "https://www.jenkins.io/security/advisory/2023-09-20/",
    "versions": [
      {
        "lastVersion": "2.423",
        "pattern": "(1|2[.][0-9]|2[.]1[0-9]|2[.]10[0-9]|2[.]11[0-9]|2[.]12[0-9]|2[.]13[0-8]|2[.]14[0-9]|2[.]15[0-9]|2[.]16[0-9]|2[.]17[0-9]|2[.]18[012345679]|2[.]19[0-9]|2[.]2[0-9]|2[.]20[0-9]|2[.]21[012345789]|2[.]22[0-9]|2[.]23[0-9]|2[.]24[0-9]|2[.]25[0-9]|2[.]26[0-9]|2[.]27[0-9]|2[.]28[0-9]|2[.]29[0-9]|2[.]3[0-9]|2[.]30[0-9]|2[.]31[1-9]|2[.]32[0-9]|2[.]33[0-9]|2[.]34[0-9]|2[.]35[0456789]|2[.]36[0-9]|2[.]37[0-9]|2[.]38[0-9]|2[.]39[0-9]|2[.]4[0-9]|2[.]40[012345679]|2[.]41[012356789]|2[.]42[0-3]|2[.]5[0-9]|2[.]6[0-9]|2[.]7[0-9]|2[.]8[0-9]|2[.]9[0-9])(|[.-].+)|(2[.]414)"
      },
      {
        "lastVersion": "LTS 2.414.1",
        "pattern": "(1|2[.]107|2[.]121|2[.]138|2[.]150|2[.]164|2[.]176|2[.]19|2[.]190|2[.]204|2[.]222|2[.]235|2[.]249|2[.]263|2[.]277|2[.]289|2[.]303|2[.]319|2[.]32|2[.]332|2[.]346|2[.]361|2[.]375|2[.]387|2[.]401|2[.]414[.]1|2[.]46|2[.]60|2[.]7|2[.]73|2[.]89)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-3226",
    "type": "plugin",
    "name": "build-failure-analyzer",
    "message": "CSRF vulnerability and missing permission check allow SSRF",
    "url": "https://www.jenkins.io/security/advisory/2023-09-20/#SECURITY-3226",
    "versions": [
      {
        "lastVersion": "2.4.1",
        "pattern": "(1|2[.][0-3]|2[.]4[.][01])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-3239",
    "type": "plugin",
    "name": "build-failure-analyzer",
    "message": "CSRF vulnerability allows deleting Failure Causes",
    "url": "https://www.jenkins.io/security/advisory/2023-09-20/#SECURITY-3239",
    "versions": [
      {
        "lastVersion": "2.4.1",
        "pattern": "(1|2[.][0-3]|2[.]4[.][01])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-3244",
    "type": "plugin",
    "name": "build-failure-analyzer",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2023-09-20/#SECURITY-3244",
    "versions": [
      {
        "lastVersion": "2.4.1",
        "pattern": "(1|2[.][0-3]|2[.]4[.][01])(|[.-].+)"
      }
    ]
  },
  {
    "id": "core-2_428",
    "type": "core",
    "name": "core",
    "message": "HTTP/2 denial of service vulnerabilities in bundled Jetty",
    "url": "https://www.jenkins.io/security/advisory/2023-10-18/",
    "versions": [
      {
        "lastVersion": "2.427",
        "pattern": "(1|2[.][0-9]|2[.]1[0-9]|2[.]10[0-9]|2[.]11[0-9]|2[.]12[0-9]|2[.]13[0-8]|2[.]14[0-9]|2[.]15[0-9]|2[.]16[0-9]|2[.]17[0-9]|2[.]18[012345679]|2[.]19[0-9]|2[.]2[0-9]|2[.]20[0-9]|2[.]21[012345789]|2[.]22[0-9]|2[.]23[0-9]|2[.]24[0-9]|2[.]25[0-9]|2[.]26[0-9]|2[.]27[0-9]|2[.]28[0-9]|2[.]29[0-9]|2[.]3[0-9]|2[.]30[0-9]|2[.]31[1-9]|2[.]32[0-9]|2[.]33[0-9]|2[.]34[0-9]|2[.]35[0456789]|2[.]36[0-9]|2[.]37[0-9]|2[.]38[0-9]|2[.]39[0-9]|2[.]4[0-9]|2[.]40[012345679]|2[.]41[012356789]|2[.]42[0123457]|2[.]5[0-9]|2[.]6[0-9]|2[.]7[0-9]|2[.]8[0-9]|2[.]9[0-9])(|[.-].+)|(2[.]414|2[.]426)"
      },
      {
        "lastVersion": "LTS 2.414.2",
        "pattern": "(1|2[.]107|2[.]121|2[.]138|2[.]150|2[.]164|2[.]176|2[.]19|2[.]190|2[.]204|2[.]222|2[.]235|2[.]249|2[.]263|2[.]277|2[.]289|2[.]303|2[.]319|2[.]32|2[.]332|2[.]346|2[.]361|2[.]375|2[.]387|2[.]401|2[.]414[.][12]|2[.]46|2[.]60|2[.]7|2[.]73|2[.]89)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2875",
    "type": "plugin",
    "name": "multibranch-scan-webhook-trigger",
    "message": "Non-constant time webhook token comparison",
