StackRadarChart IndexLive demo

CVE-2026-42519

Medium

Advisory

Published 29 Apr 2026In the index since 6 Sept 2026

Severity: Medium; worst across findings
CVSS: 4.3; base score, highest
EPSS: 0.002; 7th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 8; of 17,787 indexed, latest versions
Container images: 6; deployed by those charts
Fix available: 1 of 1; affected package

Jenkins Script Security Plugin: Missing permission checks allow enumeration of pending and approved classpaths

Carried by container images the latest versions of 8 of 17,787 indexed charts deploy, on 6 images.

Affected package	Affected versions	Fixed in	Images
script-securitymaven	1.18.1, 1251.vfe552ed55f8d, 1326.vdb_c154de8669, 1341.va_2819b_414686+2 more	1402.v94c9ce464861	6

OSV records: GHSA-p334-gfhq-c7w6

Charts affected

8 by stars

Chart

Latest

Affected images

Radar Score

1 of 2 See more

jenkins jkim 5.5.14

1 of the 2 container images this version deploys carry CVE-2026-42519.

Container image	Digest	Package	Fixed in
jenkins/jenkins :2.462.2-jdk17	95313257a8cd	script-security@1341.va_2819b_414686	1402.v94c9ce464861

Open the chart page →

7,393

jenkinstestchart

1 of 2 See more

jenkins testchart 0.1.9

1 of the 2 container images this version deploys carry CVE-2026-42519.

Container image	Digest	Package	Fixed in
jenkins/jenkins :2.426.1-jdk11	b470bcdc4ecd	script-security@1251.vfe552ed55f8d	1402.v94c9ce464861

Open the chart page →

9,108

jenkinstest-jenkins

1 of 2 See more

jenkins test-jenkins 9.1.0

1 of the 2 container images this version deploys carry CVE-2026-42519.

Container image	Digest	Package	Fixed in
jenkins/jenkins :2.426.1-jdk11	b470bcdc4ecd	script-security@1251.vfe552ed55f8d	1402.v94c9ce464861

Open the chart page →

9,108

jenkinsbook-k8sinfra-v2

1 of 2 See more

jenkins book-k8sinfra-v2 5.1.12

1 of the 2 container images this version deploys carry CVE-2026-42519.

Container image	Digest	Package	Fixed in
jenkins/jenkins :2.440.3-jdk17	de4fea113221	script-security@1326.vdb_c154de8669	1402.v94c9ce464861

Open the chart page →

7,627

clusterfactoryclusterfactory

1 of 5 See more

clusterfactory clusterfactory 0.2.0

1 of the 5 container images this version deploys carry CVE-2026-42519.

Container image	Digest	Package	Fixed in
jenkins/jenkins :2.541.3-jdk21	c4098086090c	script-security@1385.v7d2d9ec4d909	1402.v94c9ce464861

Open the chart page →

7,136

gitea-jenkinsclusterfactory

1 of 5 See more

gitea-jenkins clusterfactory 0.1.1

1 of the 5 container images this version deploys carry CVE-2026-42519.

Container image	Digest	Package	Fixed in
jenkins/jenkins :2.541.3-jdk21	c4098086090c	script-security@1385.v7d2d9ec4d909	1402.v94c9ce464861

Open the chart page →

6,926

jenkinsjenkins-x

1 of 2 See more

jenkins jenkins-x 0.10.38

1 of the 2 container images this version deploys carry CVE-2026-42519.

Container image	Digest	Package	Fixed in
jenkinsci/jenkins :2.67	a1f33f004659	script-security@1.18.1	1402.v94c9ce464861

Open the chart page →

10,682

my-bloody-jenkinsodavid

1 of 1 See more

my-bloody-jenkins odavid 0.1.218

1 of the 1 container images this version deploys carry CVE-2026-42519.

Container image	Digest	Package	Fixed in
odavid/my-bloody-jenkins :2.462.3-306	e7ab3bbc948e	script-security@1362.v67dc1f0e1b_b_3	1402.v94c9ce464861

Open the chart page →

5,825

Container images carrying it

6 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
jenkins/jenkins :2.426.1-jdk11	b470bcdc4ecd	script-security@1251.vfe552ed55f8d	1402.v94c9ce464861	2
jenkins/jenkins :2.541.3-jdk21	c4098086090c	script-security@1385.v7d2d9ec4d909	1402.v94c9ce464861	2
jenkinsci/jenkins :2.67	a1f33f004659	script-security@1.18.1	1402.v94c9ce464861	1
jenkins/jenkins :2.462.2-jdk17	95313257a8cd	script-security@1341.va_2819b_414686	1402.v94c9ce464861	1
jenkins/jenkins :2.440.3-jdk17	de4fea113221	script-security@1326.vdb_c154de8669	1402.v94c9ce464861	1
odavid/my-bloody-jenkins :2.462.3-306	e7ab3bbc948e	script-security@1362.v67dc1f0e1b_b_3	1402.v94c9ce464861	1