Jenkins Project Jenkins External Workspace Manager Plugin

• CVE-2026-70436 Medium 4.3 Jenkins External Workspace Manager Plugin 1.4.1 and earlier does not perform a permission check (1.4.0 and earlier) or performs an improper permission check (1.4.1) when providing access to externally 0.3%
• CVE-2026-57296 High 8.8 Jenkins External Workspace Manager Plugin 1.3.2 and earlier does not reject path traversal sequences in the custom workspace path provided to the exwsAllocate Pipeline step, allowing attackers with It 0.8%