    "url": "https://www.jenkins.io/security/advisory/2023-10-25/#SECURITY-2875",
    "versions": [
      {
        "lastVersion": "1.0.9",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2876",
    "type": "plugin",
    "name": "teams-webhook-trigger",
    "message": "Non-constant time webhook token comparison",
    "url": "https://www.jenkins.io/security/advisory/2023-10-25/#SECURITY-2876",
    "versions": [
      {
        "lastVersion": "0.1.1",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2879",
    "type": "plugin",
    "name": "zanata",
    "message": "Non-constant time webhook token hash comparison",
    "url": "https://www.jenkins.io/security/advisory/2023-10-25/#SECURITY-2879",
    "versions": [
      {
        "lastVersion": "0.6",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-2896",
    "type": "plugin",
    "name": "gogs-webhook",
    "message": "Non-constant time webhook token comparison",
    "url": "https://www.jenkins.io/security/advisory/2023-10-25/#SECURITY-2896",
    "versions": [
      {
        "lastVersion": "1.0.15",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-3202",
    "type": "plugin",
    "name": "lambdatest-automation",
    "message": "Exposure of token through logs",
    "url": "https://www.jenkins.io/security/advisory/2023-10-25/#SECURITY-3202",
    "versions": [
      {
        "lastVersion": "1.20.10",
        "pattern": "(1[.]1[045689]|1[.]20|1[.]6)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-3222",
    "type": "plugin",
    "name": "lambdatest-automation",
    "message": "Missing permission check allows enumerating credentials IDs",
    "url": "https://www.jenkins.io/security/advisory/2023-10-25/#SECURITY-3222",
    "versions": [
      {
        "lastVersion": "1.20.9",
        "pattern": "(1[.]1[045689]|1[.]20[.][014579]|1[.]6)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-3237",
    "type": "plugin",
    "name": "electricflow",
    "message": "Arbitrary file deletion vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2023-10-25/#SECURITY-3237",
    "versions": [
      {
        "lastVersion": "1.1.32",
        "pattern": "(1[.]0|1[.]1[.][1-9]|1[.]1[.]1[0-9]|1[.]1[.]2[0-9]|1[.]1[.]3[0-2])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-3238",
    "type": "plugin",
    "name": "electricflow",
    "message": "Arbitrary file read vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2023-10-25/#SECURITY-3238",
    "versions": [
      {
        "lastVersion": "1.1.32",
        "pattern": "(1[.]0|1[.]1[.][1-9]|1[.]1[.]1[0-9]|1[.]1[.]2[0-9]|1[.]1[.]3[0-2])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-3246",
    "type": "plugin",
    "name": "github",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2023-10-25/#SECURITY-3246",
    "versions": [
      {
        "lastVersion": "1.37.3",
        "pattern": "(0|1[.][0-9]|1[.]1[0-9]|1[.]2[0-9]|1[.]3[0-6]|1[.]37[.][0-2])(|[.-].+)|(1[.]37[.]3)"
      }
    ]
  },
  {
    "id": "SECURITY-3247",
    "type": "plugin",
    "name": "trac",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2023-10-25/#SECURITY-3247",
    "versions": [
      {
        "lastVersion": "1.13",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-3265",
    "type": "plugin",
    "name": "warnings-ng",
    "message": "Exposure of system-scoped credentials",
    "url": "https://www.jenkins.io/security/advisory/2023-10-25/#SECURITY-3265",
    "versions": [
      {
        "lastVersion": "10.5.0",
