Jenkins Security Advisory 2026-09-16
Jenkins released a security advisory patching vulnerabilities across 13 plugins, including GitLab, Bitbucket, Gradle, Keycloak Authentication, and Script Security.
The Jenkins security advisory dated September 16, 2026 addresses vulnerabilities in 13 plugins: Bitbucket Push and Pull Request, Bitbucket Server Integration, Coverage, Gitee, GitLab, Gradle, Keycloak Authentication, OWASP Dependency-Check, Pipeline: Groovy Libraries, Pipeline: Multibranch, Robot Framework, Script Security, and Warnings. Jenkins users should update the affected plugins to the patched versions listed in the advisory.
- Advisory covers 13 plugins spanning SCM integrations, pipeline libraries, and authentication.
- Users should update all listed plugins to their patched versions.
Affects plugin: Bitbucket Push and Pull Request Affects plugin: Bitbucket Server Integration Affects plugin: Coverage Affects plugin: Gitee Affects plugin: GitLab Affects plugin: Gradle Affects plugin: Keycloak Authentication Affects plugin: OWASP Dependency-Check Affects plugin: Pipeline: Groovy Libraries Affects plugin: Pipeline: Multibranch Affects plugin: Robot Framework Affects plugin: Script Security Affects plugin: Warnings
This source does not provide full text. Read it at jenkins.io.