Jenkins Kubernetes :: Pipeline :: Arquillian Steps Plugin provides a custom whitelist for script security that allowed attackers to invoke arbitrary methods, bypassing typical sandbox protection.

Affected Packages

Maven io.fabric8.pipeline:kubernetes-pipeline-arquillian-steps

Affected versions: 0 (last affected: 1.6)

Related CVEs

CVE-2019-10418

Key Information

GHSA ID

GHSA-f46p-q6jh-226m

Published

May 24, 2022 4:56 PM

Last Modified

September 8, 2022 10:31 PM

CVSS Score

9.0 /10

Primary Ecosystem

Maven

Primary Package

io.fabric8.pipeline:kubernetes-pipeline-arquillian-steps

GitHub Reviewed

✓ Yes

Dataset

Last updated: August 27, 2025 6:31 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.