{"action":"Upgrade org.jenkins-ci.plugins:script-security to 1402.v94c9ce464861 or later.","affected":[{"fixed":"1402.v94c9ce464861","introduced":"0"}],"component":"org.jenkins-ci.plugins:script-security","cve_ids":["CVE-2026-42519"],"ecosystem":"Maven","epss":0.00174,"exploited":false,"fixed_versions":["1402.v94c9ce464861"],"ghsa_id":"GHSA-p334-gfhq-c7w6","id":"tcs_01M5N969DY8Y1Z91SM89PZYP6Y","modified_at":"2026-09-10T03:51:02.387942628Z","published_at":"2026-04-29T15:30:38Z","references":["https://osv.dev/vulnerability/GHSA-p334-gfhq-c7w6","https://nvd.nist.gov/vuln/detail/CVE-2026-42519","https://github.com/jenkinsci/script-security-plugin","https://www.jenkins.io/security/advisory/2026-04-29/#SECURITY-3662"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-p334-gfhq-c7w6","url":"https://osv.dev/vulnerability/GHSA-p334-gfhq-c7w6"}],"summary":"Jenkins Script Security Plugin: Missing permission checks allow enumeration of pending and approved classpaths"}