Jenkins security advisory (AV25-826)

Serial number: AV25-826
Date: December 10, 2025

On December 10, 2025, Jenkins published a security advisory to address vulnerabilities in the following products:

• BlazeMeter – version 4.27
• Coverage – version 2.3054.ve1ff7b_a_a_123b_ and prior
• Git client – version 6.4.0 and prior
• HashiCorp Vault – version 371.v884a_4dd60fb_6 and prior
• Redpen - Pipeline Reporter for Jira – version 1.054.v7b_9517b_6b_202 and prior

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• Jenkins Security Advisory 2025-12-10
• Jenkins Security Advisories