The plugin has an unresolved stored XSS vulnerability (SECURITY-2811 / CVE-2023-40350) with no fix released. I have a fix ready along with POM modernization (Java 11+, Jenkins 2.462.3) and a Docker API 1.44 compatibility fix.
My plan is to: - Fix the SECURITY-2811 vulnerability and cut a release - Triage the 54 open issues and 9 pending PRs - Bring the plugin up to current Jenkins standards
Best regards, Michal Smaga
Kris Stern
unread,
Apr 3, 2026, 4:00:57 PMApr 3
Reply to author
Sign in to reply to author
Forward
Sign in to forward
Delete
You do not have permission to delete messages in this group
Copy link
Report message
Show original message
Either email addresses are anonymous for this group or you need the view member email addresses permission to view the original message
to jenkin...@googlegroups.com
+1 from me, especially in view of the security fixes
CONFIDENTIALITY NOTICE:This email and any attachments contain confidential and proprietary information of CloudBees intended only for the named recipient(s). Unauthorized use or distribution is prohibited. If you received this in error, please notify the sender and delete this email.
Michał Smaga
unread,
Apr 14, 2026, 4:53:38 AM (11 days ago) Apr 14
Reply to author
Sign in to reply to author
Forward
Sign in to forward
Delete
You do not have permission to delete messages in this group
Copy link
Report message
Show original message
Either email addresses are anonymous for this group or you need the view member email addresses permission to view the original message
to Jenkins Developers
Thanks for pointing it out. I'm currently testing swarm-agents-cloud-plugin. I'll let you know if my adopt requests is still valid.