{"action":"Upgrade org.jenkins-ci.plugins:github-branch-source to 1967.1970 or later.","affected":[{"fixed":"1967.1970","introduced":"0"}],"component":"org.jenkins-ci.plugins:github-branch-source","cve_ids":["CVE-2026-57285"],"ecosystem":"Maven","epss":0.00281,"exploited":false,"fixed_versions":["1967.1970"],"ghsa_id":"GHSA-g7c6-wxjf-8564","id":"tcs_01M5N8XNJQAEC1ATKVA7S5Z2PY","modified_at":"2026-09-25T18:15:04.454372163Z","published_at":"2026-06-24T15:31:47Z","references":["https://osv.dev/vulnerability/GHSA-g7c6-wxjf-8564","https://nvd.nist.gov/vuln/detail/CVE-2026-57285","https://github.com/jenkinsci/github-branch-source-plugin/commit/d869797365462234fe061c74fe6bf0bcae8777ea","https://github.com/jenkinsci/github-branch-source-plugin","https://github.com/jenkinsci/github-branch-source-plugin/releases/tag/1967.1970.vd86979736546","https://www.jenkins.io/security/advisory/2026-06-24/#SECURITY-3808"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-g7c6-wxjf-8564","url":"https://osv.dev/vulnerability/GHSA-g7c6-wxjf-8564"}],"summary":"Jenkins GitHub Branch Source Plugin has missing permission check that allows enumerating GitHub Enterprise server URLs"}