        "pattern": "([1-9]|10[.][0-3]|10[.]4[.]0|10[.]5[.]0)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2835",
    "type": "plugin",
    "name": "google-compute-engine",
    "message": "Incorrect permission checks",
    "url": "https://www.jenkins.io/security/advisory/2023-11-29/#SECURITY-2835",
    "versions": [
      {
        "lastVersion": "4.550.vb_327fca_3db_11",
        "pattern": "([1-3]|4[.][0-2]|4[.]3[.][012345789]|4[.]3[.]1[1-6]|4[.]548|4[.]550)(|[.-].+)|(4[.]3[.]17)"
      }
    ]
  },
  {
    "id": "SECURITY-3193",
    "type": "plugin",
    "name": "matlab",
    "message": "CSRF vulnerabilities and missing permission checks allow XXE",
    "url": "https://www.jenkins.io/security/advisory/2023-11-29/#SECURITY-3193",
    "versions": [
      {
        "lastVersion": "2.11.0",
        "pattern": "(1|2[.][0-9]|2[.]10|2[.]11[.]0)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-3225",
    "type": "plugin",
    "name": "jira",
    "message": "Exposure of system-scoped credentials",
    "url": "https://www.jenkins.io/security/advisory/2023-11-29/#SECURITY-3225",
    "versions": [
      {
        "lastVersion": "3.11",
        "pattern": "([12]|3[.][0-9]|3[.]1[01])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-3256",
    "type": "plugin",
    "name": "neuvector-vulnerability-scanner",
    "message": "CSRF vulnerability and missing permission checks",
    "url": "https://www.jenkins.io/security/advisory/2023-11-29/#SECURITY-3256",
    "versions": [
      {
        "lastVersion": "1.22",
        "pattern": "(1)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2979",
    "type": "plugin",
    "name": "oic-auth",
    "message": "Open redirect vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2023-12-13/#SECURITY-2979",
    "versions": [
      {
        "lastVersion": "2.6",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-3092",
    "type": "plugin",
    "name": "ec2-deployment-dashboard",
    "message": "CSRF vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2023-12-13/#SECURITY-3092",
    "versions": [
      {
        "lastVersion": "1.0.10",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-3168",
    "type": "plugin",
    "name": "oic-auth",
    "message": "Password stored in a recoverable format",
    "url": "https://www.jenkins.io/security/advisory/2023-12-13/#SECURITY-3168",
    "versions": [
      {
        "lastVersion": "2.6",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-3179",
    "type": "plugin",
    "name": "paaslane-estimate",
    "message": "CSRF vulnerability and missing permission checks",
    "url": "https://www.jenkins.io/security/advisory/2023-12-13/#SECURITY-3179",
    "versions": [
      {
        "lastVersion": "1.0.4",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-3182",
    "type": "plugin",
    "name": "paaslane-estimate",
    "message": "Tokens stored and displayed in plain text",
    "url": "https://www.jenkins.io/security/advisory/2023-12-13/#SECURITY-3182",
    "versions": [
      {
        "lastVersion": "1.0.4",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-3183",
    "type": "plugin",
    "name": "htmlresource",
    "message": "CSRF vulnerability allows deleting arbitrary files",
    "url": "https://www.jenkins.io/security/advisory/2023-12-13/#SECURITY-3183",
    "versions": [
      {
        "lastVersion": "1.02",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-3184",
    "type": "plugin",
    "name": "dingding-json-pusher",
