CVE-2019-10314: Jenkins Koji

Medium severity, CVSS 5.9. EPSS: 1.5% chance of exploitation in the next 30 days.

Jenkins Koji Plugin disables SSL/TLS and hostname verification globally for the Jenkins master JVM.

Affected products

  • Jenkins Koji: up to and including 0.3

Published 2019-04-30. Last modified 2026-06-17.