CVE-2025-68701
Jervis has Deterministic AES IV Derivation from Passphrase
Résumé
Jervis has Deterministic AES IV Derivation from Passphrase
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Jervis is a library for Job DSL plugin scripts and shared Jenkins pipeline libraries. Prior to 2.2, Jervis uses deterministic AES IV derivation from a passphrase. This vulnerability is fixed in 2.2.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com