CVE-2019-16555: Jenkins Build Failure Analyzer

Medium severity, CVSS 6.5. EPSS: 1.1% chance of exploitation in the next 30 days.

A user-supplied regular expression in Jenkins Build Failure Analyzer Plugin 1.24.1 and earlier was processed in a way that wasn't interruptible, allowing attackers to have Jenkins evaluate a regular expression without the ability to interrupt this process.

Affected products

• Jenkins Build Failure Analyzer: up to and including 1.24.1

Published 2019-12-17. Last modified 2026-06-17.