{"action":"Upgrade io.jenkins:configuration-as-code to 0.8-alpha or later.","affected":[{"fixed":"0.8-alpha","introduced":"0"}],"component":"io.jenkins:configuration-as-code","cve_ids":["CVE-2018-1000610"],"ecosystem":"Maven","epss":0.00896,"exploited":false,"fixed_versions":["0.8-alpha"],"ghsa_id":"GHSA-8486-h39x-cx2f","id":"tcs_01M5N8KQ5A70KBJQKY6K3V594S","modified_at":"2023-11-08T03:59:39.576818Z","published_at":"2022-05-13T01:48:39Z","references":["https://osv.dev/vulnerability/GHSA-8486-h39x-cx2f","https://nvd.nist.gov/vuln/detail/CVE-2018-1000610","https://jenkins.io/security/advisory/2018-06-25/#SECURITY-929"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-8486-h39x-cx2f","url":"https://osv.dev/vulnerability/GHSA-8486-h39x-cx2f"}],"summary":"Jenkins Configuration as Code Plugin has Insufficiently Protected Credentials"}