The following Jenkins plugin updates contain fixes for security vulnerabilities:
* Cadence vManager Plugin 4.0.1-288.v8804b_ea_a_cb_7f
* Health Advisor by CloudBees Plugin 374.376.v3a_41a_a_142efe
* OpenID Connect Provider Plugin 111.v29fd614b_3617
Additionally, we announce unresolved security issues in the following plugins:
* DingTalk Plugin
* WSO2 Oauth Plugin
Please see the advisory for more information:
https://www.jenkins.io/security/advisory/2025-05-14/