{"action":"Upgrade org.jenkins-ci.plugins:github-branch-source to 1967.1969.v205fd594c821 or later.","affected":[{"fixed":"1967.1969.v205fd594c821","introduced":"0"}],"component":"org.jenkins-ci.plugins:github-branch-source","cve_ids":["CVE-2026-42522"],"ecosystem":"Maven","epss":0.00184,"exploited":false,"fixed_versions":["1967.1969.v205fd594c821"],"ghsa_id":"GHSA-wg26-8wmj-cf9p","id":"tcs_01M5N9GA51EX6CFQBC4THK6R0E","modified_at":"2026-05-06T23:11:24.107078Z","published_at":"2026-04-29T15:30:38Z","references":["https://osv.dev/vulnerability/GHSA-wg26-8wmj-cf9p","https://nvd.nist.gov/vuln/detail/CVE-2026-42522","https://www.jenkins.io/security/advisory/2026-04-29/#SECURITY-3702"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-wg26-8wmj-cf9p","url":"https://osv.dev/vulnerability/GHSA-wg26-8wmj-cf9p"}],"summary":"Jenkins GitHub Branch Source Plugin: Missing permissions check allows attackers to perform a connection test"}