https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2022-25171.htmlhttps://patchthecve.com/cve/CVE-2022-25171.htmlWed, 17 Jun 2026 04:33:08 +0000HIGH 7.4: The package p4 before 0.0.7 are vulnerable to Command Injection via the run() function due to improper input sanitizationhttps://patchthecve.com/cve/CVE-2021-21655.htmlhttps://patchthecve.com/cve/CVE-2021-21655.htmlWed, 17 Jun 2026 03:35:56 +0000HIGH 7.1: A cross-site request forgery (CSRF) vulnerability in Jenkins P4 Plugin 1.11.4 and earlier allows attackers to connect to an attacker-specified Perforce server using attacker-specified username and password.https://patchthecve.com/cve/CVE-2021-21654.htmlhttps://patchthecve.com/cve/CVE-2021-21654.htmlWed, 17 Jun 2026 03:35:56 +0000MEDIUM 4.3: Jenkins P4 Plugin 1.11.4 and earlier does not perform permission checks in multiple HTTP endpoints, allowing attackers with Overall/Read permission to connect to an attacker-specified Perforce server using attacker-specified username and password.