Jenkins Pipeline: Groovy Plugin 2689.v434009a_31b_f1 and earlier allows loading any Groovy source files on the classpath of Jenkins and Jenkins plugins in sandboxed pipelines.
https://github.com/advisories/GHSA-2xvx-rw9p-xgfc
https://www.jenkins.io/security/advisory/2022-05-17/#SECURITY-359