{"action":"Upgrade jenkins to 2.164.2-r0 or later.","affected":[{"fixed":"2.164.2-r0","introduced":"0"}],"component":"jenkins","cve_ids":[],"ecosystem":"Alpine","ecosystem_qualifier":"Alpine:v3.9","exploited":false,"fixed_versions":["2.164.2-r0"],"id":"tcs_01M6GP23RVNKY28WVMMTEW8AA0","modified_at":"2026-11-03T06:32:28.829851557Z","published_at":"2019-04-10T21:29:01.480Z","references":["https://osv.dev/vulnerability/ALPINE-CVE-2019-1003049","https://security.alpinelinux.org/vuln/CVE-2019-1003049"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"ALPINE-CVE-2019-1003049","url":"https://osv.dev/vulnerability/ALPINE-CVE-2019-1003049"}],"summary":"Users who cached their CLI authentication before Jenkins was updated to 2.150.2 and newer, or 2.160 and newer, would remain authenticated in Jenkins 2.171 and earlier and Jenkins LTS 2.164.1 and earli"}