Manage Jenkins [Jenkins]

The following installed plugins are deprecated: GitHub Organization Folder Plugin; JavaScript GUI Lib: Moment.js bundle plugin; JavaScript GUI Lib: ACE Editor bundle plugin; Pipeline: Deprecated Groovy Libraries

In general, this means that these plugins are either obsolete, no longer being developed, or may no longer work.
See the linked web pages for further information about the cause for the deprecation, and suggestions on how to proceed.

It appears that your reverse proxy set up is broken.

Your configured root URL does not contain the contextPath ("/jenkins").

New version of Jenkins (2.504.3) is available for download (changelog).

Building on the built-in node can be a security issue. You should set up distributed builds. See the documentation.

Java 17 end of life in Jenkins

You are running Jenkins on Java 17, support for which will end on or after Mar 31, 2026. Refer to the documentation for more details.

Operating system end of life monitor

You are running Jenkins on CentOS Linux 7 (Core). Jenkins stopped supporting CentOS Linux 7 (Core) as of 2023-11-16.

Please upgrade to a supported operating system.

Refer to the documentation for details.

Warnings have been published for the following currently installed components:

Jenkins 2.426.1 core and libraries: Terrapin SSH vulnerability in Jenkins CLI client; Multiple security vulnerabilities in Jenkins 2.441 and earlier, LTS 2.426.2 and earlier; Multiple security vulnerabilities in Jenkins 2.470 and earlier, LTS 2.452.3 and earlier; Multiple security vulnerabilities in Jenkins 2.503 and earlier, LTS 2.492.2 and earlier; Denial of service vulnerability in bundled json-lib; HTTP/2 denial of service vulnerability in bundled Jetty; Multiple security vulnerabilities in Jenkins 2.499 and earlier, LTS 2.492.1 and earlier; Multiple security vulnerabilities in Jenkins 2.478 and earlier, LTS 2.462.2 and earlier; Fixes for all of these issues are available. Update Jenkins now.

Credentials Binding Plugin 681.vf91669a_32e45: Improper masking of credentials (no fix available); No fixes for these issues are available. It is recommended that you review the security advisory and apply mitigations if possible, or uninstall this plugin.
Git Parameter Plug-In 0.9.19: Missing input validation for parameter values (no fix available); No fixes for these issues are available. It is recommended that you review the security advisory and apply mitigations if possible, or uninstall this plugin.
SSH plugin 2.6.1: Missing permission check allows enumerating credentials IDs (no fix available); CSRF vulnerability and missing permission checks allow capturing credentials (no fix available); No fixes for these issues are available. It is recommended that you review the security advisory and apply mitigations if possible, or uninstall this plugin.
Pipeline: Groovy 3908.vd6b_b_5a_a_54010: Rebuilding a run with revoked script approval allowed; A fix for this issue is available. Go to the plugin manager to update the plugin.
GitLab Plugin 1.8.0: Incorrect permission check allows enumerating credentials IDs (no fix available); No fixes for these issues are available. It is recommended that you review the security advisory and apply mitigations if possible, or uninstall this plugin.
Pipeline: Declarative 2.2205.vc9522a_9d5711: Restarting a run with revoked script approval allowed; A fix for this issue is available. Go to the plugin manager to update the plugin.
Credentials Plugin 1319.v7eb_51b_3a_c97b_: Encrypted values of credentials revealed to users with Extended Read permission (no fix available); No fixes for these issues are available. It is recommended that you review the security advisory and apply mitigations if possible, or uninstall this plugin.
HTML Publisher plugin 1.36: File path information disclosure (no fix available); No fixes for these issues are available. It is recommended that you review the security advisory and apply mitigations if possible, or uninstall this plugin.
Plain Credentials Plugin 182.v468b_97b_9dcb_8: Secret file credentials stored unencrypted in rare cases; A fix for this issue is available. Go to the plugin manager to update the plugin.
Script Security Plugin 1366.vd44b_49a_5c85c: Missing permission check; A fix for this issue is available. Go to the plugin manager to update the plugin.
JDK Parameter Plugin 1.2: Stored XSS vulnerability (no fix available); No fixes for these issues are available. It is recommended that you review the security advisory and apply mitigations if possible, or uninstall this plugin.

Manage Jenkins

Java 17 end of life in Jenkins

Operating system end of life monitor

System Configuration

Security

Status Information

Troubleshooting

Tools and Actions

1	Idle
2	Idle