Jenkins Kubernetes :: Pipeline :: Kubernetes Steps Plugin provides a custom whitelist for script security that allowed attackers to invoke arbitrary methods, bypassing typical sandbox protection.
https://jenkins.io/security/advisory/2019-09-25/#SECURITY-920%20%281%29