Jenkins Project Jenkins Templating Engine Plugin

• CVE-2025-31722 High 8.8 In Jenkins Templating Engine Plugin 2.5.3 and earlier, libraries defined in folders are not subject to sandbox protection, allowing attackers with Item/Configure permission to execute arbitrary code i 1.3%
• CVE-2021-21646 Unrated Jenkins Templating Engine Plugin 2.1 and earlier does not protect its pipeline configurations using Script Security Plugin, allowing attackers with Job/Configure permission to execute arbitrary code i 1.7%