Jenkins
1,636 CVEs across 90 months on the top 200 list since Dec 2011. Peak rank #5 in Jun 2022. 5 of them are now in CISA KEV.
Jenkins CVEs per month since Dec 2011
Dec 2021: below the top 200 that month, 2 or fewer CVEsJan 2022: 24 CVEs · 0 critical · 0 now in CISA KEV · rank #37 · mostly Publish Over Ssh, Jenkins Publish Over Ssh Plugin, Jenkins Bitbucket Branch Source PluginFeb 2022: 42 CVEs · 0 critical · 0 now in CISA KEV · rank #21 · mostly Pipeline\, Jenkins Pipeline: Shared Groovy Libraries Plugin, Jenkins Chef Sinatra PluginMar 2022: 52 CVEs · 0 critical · 0 now in CISA KEV · rank #17 · mostly Jenkins Pipeline: Phoenix Autotest Plugin, Jenkins Kubernetes Continuous Deploy Plugin, Jenkins Extended Choice Parameter PluginApr 2022: 17 CVEs · 0 critical · 0 now in CISA KEV · rank #38 · mostly Promoted Builds, Subversion, Jenkins Subversion PluginMay 2022: 28 CVEs · 0 critical · 0 now in CISA KEV · rank #29 · mostly Autocomplete Parameter, Ssh, Blue OceanJun 2022: 86 CVEs · 1 critical · 0 now in CISA KEV · rank #5 · mostly Jenkins, Deployment Dashboard, Jenkins Deployment Dashboard PluginJul 2022: 44 CVEs · 0 critical · 0 now in CISA KEV · rank #19 · mostly Jenkins Openshift Deployer Plugin, Openshift Deployer, Jenkins Coverity PluginAug 2022: 3 CVEs · 0 critical · 0 now in CISA KEV · rank #198 · mostly Collabnet, Git, Jenkins Collabnet Plugins PluginSep 2022: 32 CVEs · 4 critical · 0 now in CISA KEV · rank #28 · mostly Jenkins CONS3RT Plugin, CONS3RT, Jenkins Build-publisher PluginOct 2022: 35 CVEs · 6 critical · 0 now in CISA KEV · rank #27 · mostly Jenkins Compuware Topaz For Total Test Plugin, Pipeline\, Jenkins Katalon PluginNov 2022: 24 CVEs · 4 critical · 0 now in CISA KEV · rank #31 · mostly Jenkins Ns-nd Integration Performance Publisher Plugin, Ns-nd Integration Performance Publisher, Delete LogDec 2022: 7 CVEs · 1 critical · 0 now in CISA KEV · rank #85 · mostly Checkmarx, Custom Build Properties, Google LoginJan 2023: 38 CVEs · 7 critical · 0 now in CISA KEV · rank #18 · mostly Jenkins Jira Pipeline Steps Plugin, Jira Pipeline Steps, Jenkins Orka By Macstadium PluginFeb 2023: 11 CVEs · 1 critical · 0 now in CISA KEV · rank #58 · mostly Email Extension, Jenkins Azure Credentials Plugin, Jenkins Email Extension PluginMar 2023: no snapshot, the run for this month failedApr 2023: 20 CVEs · 0 critical · 0 now in CISA KEV · rank #43 · mostly Jenkins Report Portal Plugin, Report Portal, WSO2 OauthMay 2023: 36 CVEs · 0 critical · 0 now in CISA KEV · rank #18 · mostly Jenkins Saml Single Sign On(Sso) Plugin, Saml Single Sign On, Code DxJun 2023: 10 CVEs · 0 critical · 0 now in CISA KEV · rank #69 · mostly Jenkins Maven Repository Server Plugin, Digital.ai App Management Publisher, Jenkins Digital.ai App Management Publisher PluginJul 2023: 32 CVEs · 0 critical · 0 now in CISA KEV · rank #27 · mostly Mabl, Jenkins Mabl Plugin, Jenkins Sumologic Publisher PluginAug 2023: 19 CVEs · 0 critical · 0 now in CISA KEV · rank #41 · mostly Folders, Fortify, Jenkins Folders PluginSep 2023: 27 CVEs · 0 critical · 0 now in CISA KEV · rank #33 · mostly Jenkins, Aws Codecommit Trigger, Build Failure AnalyzerOct 2023: 13 CVEs · 0 critical · 1 now in CISA KEV · rank #58 · mostly Jenkins Cloudbees Cd Plugin, Jenkins Lambdatest-automation Plugin, Cloudbees CdNov 2023: 7 CVEs · 2 critical · 0 now in CISA KEV · rank #107 · mostly Matlab, Jenkins Matlab Plugin, JiraDec 2023: 16 CVEs · 0 critical · 0 now in CISA KEV · rank #50 · mostly Jenkins Paaslane Estimate Plugin, Nexus Platform, Paaslane EstimateJan 2024: 9 CVEs · 1 critical · 1 now in CISA KEV · rank #86 · mostly Jenkins GitLab Branch Source Plugin, GitHub Branch Source, JenkinsFeb 2024: