Jenkins Project Jenkins Robot Framework Plugin

• CVE-2026-92137 High 8.8 Jenkins Robot Framework Plugin 6.2.2 and earlier does not check that the archive directory configured for Robot Framework report files is contained within the build directory on the Jenkins controller 0.8%
• CVE-2020-2092 Unrated Jenkins Robot Framework Plugin 2.0.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks, allowing users with Job/Configure to have Jenkins parse crafted XML doc 1.4%