CVE-2022-30945: Jenkins Pipeline: Groovy

High severity, CVSS 8.5. EPSS: 1.4% chance of exploitation in the next 30 days.

Jenkins Pipeline: Groovy Plugin 2689.v434009a_31b_f1 and earlier allows loading any Groovy source files on the classpath of Jenkins and Jenkins plugins in sandboxed pipelines.

Affected products

• Jenkins Pipeline: Groovy: before 2689.v434009a_31b_f1 (fixed in 2689.v434009a_31b_f1)

Published 2022-05-17. Last modified 2026-06-17.