StackRadar

CVE-2026-57282

Medium

Advisory

Published 24 Jun 2026In the index since 26 Sept 2026
Severity
Medium
worst across findings
CVSS
5.0
base score, highest
EPSS
0.003
16th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1
of 18,143 indexed, latest versions
Container images
1
deployed by those charts
Fix available
1 of 1
affected package

Jenkins Git client Plugin has an OS command injection vulnerability on agents

Carried by container images the latest versions of 1 of 18,143 indexed charts deploy, on 1 image.

Affected packageAffected versionsFixed inImages
git-clientmaven5.0.06.6.11
OSV records
GHSA-wp5x-hrrw-6r4g

Charts affected

1 by stars
ChartLatestAffected imagesRadar Score
my-bloody-jenkinsodavid0.1.2181 of 1See more

my-bloody-jenkins odavid 0.1.218

1 of the 1 container images this version deploys carry CVE-2026-57282.

Container imageDigestPackageFixed in
odavid/my-bloody-jenkins:2.462.3-306e7ab3bbc948e
git-client@5.0.0
6.6.1

Open the chart page →

7,146

Container images carrying it

1 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
odavid/my-bloody-jenkins:2.462.3-306e7ab3bbc948e
git-client@5.0.0
6.6.1
1

syft 1.42.1 · advisories as of 17 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.