Maven/org.jenkins-ci.plugins:gitee CVE-2026-57291: medium 5.4, EPSS 0.23%

Jenkins Gitee Plugin missing permission checks

Action: Upgrade org.jenkins-ci.plugins:gitee to 1292.v2559f2f3f2c0 or later.

Affected

Fixed versions

Sources

• osv: GHSA-wjmq-rpqq-w4h9
• https://nvd.nist.gov/vuln/detail/CVE-2026-57291
• https://github.com/jenkinsci/gitee-plugin/pull/199
• https://github.com/jenkinsci/gitee-plugin/commit/2559f2f3f2c02659d9abe5ab3d66c13cef9278dc
• https://github.com/jenkinsci/gitee-plugin
• https://github.com/jenkinsci/gitee-plugin/releases/tag/1292.v2559f2f3f2c0
• https://www.jenkins.io/security/advisory/2026-06-24/#SECURITY-3762%20(1)

CVE-2026-57291 · published 2026-06-24T15:31:47Z · modified 2026-09-25T19:30:10.031307744Z · JSON