# Jenkins Warnings

**URL:** <https://community.jenkins.io/t/jenkins-warnings/6510>\
**Category:** Using Jenkins\
**Created:** [March 28, 2023, 5:05am UTC](https://community.jenkins.io/t/jenkins-warnings/6510 "2023-03-28T05:05:55Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![vysyaraju](https://avatars.discourse-cdn.com/v4/letter/v/90ced4/32.png) [@vysyaraju](https://community.jenkins.io/u/vysyaraju)\
**Post date:** [March 28, 2023, 5:05am UTC](https://community.jenkins.io/t/jenkins-warnings/6510/1 "2023-03-28T05:05:55Z")

</div>

Hello Team,

I see lot of warnings in the manage Jenkins console.

Can you please let me know what is the exact process to remove the below warnings?

Here are the few warnings which i can see in the manage jenkins page: -

Warnings have been published for the following currently installed components:

Jenkins 2.271 core and libraries  
[Multiple security vulnerabilities in Jenkins 2.318 and earlier, LTS 2.303.2 and earlier](https://www.jenkins.io/security/advisory/2021-11-04/)  
[Multiple security vulnerabilities in Jenkins 2.393 and earlier, LTS 2.375.3 and earlier](https://www.jenkins.io/security/advisory/2023-03-08/)  
[Multiple security vulnerabilities in Jenkins 2.314 and earlier, LTS 2.303.1 and earlier](https://www.jenkins.io/security/advisory/2021-10-06/)  
[Multiple security vulnerabilities in Jenkins 2.355 and earlier, LTS 2.332.3 and earlier](https://www.jenkins.io/security/advisory/2022-06-22/)  
[HTTP/2 denial of service vulnerability in bundled Jetty](https://www.jenkins.io/security/advisory/2022-09-09/)  
[Multiple security vulnerabilities in Jenkins 2.299 and earlier, LTS 2.289.1 and earlier](https://www.jenkins.io/security/advisory/2021-06-30/)  
[CSRF vulnerability in build triggers](https://www.jenkins.io/security/advisory/2022-01-12/)  
[DoS vulnerability in bundled XStream library](https://www.jenkins.io/security/advisory/2022-02-09/)

[Parameterized Trigger plugin 2.39](https://plugins.jenkins.io/parameterized-trigger)  
[Sensitive parameter values captured in build metadata files](https://www.jenkins.io/security/advisory/2022-03-15/#SECURITY-2185)  
[Pipeline: Stage View Plugin 2.19](https://plugins.jenkins.io/pipeline-stage-view)  
[CSRF protection for any URL can be bypassed](https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2828)

[Code Coverage API Plugin 1.2.0](https://plugins.jenkins.io/code-coverage-api)  
[RCE vulnerability](https://www.jenkins.io/security/advisory/2021-08-31/#SECURITY-2376)  
[MSTest plugin 1.0.0](https://plugins.jenkins.io/mstest)  
[XXE vulnerability on agents](https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2292)

---

<div class="post-metadata">

**Author:** ![halkeye](https://dub1.discourse-cdn.com/flex013/user_avatar/community.jenkins.io/halkeye/32/8_2.png) [@halkeye](https://community.jenkins.io/u/halkeye)\
**Post date:** [March 28, 2023, 5:24am UTC](https://community.jenkins.io/t/jenkins-warnings/6510/2 "2023-03-28T05:24:26Z")

</div>

> [@vysyaraju](#):
>
> Can you please let me know what is the exact process to remove the below warnings?

Upgrade. 271 is almost 2 years old. There’s been many many releases and security fixes since then.

So follow the upgrade guide and upgrade to the version with fixes applied.

---

<div class="post-metadata">

**Author:** ![vysyaraju](https://avatars.discourse-cdn.com/v4/letter/v/90ced4/32.png) [@vysyaraju](https://community.jenkins.io/u/vysyaraju)\
**Post date:** [March 28, 2023, 5:51am UTC](https://community.jenkins.io/t/jenkins-warnings/6510/3 "2023-03-28T05:51:52Z")

</div>

Hello Halkeye,

Thanks for the quick response.

I have upgraded jenkins version from 2.271 to 2.289.2 but still i can see same warnings only.

Do we have any steps to remove the warnings?

---

<div class="post-metadata">

**Author:** ![NotMyFault](https://dub1.discourse-cdn.com/flex013/user_avatar/community.jenkins.io/notmyfault/32/466_2.png) [@NotMyFault](https://community.jenkins.io/u/NotMyFault)\
**Post date:** [March 28, 2023, 8:12am UTC](https://community.jenkins.io/t/jenkins-warnings/6510/4 "2023-03-28T08:12:56Z")

</div>

> [@vysyaraju](#):
>
> I have upgraded jenkins version from 2.271 to 2.289.2 but still i can see same warnings only.

2.271 to 2.289.2 is a fairly minor upgrade, to a very dated release. You will want to upgrade to a recent LTS release, like 2.387.1, to mitigate vulnerabilities you are subject to.