https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T12:36:28.520756+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2019-13094 cnvd-2019-13094 2026-10-03T12:36:28.598285+00:00 cnvd-2019-13094 https://cve.radiocsirt.org/vuln/euvd-2026-60523 EUVD-2026-60523 2026-10-03T12:36:28.598323+00:00 EUVD-2026-60523 https://cve.radiocsirt.org/vuln/fkie_cve-2019-1003050 fkie_cve-2019-1003050 2026-10-03T12:36:28.598338+00:00

The f:validateButton form control for the Jenkins UI did not properly escape job URLs in Jenkins 2.171 and earlier and Jenkins LTS 2.164.1 and earlier, resulting in a cross-site scripting (XSS) vulnerability exploitable by users with the ability to control job names.

 https://cve.radiocsirt.org/vuln/ghsa-qpg9-83fv-x9ch GHSA-qpg9-83fv-x9ch — Improper Neutralization of Input During Web Page Generation in Jenkins 2026-10-03T12:36:28.598368+00:00

Affected: Maven: org.jenkins-ci.main:jenkins-core

The f:validateButton form control for the Jenkins UI did not properly escape job URLs in Jenkins 2.171 and earlier and Jenkins LTS 2.164.1 and earlier, resulting in a cross-site scripting (XSS) vulnerability exploitable by users with the ability to control job names.

 https://cve.radiocsirt.org/vuln/gsd-2019-1003050 gsd-2019-1003050 2026-10-03T12:36:28.598394+00:00 gsd-2019-1003050 https://cve.radiocsirt.org/vuln/rhba-2019:1605 RHBA-2019:1605 — Red Hat Bug Fix Advisory: OpenShift Container Platform 3.11 bug fix and enhancement update 2026-10-03T12:36:28.598406+00:00

jenkins-credentials-plugin: Certificate file read vulnerability in Credentials Plugin (SECURITY-1322) jenkins-plugin-workflow-remote-loader: Unsafe Script Security whitelist entry in Pipeline Remote Loader Plugin (SECURITY-921) jenkins: Jenkins accepted cached legacy CLI authentication jenkins: Improper escaping of job URLs in f:validateButton leads to cross-site scripting vulnerability.