Jenkins Eggplant Runner vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Jenkins Eggplant Runner: 1 record(s), with affected versions and fixes.
cpe:2.3:a:jenkins:eggplant_runner

CVE-2025-64135 Medium · 5.9 CWE-1188 Oct 29, 2025

Insecure Default Initialization of Resource in Jenkins Eggplant Runner

Jenkins Eggplant Runner Plugin 0.0.1.301.v963cffe8ddb_8 and earlier sets the Java system property `jdk.http.auth.tunneling.disabledSchemes` to an empty value, disabling a protection mechanism of the Java runtime.