StackRadarChart IndexLive demo

CVE-2026-57280

High

Advisory

Published 24 Jun 2026In the index since 26 Sept 2026

Severity: High; worst across findings
CVSS: 8.8; base score, highest
EPSS: 0.005; 42nd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 9; of 17,985 indexed, latest versions
Container images: 7; deployed by those charts
Fix available: 1 of 1; affected package

Jenkins Script Security Plugin sandbox bypass vulnerability

Carried by container images the latest versions of 9 of 17,985 indexed charts deploy, on 7 images.

Affected package	Affected versions	Fixed in	Images
script-securitymaven	1.18.1, 1.75, 1251.vfe552ed55f8d, 1326.vdb_c154de8669+3 more	1402.1405.vc96e74964250	7

OSV records: GHSA-c3jm-9vj7-5v66

Charts affected

9 by stars

Chart

Latest

Affected images

Radar Score

jenkinshelm-chart-to-deploy-jenkins

1 of 1 See more

jenkins helm-chart-to-deploy-jenkins 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-57280.

Container image	Digest	Package	Fixed in
anuja9431/jenkins-image :v1	994f35723cb4	script-security@1.75	1402.1405.vc96e74964250

Open the chart page →

4,158

1 of 2 See more

jenkins jkim 5.5.14

1 of the 2 container images this version deploys carry CVE-2026-57280.

Container image	Digest	Package	Fixed in
jenkins/jenkins :2.462.2-jdk17	95313257a8cd	script-security@1341.va_2819b_414686	1402.1405.vc96e74964250

Open the chart page →

7,833

jenkinstestchart

1 of 2 See more

jenkins testchart 0.1.9

1 of the 2 container images this version deploys carry CVE-2026-57280.

Container image	Digest	Package	Fixed in
jenkins/jenkins :2.426.1-jdk11	b470bcdc4ecd	script-security@1251.vfe552ed55f8d	1402.1405.vc96e74964250

Open the chart page →

9,505

jenkinstest-jenkins

1 of 2 See more

jenkins test-jenkins 9.1.0

1 of the 2 container images this version deploys carry CVE-2026-57280.

Container image	Digest	Package	Fixed in
jenkins/jenkins :2.426.1-jdk11	b470bcdc4ecd	script-security@1251.vfe552ed55f8d	1402.1405.vc96e74964250

Open the chart page →

9,505

jenkinsbook-k8sinfra-v2

1 of 2 See more

jenkins book-k8sinfra-v2 5.1.12

1 of the 2 container images this version deploys carry CVE-2026-57280.

Container image	Digest	Package	Fixed in
jenkins/jenkins :2.440.3-jdk17	de4fea113221	script-security@1326.vdb_c154de8669	1402.1405.vc96e74964250

Open the chart page →

8,740

clusterfactoryclusterfactory

1 of 5 See more

clusterfactory clusterfactory 0.2.0

1 of the 5 container images this version deploys carry CVE-2026-57280.

Container image	Digest	Package	Fixed in
jenkins/jenkins :2.541.3-jdk21	c4098086090c	script-security@1385.v7d2d9ec4d909	1402.1405.vc96e74964250

Open the chart page →

7,799

gitea-jenkinsclusterfactory

1 of 5 See more

gitea-jenkins clusterfactory 0.1.1

1 of the 5 container images this version deploys carry CVE-2026-57280.

Container image	Digest	Package	Fixed in
jenkins/jenkins :2.541.3-jdk21	c4098086090c	script-security@1385.v7d2d9ec4d909	1402.1405.vc96e74964250

Open the chart page →

7,572

jenkinsjenkins-x

1 of 2 See more

jenkins jenkins-x 0.10.38

1 of the 2 container images this version deploys carry CVE-2026-57280.

Container image	Digest	Package	Fixed in
jenkinsci/jenkins :2.67	a1f33f004659	script-security@1.18.1	1402.1405.vc96e74964250

Open the chart page →

10,680

my-bloody-jenkinsodavid

1 of 1 See more

my-bloody-jenkins odavid 0.1.218

1 of the 1 container images this version deploys carry CVE-2026-57280.

Container image	Digest	Package	Fixed in
odavid/my-bloody-jenkins :2.462.3-306	e7ab3bbc948e	script-security@1362.v67dc1f0e1b_b_3	1402.1405.vc96e74964250

Open the chart page →

6,103

Container images carrying it

7 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
jenkins/jenkins :2.426.1-jdk11	b470bcdc4ecd	script-security@1251.vfe552ed55f8d	1402.1405.vc96e74964250	2
jenkins/jenkins :2.541.3-jdk21	c4098086090c	script-security@1385.v7d2d9ec4d909	1402.1405.vc96e74964250	2
anuja9431/jenkins-image :v1	994f35723cb4	script-security@1.75	1402.1405.vc96e74964250	1
jenkinsci/jenkins :2.67	a1f33f004659	script-security@1.18.1	1402.1405.vc96e74964250	1
jenkins/jenkins :2.462.2-jdk17	95313257a8cd	script-security@1341.va_2819b_414686	1402.1405.vc96e74964250	1
jenkins/jenkins :2.440.3-jdk17	de4fea113221	script-security@1326.vdb_c154de8669	1402.1405.vc96e74964250	1
odavid/my-bloody-jenkins :2.462.3-306	e7ab3bbc948e	script-security@1362.v67dc1f0e1b_b_3	1402.1405.vc96e74964250	1