diff --git a/CHANGELOG.md b/CHANGELOG.md
index 134c6bbf2..aa9da990e 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -15,6 +15,7 @@
 - Fixed VIT0089531 ([#1393](https://github.com/opendevstack/ods-core/pull/1393))
 - Fixed VIT0089530 ([#1392](https://github.com/opendevstack/ods-core/pull/1392))
 - Harden post-creation scripts against RCE and credential exfiltration: remove `CD_PASSWORD` from the scripts environment and restrict the scripts/config repositories to an explicit `POST_CREATION_SCRIPTS_REPO_ALLOWLIST` (finding F-05) ([#1396] https://github.com/opendevstack/ods-core/pull/1396)
+- Fix Git plugins that broke Jenkins ([#1401](https://github.com/opendevstack/ods-core/pull/1401))
 
 ## [4.13.1] - 2026-07-30
 ### Fixed
diff --git a/jenkins/master/plugins.ubi9.txt b/jenkins/master/plugins.ubi9.txt
index 96b30a65e..83c1d92fe 100644
--- a/jenkins/master/plugins.ubi9.txt
+++ b/jenkins/master/plugins.ubi9.txt
@@ -8,5 +8,11 @@ allure-jenkins-plugin:2.34.0
 oidc-provider:89.v3dfb_6d89b_618
 
 # plugins modified to fix incompatibilities
-git-client:6.6.1
-git:5.10.1
+git-client:6.3.3
+ssh-credentials:361.vb_f6760818e8c
+configuration-as-code:1985.vdda_32d0c4ea_b_
+credentials:1419.v2337d1ceceef
+structs:353.v261ea_40a_80fb_
+commons-lang3-api:3.18.0-98.v3a_674c06072d
+gson-api:2.13.1-153.vb_3d0c48a_a_b_4a_
+script-security:1378.vf25626395f49