Jenkins
1,621 CVEs across 89 months on the top 200 list since Dec 2011. Peak rank #5 in Jun 2022. 5 of them are now in CISA KEV.
Jenkins CVEs per month since Dec 2011
Oct 2021: 3 CVEs · 0 critical · 0 now in CISA KEV · rank #152 · mostly Jenkins, Git, Jenkins Git PluginNov 2021: 20 CVEs · 10 critical · 0 now in CISA KEV · rank #31 · mostly Jenkins, Jenkins Owasp Dependency-check Plugin, Active ChoicesDec 2021: not on the top 200 that monthJan 2022: 24 CVEs · 0 critical · 0 now in CISA KEV · rank #37 · mostly Publish Over Ssh, Jenkins Publish Over Ssh Plugin, Jenkins Bitbucket Branch Source PluginFeb 2022: 42 CVEs · 0 critical · 0 now in CISA KEV · rank #21 · mostly Pipeline\, Jenkins Pipeline: Shared Groovy Libraries Plugin, Jenkins Chef Sinatra PluginMar 2022: 52 CVEs · 0 critical · 0 now in CISA KEV · rank #17 · mostly Jenkins Pipeline: Phoenix Autotest Plugin, Jenkins Kubernetes Continuous Deploy Plugin, Jenkins Extended Choice Parameter PluginApr 2022: 17 CVEs · 0 critical · 0 now in CISA KEV · rank #38 · mostly Promoted Builds, Subversion, Jenkins Subversion PluginMay 2022: 28 CVEs · 0 critical · 0 now in CISA KEV · rank #29 · mostly Autocomplete Parameter, Ssh, Blue OceanJun 2022: 86 CVEs · 1 critical · 0 now in CISA KEV · rank #5 · mostly Jenkins, Deployment Dashboard, Jenkins Deployment Dashboard PluginJul 2022: 44 CVEs · 0 critical · 0 now in CISA KEV · rank #19 · mostly Jenkins Openshift Deployer Plugin, Openshift Deployer, Jenkins Coverity PluginAug 2022: 3 CVEs · 0 critical · 0 now in CISA KEV · rank #198 · mostly Collabnet, Git, Jenkins Collabnet Plugins PluginSep 2022: 32 CVEs · 4 critical · 0 now in CISA KEV · rank #28 · mostly Jenkins CONS3RT Plugin, CONS3RT, Jenkins Build-publisher PluginOct 2022: 35 CVEs · 6 critical · 0 now in CISA KEV · rank #27 · mostly Jenkins Compuware Topaz For Total Test Plugin, Pipeline\, Jenkins Katalon PluginNov 2022: 24 CVEs · 4 critical · 0 now in CISA KEV · rank #31 · mostly Jenkins Ns-nd Integration Performance Publisher Plugin, Ns-nd Integration Performance Publisher, Delete LogDec 2022: 7 CVEs · 1 critical · 0 now in CISA KEV · rank #85 · mostly Checkmarx, Custom Build Properties, Google LoginJan 2023: 38 CVEs · 7 critical · 0 now in CISA KEV · rank #18 · mostly Jenkins Jira Pipeline Steps Plugin, Jira Pipeline Steps, Jenkins Orka By Macstadium PluginFeb 2023: 11 CVEs · 1 critical · 0 now in CISA KEV · rank #58 · mostly Email Extension, Jenkins Azure Credentials Plugin, Jenkins Email Extension PluginMar 2023: not on the top 200 that monthApr 2023: 20 CVEs · 0 critical · 0 now in CISA KEV · rank #43 · mostly Jenkins Report Portal Plugin, Report Portal, WSO2 OauthMay 2023: 36 CVEs · 0 critical · 0 now in CISA KEV · rank #18 · mostly Jenkins Saml Single Sign On(Sso) Plugin, Saml Single Sign On, Code DxJun 2023: 10 CVEs · 0 critical · 0 now in CISA KEV · rank #69 · mostly Jenkins Maven Repository Server Plugin, Digital.ai App Management Publisher, Jenkins Digital.ai App Management Publisher PluginJul 2023: 32 CVEs · 0 critical · 0 now in CISA KEV · rank #27 · mostly Mabl, Jenkins Mabl Plugin, Jenkins Sumologic Publisher PluginAug 2023: 19 CVEs · 0 critical · 0 now in CISA KEV · rank #41 · mostly Folders, Fortify, Jenkins Folders PluginSep 2023: 27 CVEs · 0 critical · 0 now in CISA KEV · rank #33 · mostly Jenkins, Aws Codecommit Trigger, Build Failure AnalyzerOct 2023: 13 CVEs · 0 critical · 1 now in CISA KEV · rank #58 · mostly Jenkins Cloudbees Cd Plugin, Jenkins Lambdatest-automation Plugin, Cloudbees CdNov 2023: 7 CVEs · 2 critical · 0 now in CISA KEV · rank #107 · mostly Matlab, Jenkins Matlab Plugin, JiraDec 2023: 