io.jenkins.plugin-management:plugin-management-parent-pom (Maven) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the Maven package io.jenkins.plugin-management:plugin-management-parent-pom, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (1)

• CVE-2020-2320 — CVSS 9.8 (critical): Jenkins Plugin Installation Manager Tool 2.1.3 and earlier does not verify plugin downloads.