Approved changes feed: RSS · Atom

cpe:2.3:a:jenkins:red_hat_dependency_analytics:*:*:*:*:*:jenkins:*:*

part: a version: * update: *

VendorJenkins (d708d718-2e77-5ca3-ae9c-38ee4d256744)
ProductRed Hat Dependency Analytics (1e9ef81c-c5f5-5b6b-8a23-d64a48f417b4)
Edition*
Language*
Software edition*
Target softwarejenkins
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/jenkinsci/redhat-dependency-analytics-plugin purl2cpe 2026-06-01 10:14:15.817393

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-23905 vulnerable 2026-06-08 06:29:40.848990 Details available
Jenkins Red Hat Dependency Analytics Plugin 0.7.1 and earlier programmatically disables Content-Security-Policy protection for user-generated content in workspaces, archived artifacts, etc. that Jenkins offers for download.
Published: 2024-01-24T17:52:27.960Z
Updated: 2025-06-20T19:33:21.796Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.