https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2023-49673.htmlhttps://patchthecve.com/cve/CVE-2023-49673.htmlWed, 17 Jun 2026 06:36:17 +0000HIGH 8.8: A cross-site request forgery (CSRF) vulnerability in Jenkins NeuVector Vulnerability Scanner Plugin 1.22 and earlier allows attackers to connect to an attacker-specified hostname and port using attacker-specified username and password.https://patchthecve.com/cve/CVE-2023-49656.htmlhttps://patchthecve.com/cve/CVE-2023-49656.htmlWed, 17 Jun 2026 06:36:16 +0000CRITICAL 9.8: Jenkins MATLAB Plugin 2.11.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.https://patchthecve.com/cve/CVE-2023-49655.htmlhttps://patchthecve.com/cve/CVE-2023-49655.htmlWed, 17 Jun 2026 06:36:16 +0000HIGH 8.8: A cross-site request forgery (CSRF) vulnerability in Jenkins MATLAB Plugin 2.11.0 and earlier allows attackers to have Jenkins parse an XML file from the Jenkins controller file system.https://patchthecve.com/cve/CVE-2023-49654.htmlhttps://patchthecve.com/cve/CVE-2023-49654.htmlWed, 17 Jun 2026 06:36:16 +0000CRITICAL 9.8: Missing permission checks in Jenkins MATLAB Plugin 2.11.0 and earlier allow attackers to have Jenkins parse an XML file from the Jenkins controller file system.https://patchthecve.com/cve/CVE-2021-28967.htmlhttps://patchthecve.com/cve/CVE-2021-28967.htmlWed, 17 Jun 2026 03:47:06 +0000CRITICAL 9.8: The unofficial MATLAB extension before 2.0.1 for Visual Studio Code allows attackers to execute arbitrary code via a crafted workspace because of lint configuration settings.