diff --git a/advisories/github-reviewed/2022/11/GHSA-3g9q-cmgv-g4p6/GHSA-3g9q-cmgv-g4p6.json b/advisories/github-reviewed/2022/11/GHSA-3g9q-cmgv-g4p6/GHSA-3g9q-cmgv-g4p6.json index d3398699afd..8158bad7805 100644 --- a/advisories/github-reviewed/2022/11/GHSA-3g9q-cmgv-g4p6/GHSA-3g9q-cmgv-g4p6.json +++ b/advisories/github-reviewed/2022/11/GHSA-3g9q-cmgv-g4p6/GHSA-3g9q-cmgv-g4p6.json @@ -43,6 +43,10 @@ "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-45381" }, + { + "type": "WEB", + "url": "https://github.com/jenkinsci/pipeline-utility-steps-plugin/commit/01be8ac0045027128fc1e9cf3a8b0709d08291ea" + }, { "type": "PACKAGE", "url": "https://github.com/jenkinsci/pipeline-utility-steps-plugin" diff --git a/advisories/github-reviewed/2023/05/GHSA-38hw-368m-7jmg/GHSA-38hw-368m-7jmg.json b/advisories/github-reviewed/2023/05/GHSA-38hw-368m-7jmg/GHSA-38hw-368m-7jmg.json index 881cbd10279..ff27091ba1f 100644 --- a/advisories/github-reviewed/2023/05/GHSA-38hw-368m-7jmg/GHSA-38hw-368m-7jmg.json +++ b/advisories/github-reviewed/2023/05/GHSA-38hw-368m-7jmg/GHSA-38hw-368m-7jmg.json @@ -40,6 +40,10 @@ "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-32982" }, + { + "type": "WEB", + "url": "https://github.com/jenkinsci/ansible-plugin/commit/4cbc48657c21a65a917b3b3049918480198c0cfb" + }, { "type": "WEB", "url": "https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-3017" diff --git a/advisories/github-reviewed/2023/08/GHSA-36fg-whr2-g999/GHSA-36fg-whr2-g999.json b/advisories/github-reviewed/2023/08/GHSA-36fg-whr2-g999/GHSA-36fg-whr2-g999.json index ceaa480d40a..c02eca75c6c 100644 --- a/advisories/github-reviewed/2023/08/GHSA-36fg-whr2-g999/GHSA-36fg-whr2-g999.json +++ b/advisories/github-reviewed/2023/08/GHSA-36fg-whr2-g999/GHSA-36fg-whr2-g999.json @@ -1,13 +1,13 @@ { "schema_version": "1.4.0", "id": "GHSA-36fg-whr2-g999", - "modified": "2023-08-16T21:13:10Z", + "modified": "2024-01-04T12:09:17Z", "published": "2023-08-16T15:30:18Z", "aliases": [ "CVE-2023-40340" ], "summary": "Jenkins NodeJS Plugin improper credential masking vulnerability", - "details": "Jenkins NodeJS Plugin integrates with Config File Provider Plugin to specify custom NPM settings, including credentials for authentication, in a Npm config file.\n\nNodeJS Plugin 1.6.0 and earlier does not properly mask (i.e., replace with asterisks) credentials specified in the Npm config file in Pipeline build logs.\n\nNodeJS Plugin 1.6.0.1 masks credentials specified in the Npm config file in Pipeline build logs.", + "details": "Jenkins NodeJS Plugin integrates with Config File Provider Plugin to specify custom NPM settings, including credentials for authentication, in a Npm config file.\n\nNodeJS Plugin 1.6.0 and earlier does not properly mask (i.e., replace with asterisks) credentials specified in the Npm config file in Pipeline build logs.\n\nNodeJS Plugin 1.6.1 masks credentials specified in the Npm config file in Pipeline build logs.", "severity": [ { "type": "CVSS_V3", @@ -28,7 +28,7 @@ "introduced": "0" }, { - "fixed": "1.6.0.1" + "fixed": "1.6.1" } ] } @@ -40,6 +40,10 @@ "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-40340" }, + { + "type": "WEB", + "url": "https://github.com/jenkinsci/nodejs-plugin/commit/a2198feb53765f0b1f063b1827e90473a60a25a0" + }, { "type": "WEB", "url": "https://www.jenkins.io/security/advisory/2023-08-16/#SECURITY-3196"