16 CVEs · 0 critical · 0 now in CISA KEV · rank #50 · mostly Jenkins Paaslane Estimate Plugin, Nexus Platform, Paaslane EstimateJan 2024: 9 CVEs · 1 critical · 1 now in CISA KEV · rank #86 · mostly Jenkins GitLab Branch Source Plugin, GitHub Branch Source, JenkinsFeb 2024: not on the top 200 that monthMar 2024: 16 CVEs · 0 critical · 0 now in CISA KEV · rank #46 · mostly Jenkins Html Publisher Plugin, Html Publisher, Docker-build-stepApr 2024: not on the top 200 that monthMay 2024: 6 CVEs · 1 critical · 0 now in CISA KEV · rank #170 · mostly Script Security, Jenkins Script Security Plugin, Report InfoJun 2024: not on the top 200 that monthJul 2024: not on the top 200 that monthAug 2024: not on the top 200 that monthSep 2024: not on the top 200 that monthOct 2024: 5 CVEs · 0 critical · 0 now in CISA KEV · rank #141 · mostly Jenkins Openid Connect Authentication Plugin, Jenkins, Openid Connect AuthenticationNov 2024: 8 CVEs · 0 critical · 0 now in CISA KEV · rank #114 · mostly Pipeline\, Authorize Project, Filesystem List ParameterDec 2024: not on the top 200 that monthJan 2025: 7 CVEs · 0 critical · 0 now in CISA KEV · rank #113 · mostly Jenkins Azure Service Fabric Plugin, Azure Service Fabric, Jenkins Folder-based Authorization Strategy PluginFeb 2025: not on the top 200 that monthMar 2025: 6 CVEs · 0 critical · 0 now in CISA KEV · rank #149 · mostly Jenkins, Jenkins Zoho Qengine Plugin, Zoho QengineApr 2025: 11 CVEs · 2 critical · 0 now in CISA KEV · rank #74 · mostly Asakusasatellite, Jenkins, Jenkins Asakusasatellite PluginMay 2025: 6 CVEs · 2 critical · 0 now in CISA KEV · rank #129 · mostly Cadence Vmanager, Jenkins Cadence Vmanager Plugin, Openid Connect ProviderJun 2025: not on the top 200 that monthJul 2025: 32 CVEs · 0 critical · 0 now in CISA KEV · rank #34 · mostly Jenkins Applitools Eyes Plugin, Applitools Eyes, Jenkins Readyapi Functional Testing PluginAug 2025: not on the top 200 that monthSep 2025: 6 CVEs · 0 critical · 0 now in CISA KEV · rank #123 · mostly Jenkins, Jenkins Global-build-stats Plugin, OpentelemetryOct 2025: 20 CVEs · 0 critical · 0 now in CISA KEV · rank #52 · mostly Jenkins Publish To Bitbucket Plugin, Publish To Bitbucket, ThemisNov 2025: not on the top 200 that monthDec 2025: 9 CVEs · 0 critical · 0 now in CISA KEV · rank #107 · mostly Jenkins, Redpen - Pipeline Reporter For Jira, CoverageJan 2026: not on the top 200 that monthFeb 2026: not on the top 200 that monthMar 2026: not on the top 200 that monthApr 2026: 7 CVEs · 1 critical · 0 now in CISA KEV · rank #157 · mostly Azure Ad, Credentials Binding, GitHubMay 2026: 13 CVEs · 0 critical · 0 now in CISA KEV · rank #92 · mostly Jenkins Active Directory Plugin, Active Directory, Jenkins Ldap PluginJun 2026: 36 CVEs · 0 critical · 0 now in CISA KEV · rank #24 · mostly Jenkins, Jenkins Assembla Plugin, Jenkins Contrast Continuous Application Security PluginJul 2026: not on the top 200 that monthAug 2026: 23 CVEs · 1 critical · 0 now in CISA KEV · rank #64 · mostly Jenkins, Jenkins Multijob Plugin, Jenkins Scm-manager PluginSep 2026 so far: 53 CVEs · 0 critical · 0 now in CISA KEV · rank #17 · mostly Jenkins, Jenkins Script Security Plugin, Jenkins Pipeline: Groovy Libraries Plugin
In the lens
The products that kept showing up in Jenkins's monthly top three from Oct 2021 to Sep 2026. Move the lens and the list follows.
Year by year
Each year's months on the top 200 list. Pick a year to read it in the lens.
The record
- Peak rank
- #5 in Jun 2022
- Busiest month
- Jun 2022, 86 CVEs
- Months with a KEV entry
- 5 of 89 on the list
- On the top 200 list
- 89 of 178 monthly snapshots