    "message": "Tokens stored and displayed in plain text",
    "url": "https://www.jenkins.io/security/advisory/2023-12-13/#SECURITY-3184",
    "versions": [
      {
        "lastVersion": "2.0",
        "pattern": ".*"
      }
    ]
  },
  {
    "id": "SECURITY-3203",
    "type": "plugin",
    "name": "nexus-jenkins-plugin",
    "message": "CSRF vulnerability and missing permission checks allow capturing credentials",
    "url": "https://www.jenkins.io/security/advisory/2023-12-13/#SECURITY-3203",
    "versions": [
      {
        "lastVersion": "3.18.0-03",
        "pattern": "(1|3[.]([0-9]|1[0-7]|18[.]0))(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-3204",
    "type": "plugin",
    "name": "nexus-jenkins-plugin",
    "message": "CSRF vulnerability and missing permission checks allow XXE",
    "url": "https://www.jenkins.io/security/advisory/2023-12-13/#SECURITY-3204",
    "versions": [
      {
        "lastVersion": "3.18.0-03",
        "pattern": "(1|3[.]([0-9]|1[0-7]|18[.]0))(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-3205",
    "type": "plugin",
    "name": "scriptler",
    "message": "Arbitrary file deletion vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2023-12-13/#SECURITY-3205",
    "versions": [
      {
        "lastVersion": "342.v6a_89fd40f466",
        "pattern": "(3|318|321|33[48]|342)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-3206",
    "type": "plugin",
    "name": "scriptler",
    "message": "Missing permission check",
    "url": "https://www.jenkins.io/security/advisory/2023-12-13/#SECURITY-3206",
    "versions": [
      {
        "lastVersion": "342.v6a_89fd40f466",
        "pattern": "(3|318|321|33[48]|342)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-3327",
    "type": "plugin",
    "name": "analysis-model-api",
    "message": "DoS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2023-12-13/#SECURITY-3327",
    "versions": [
      {
        "lastVersion": "11.11.0",
        "pattern": "([1-9]|10|11[.][0-9]|11[.]1[01])(|[.-].+)"
      }
    ]
  },
  {
    "id": "core-2_442",
    "type": "core",
    "name": "core",
    "message": "Multiple security vulnerabilities in Jenkins 2.441 and earlier, LTS 2.426.2 and earlier",
    "url": "https://www.jenkins.io/security/advisory/2024-01-24/",
    "versions": [
      {
        "lastVersion": "2.441",
        "pattern": "(1|2[.][0-9]|2[.]1[0-9]|2[.]10[0-9]|2[.]11[0-9]|2[.]12[0-9]|2[.]13[0-8]|2[.]14[0-9]|2[.]15[0-9]|2[.]16[0-9]|2[.]17[0-9]|2[.]18[012345679]|2[.]19[0-9]|2[.]2[0-9]|2[.]20[0-9]|2[.]21[012345789]|2[.]22[0-9]|2[.]23[0-9]|2[.]24[0-9]|2[.]25[0-9]|2[.]26[0-9]|2[.]27[0-9]|2[.]28[0-9]|2[.]29[0-9]|2[.]3[0-9]|2[.]30[0-9]|2[.]31[1-9]|2[.]32[0-9]|2[.]33[0-9]|2[.]34[0-9]|2[.]35[0456789]|2[.]36[0-9]|2[.]37[0-9]|2[.]38[0-9]|2[.]39[0-9]|2[.]4[0-9]|2[.]40[012345679]|2[.]41[0-9]|2[.]42[012345789]|2[.]43[0-9]|2[.]441|2[.]5[0-9]|2[.]6[0-9]|2[.]7[0-9]|2[.]8[0-9]|2[.]9[0-9])(|[.-].+)|(2[.]426|2[.]440)"
      },
      {
        "lastVersion": "LTS 2.426.2",
        "pattern": "(1|2[.]107|2[.]121|2[.]138|2[.]150|2[.]164|2[.]176|2[.]19|2[.]190|2[.]204|2[.]222|2[.]235|2[.]249|2[.]263|2[.]277|2[.]289|2[.]303|2[.]319|2[.]32|2[.]332|2[.]346|2[.]361|2[.]375|2[.]387|2[.]401|2[.]414|2[.]426[.][12]|2[.]46|2[.]60|2[.]7|2[.]73|2[.]89)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-2871",
    "type": "plugin",
    "name": "gitlab-branch-source",
    "message": "Non-constant time webhook token comparison",
