QwikSec

Security Database

CVE

CWE

Training

CVE-2025-68698

Published: Jan 13, 2026

Modified: Jan 15, 2026

PUBLISHED

Description

Jervis is a library for Job DSL plugin scripts and shared Jenkins pipeline libraries. Prior to 2.2, Jervis uses PKCS1Encoding which is vulnerable to Bleichenbacher padding oracle attacks. Modern systems should use OAEP (Optimal Asymmetric Encryption Padding). This vulnerability is fixed in 2.2.

Vendor	Product	Versions
samrocketman	jervis	affected `< 2.2`

Weaknesses (CWE)

References

https://github.com/samrocketman/jervis/security/advisories/GHSA-mqw7-c5gg-xq97

x_refsource_CONFIRM

https://github.com/samrocketman/jervis/commit/c3981ff71de7b0f767dfe7b37a2372cb2a51974a

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.