PatchTheCVEscript security vulnerabilities and fixes
Recent CVEs affecting script security, with upgrade or downgrade steps. 2 tracked.
Also searched as: scriptsecurity.
script security has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2026-06-24. Highest priority: CVE-2026-57280 (score 42/100).
- CVE-2026-57280 HIGH 8.8 UPGRADE Jenkins Script Security Plugin 1402.v94c9ce464861 and earlier does not intercept the implicit type casts appli
- CVE-2026-57281 HIGH 7.5 UPGRADE Jenkins Script Security Plugin 1402.v94c9ce464861 and earlier does not reject Groovy AST transformation annota
FAQ
How do I fix script security vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is script security being exploited right now?
None of the tracked script security CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which script security CVE should I patch first?
CVE-2026-57280 currently ranks highest (42/100): Jenkins Script Security Plugin 1402.v94c9ce464861 and earlier does not intercept the implicit type casts appli.