What is CVE-2025-68703?

CVE-2025-68703 is a high-severity vulnerability in Samrocketman Jervis, classified under Inadequate Encryption Strength. CVSS score: 7.5/10. Published 2026-01-13.

How severe is CVE-2025-68703?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Samrocketman Jervis

CVE-2025-68703

Jervis is a library for Job DSL plugin scripts and shared Jenkins pipeline libraries. Prior to 2.2, the salt is derived from sha256Sum(passphrase). Two encryption operations with the same password will have the same derived key. This vulne…

EPSS: 0.001 (1.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Samrocketman Jervis — versions < 2.2

Weakness classification (CWE)

CWE-326 — Inadequate Encryption Strength

References

security-advisories@github.com (x_refsource_CONFIRM, Patch, Vendor Advisory)
security-advisories@github.com (Patch, x_refsource_MISC)

Frequently asked questions

What is CVE-2025-68703?: CVE-2025-68703 is a high-severity vulnerability in Samrocketman Jervis, classified under Inadequate Encryption Strength. CVSS score: 7.5/10. Published 2026-01-13.
How severe is CVE-2025-68703?: High severity. CVSS v3 base score is 7.5 out of 10.