Jenkins vulnerabilities

1,824 CVEs affecting Jenkins products, 7 known to be exploited (CISA KEV), with EPSS scores. Most affected: Jenkins, Script Security, Pipeline: Groovy, Active Directory, Blue Ocean.