CVE-2022-45379: Jenkins Script Security

High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days.

Jenkins Script Security Plugin 1189.vb_a_b_7c8fd5fde and earlier stores whole-script approvals as the SHA-1 hash of the script, making it vulnerable to collision attacks.

Affected products

• Jenkins Script Security: before 1190.v65867a_a_47126 (fixed in 1190.v65867a_a_47126)

Published 2022-11-15. Last modified 2026-06-17.