https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T11:52:48.141086+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2019-02523 bdu:2019-02523 2026-10-03T11:52:48.323015+00:00 bdu:2019-02523 https://cve.radiocsirt.org/vuln/euvd-2026-53597 EUVD-2026-53597 2026-10-03T11:52:48.323054+00:00 EUVD-2026-53597 https://cve.radiocsirt.org/vuln/fkie_cve-2019-10328 fkie_cve-2019-10328 2026-10-03T11:52:48.323069+00:00

Jenkins Pipeline Remote Loader Plugin 1.4 and earlier provided a custom whitelist for script security that allowed attackers to invoke arbitrary methods, bypassing typical sandbox protection.

 https://cve.radiocsirt.org/vuln/ghsa-v558-fhw2-v46w GHSA-v558-fhw2-v46w — Unsafe entry in Script Security list of approved signatures in Pipeline Remote Loader Plugin 2026-10-03T11:52:48.323096+00:00

Affected: Maven: org.jenkins-ci.plugins:workflow-remote-loader

Jenkins Pipeline Remote Loader Plugin before 1.5 provided a custom whitelist for script security that allowed attackers to invoke arbitrary methods, bypassing typical sandbox protection.

 https://cve.radiocsirt.org/vuln/gsd-2019-10328 gsd-2019-10328 2026-10-03T11:52:48.323127+00:00 gsd-2019-10328 https://cve.radiocsirt.org/vuln/rhba-2019:1605 RHBA-2019:1605 — Red Hat Bug Fix Advisory: OpenShift Container Platform 3.11 bug fix and enhancement update 2026-10-03T11:52:48.323154+00:00

jenkins-credentials-plugin: Certificate file read vulnerability in Credentials Plugin (SECURITY-1322) jenkins-plugin-workflow-remote-loader: Unsafe Script Security whitelist entry in Pipeline Remote Loader Plugin (SECURITY-921) jenkins: Jenkins accepted cached legacy CLI authentication jenkins: Improper escaping of job URLs in f:validateButton leads to cross-site scripting vulnerability.