Maven/org.jenkins-ci.plugins:nuget CVE-2021-21658: critical 9.1, EPSS 1.54%

XML external entity vulnerability in Jenkins Nuget Plugin

Action: Upgrade org.jenkins-ci.plugins:nuget to 1.1 or later.

Affected

Fixed versions

Sources

• osv: GHSA-p674-hh8x-rv5h
• https://nvd.nist.gov/vuln/detail/CVE-2021-21658
• https://github.com/jenkinsci/nuget-plugin/commit/542bf38ac52f045741a5670e1644af351878f7e0
• https://github.com/jenkinsci/nuget-plugin/commit/c8ed4cb5b1c42f3c407f9f418b4e0b4274bea5a9
• https://github.com/jenkinsci/nuget-plugin
• https://www.jenkins.io/security/advisory/2021-05-25/#SECURITY-2340
• http://www.openwall.com/lists/oss-security/2021/05/25/3

CVE-2021-21658 · published 2022-05-24T19:03:11Z · modified 2024-02-16T08:15:31.353768Z · JSON