    "url": "https://www.jenkins.io/security/advisory/2024-01-24/#SECURITY-2871",
    "versions": [
      {
        "lastVersion": "684.vea_fa_7c1e2fe3",
        "pattern": "(1|62[13589]|63[036]|64[02345679]|65[09]|66[034]|67[01279]|68[04])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-3005",
    "type": "plugin",
    "name": "qualys-pc",
    "message": "XXE vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2024-01-24/#SECURITY-3005",
    "versions": [
      {
        "lastVersion": "1.0.5",
        "pattern": "(1[.]0[.][0-5])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-3006",
    "type": "plugin",
    "name": "qualys-pc",
    "message": "Stored XSS vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2024-01-24/#SECURITY-3006",
    "versions": [
      {
        "lastVersion": "1.0.5",
        "pattern": "(1[.]0[.][0-5])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-3007",
    "type": "plugin",
    "name": "qualys-pc",
    "message": "Incorrect permission checks allow capturing credentials",
    "url": "https://www.jenkins.io/security/advisory/2024-01-24/#SECURITY-3007",
    "versions": [
      {
        "lastVersion": "1.0.5",
        "pattern": "(1[.]0[.][0-5])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-3040",
    "type": "plugin",
    "name": "gitlab-branch-source",
    "message": "Shared projects are unconditionally discovered",
    "url": "https://www.jenkins.io/security/advisory/2024-01-24/#SECURITY-3040",
    "versions": [
      {
        "lastVersion": "684.vea_fa_7c1e2fe3",
        "pattern": "(1|62[13589]|63[036]|64[02345679]|65[09]|66[034]|67[01279]|68[04])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-3251",
    "type": "plugin",
    "name": "gitlab-branch-source",
    "message": "CSRF vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2024-01-24/#SECURITY-3251",
    "versions": [
      {
        "lastVersion": "684.vea_fa_7c1e2fe3",
        "pattern": "(1|62[13589]|63[036]|64[02345679]|65[09]|66[034]|67[01279]|68[04])(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-3289",
    "type": "plugin",
    "name": "matrix-project",
    "message": "Path traversal vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2024-01-24/#SECURITY-3289",
    "versions": [
      {
        "lastVersion": "822.v01b_8c85d16d2",
        "pattern": "(1|75[18]|77[12]|78[59]|80[28]|818|822[.]v01b_8c85d16d2)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-3319",
    "type": "plugin",
    "name": "git-server",
    "message": "Arbitrary file read vulnerability can lead to RCE",
    "url": "https://www.jenkins.io/security/advisory/2024-01-24/#SECURITY-3319",
    "versions": [
      {
        "lastVersion": "99.va_0826a_b_cdfa_d",
        "pattern": "(1|99[.]va_0826a_b_cdfa_d)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-3322",
    "type": "plugin",
    "name": "redhat-dependency-analytics",
    "message": "Content-Security-Policy protection for user content disabled",
    "url": "https://www.jenkins.io/security/advisory/2024-01-24/#SECURITY-3322",
    "versions": [
      {
        "lastVersion": "0.7.1",
        "pattern": "(0[.]7)(|[.-].+)"
      }
    ]
  },
  {
    "id": "SECURITY-3334",
    "type": "plugin",
    "name": "log-command",
    "message": "Arbitrary file read vulnerability",
    "url": "https://www.jenkins.io/security/advisory/2024-01-24/#SECURITY-3334",
    "versions": [
      {
        "lastVersion": "1.0.2",
        "pattern": ".*"
      }
    ]
  }
]