CVE-2026-48917

Medium

Advisory

Published 27 May 2026In the index since 8 Sept 2026

Jenkins LDAP Plugin deserializes data from LDAP referrals without validation

Carried by container images the latest versions of 2 of 17,781 indexed charts deploy, on 2 images.

Affected package	Affected versions	Fixed in	Images
ldapmaven	1.11, 725.v3cb_b_711b_1a_ef	807.809.vd3a	2

2 by stars

Chart

Latest

Affected images

Radar Score

jenkinsjenkins-x

1 of the 2 container images this version deploys carry CVE-2026-48917.

Container image	Digest	Package	Fixed in
jenkinsci/jenkins :2.67	a1f33f004659	ldap@1.11	807.809.vd3a

10,682

1 of the 1 container images this version deploys carry CVE-2026-48917.

Container image	Digest	Package	Fixed in
odavid/my-bloody-jenkins :2.462.3-306	e7ab3bbc948e	ldap@725.v3cb_b_711b_1a_ef	807.809.vd3a

5,826

2 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
jenkinsci/jenkins :2.67	a1f33f004659	ldap@1.11	807.809.vd3a	1
odavid/my-bloody-jenkins :2.462.3-306	e7ab3bbc948e	ldap@725.v3cb_b_711b_1a_ef	807.809.vd3a	1