{"action":"Upgrade org.jenkins-ci.plugins:script-security to 1.54 or later.","affected":[{"fixed":"1.54","introduced":"0"}],"component":"org.jenkins-ci.plugins:script-security","cve_ids":["CVE-2019-1003029"],"ecosystem":"Maven","epss":0.7444,"exploited":true,"fixed_versions":["1.54"],"ghsa_id":"GHSA-xvxq-hq48-xphm","id":"tcs_01M5N9K23G5KXVYWAA6CBTT5JF","modified_at":"2025-10-22T19:25:10.586219Z","published_at":"2022-05-13T01:00:55Z","references":["https://osv.dev/vulnerability/GHSA-xvxq-hq48-xphm","https://nvd.nist.gov/vuln/detail/CVE-2019-1003029","https://access.redhat.com/errata/RHSA-2019:0739","https://github.com/jenkinsci/script-security-plugin","https://jenkins.io/security/advisory/2019-03-06/#SECURITY-1336%20%281%29","https://jenkins.io/security/advisory/2019-03-06/#SECURITY-1336%20(1)","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-1003029","http://packetstormsecurity.com/files/166778/Jenkins-Remote-Code-Execution.html"],"severity":{"label":"critical","score":9.9},"sources":[{"source":"osv","source_id":"GHSA-xvxq-hq48-xphm","url":"https://osv.dev/vulnerability/GHSA-xvxq-hq48-xphm"},{"source":"kev","source_id":"CVE-2019-1003029","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"}],"summary":"Sandbox bypass in Script Security Plugin"}