| Package | Affected versions | Patched versions |
|---|---|---|
| org.jenkins-ci.main:jenkins-core | ≥ 2.34, < 2.44< 2.32.2 | 2.442.32.2 |
| jenkins | ≤ 2.44< 2.32.2 | 2.32.2 |
Jenkins before versions 2.44, 2.32.2 is vulnerable to a remote code execution vulnerability involving the deserialization of various types in javax.imageio in XStream-based APIs (SECURITY-383).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free