below the top 200 that month, 4 or fewer CVEsMar 2024: 16 CVEs · 0 critical · 0 now in CISA KEV · rank #46 · mostly Jenkins Html Publisher Plugin, Html Publisher, Docker-build-stepApr 2024: below the top 200 that month, 4 or fewer CVEsMay 2024: 6 CVEs · 1 critical · 0 now in CISA KEV · rank #170 · mostly Script Security, Jenkins Script Security Plugin, Report InfoJun 2024: below the top 200 that month, 4 or fewer CVEsJul 2024: below the top 200 that month, 4 or fewer CVEsAug 2024: below the top 200 that month, 4 or fewer CVEsSep 2024: below the top 200 that month, 3 or fewer CVEsOct 2024: 5 CVEs · 0 critical · 0 now in CISA KEV · rank #141 · mostly Jenkins Openid Connect Authentication Plugin, Jenkins, Openid Connect AuthenticationNov 2024: 8 CVEs · 0 critical · 0 now in CISA KEV · rank #114 · mostly Pipeline\, Authorize Project, Filesystem List ParameterDec 2024: below the top 200 that month, 3 or fewer CVEsJan 2025: 7 CVEs · 0 critical · 0 now in CISA KEV · rank #113 · mostly Jenkins Azure Service Fabric Plugin, Azure Service Fabric, Jenkins Folder-based Authorization Strategy PluginFeb 2025: below the top 200 that month, 3 or fewer CVEsMar 2025: 6 CVEs · 0 critical · 0 now in CISA KEV · rank #149 · mostly Jenkins, Jenkins Zoho Qengine Plugin, Zoho QengineApr 2025: 11 CVEs · 2 critical · 0 now in CISA KEV · rank #74 · mostly Asakusasatellite, Jenkins, Jenkins Asakusasatellite PluginMay 2025: 6 CVEs · 2 critical · 0 now in CISA KEV · rank #129 · mostly Cadence Vmanager, Jenkins Cadence Vmanager Plugin, Openid Connect ProviderJun 2025: below the top 200 that month, 4 or fewer CVEsJul 2025: 32 CVEs · 0 critical · 0 now in CISA KEV · rank #34 · mostly Jenkins Applitools Eyes Plugin, Applitools Eyes, Jenkins Readyapi Functional Testing PluginAug 2025: below the top 200 that month, 4 or fewer CVEsSep 2025: 6 CVEs · 0 critical · 0 now in CISA KEV · rank #123 · mostly Jenkins, Jenkins Global-build-stats Plugin, OpentelemetryOct 2025: 20 CVEs · 0 critical · 0 now in CISA KEV · rank #52 · mostly Jenkins Publish To Bitbucket Plugin, Publish To Bitbucket, ThemisNov 2025: below the top 200 that month, 4 or fewer CVEsDec 2025: 9 CVEs · 0 critical · 0 now in CISA KEV · rank #107 · mostly Jenkins, Redpen - Pipeline Reporter For Jira, CoverageJan 2026: below the top 200 that month, 5 or fewer CVEsFeb 2026: below the top 200 that month, 5 or fewer CVEsMar 2026: below the top 200 that month, 7 or fewer CVEsApr 2026: 7 CVEs · 1 critical · 0 now in CISA KEV · rank #157 · mostly Azure Ad, Credentials Binding, GitHubMay 2026: 13 CVEs · 0 critical · 0 now in CISA KEV · rank #92 · mostly Jenkins Active Directory Plugin, Active Directory, Jenkins Ldap PluginJun 2026: 36 CVEs · 0 critical · 0 now in CISA KEV · rank #24 · mostly Jenkins, Jenkins Assembla Plugin, Jenkins Contrast Continuous Application Security PluginJul 2026: below the top 200 that month, 7 or fewer CVEsAug 2026: 23 CVEs · 1 critical · 0 now in CISA KEV · rank #64 · mostly Jenkins, Jenkins Multijob Plugin, Jenkins Scm-manager PluginSep 2026: 53 CVEs · 0 critical · 0 now in CISA KEV · rank #28 · mostly Jenkins, Script Security, Jenkins Script Security PluginOct 2026: 15 CVEs · 0 critical · 0 now in CISA KEV · rank #126 · mostly JenkinsNov 2026: none that month (the list had room for every one)
In the lens
The products that kept showing up in Jenkins's monthly top three from Dec 2021 to Nov 2026. Move the lens and the list follows.
Year by year
Each year's months on the top 200 list. Pick a year to read it in the lens.
The record
- Peak rank
- #5 in Jun 2022
- Busiest month
- Jun 2022, 86 CVEs
- Months with a KEV entry
- 5 of 90 on the list
- On the top 200 list
- 90 of 162 monthly snapshots