https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T20:10:56.228974+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2019-02524 bdu:2019-02524 2026-10-02T20:10:56.233935+00:00 bdu:2019-02524 https://cve.radiocsirt.org/vuln/cnvd-2019-22647 cnvd-2019-22647 2026-10-02T20:10:56.233965+00:00 cnvd-2019-22647 https://cve.radiocsirt.org/vuln/euvd-2026-53552 EUVD-2026-53552 2026-10-02T20:10:56.233980+00:00 EUVD-2026-53552 https://cve.radiocsirt.org/vuln/fkie_cve-2019-10337 fkie_cve-2019-10337 2026-10-02T20:10:56.233991+00:00

An XML external entities (XXE) vulnerability in Jenkins Token Macro Plugin 2.7 and earlier allowed attackers able to control a the content of the input file for the "XML" macro to have Jenkins resolve external entities, resulting in the extraction of secrets from the Jenkins agent, server-side request forgery, or denial-of-service attacks.

 https://cve.radiocsirt.org/vuln/ghsa-g6h2-4x64-c59x GHSA-g6h2-4x64-c59x — Improper Restriction of XML External Entity Reference Jenkins Token Macro Plugin 2026-10-02T20:10:56.234017+00:00

Affected: Maven: org.jenkins-ci.plugins:token-macro

An XML external entities (XXE) vulnerability in Jenkins Token Macro Plugin 2.7 and earlier allowed attackers able to control a the content of the input file for the "XML" macro to have Jenkins resolve external entities, resulting in the extraction of secrets from the Jenkins agent, server-side request forgery, or denial-of-service attacks.

 https://cve.radiocsirt.org/vuln/gsd-2019-10337 gsd-2019-10337 2026-10-02T20:10:56.234041+00:00 gsd-2019-10337 https://cve.radiocsirt.org/vuln/rhsa-2019:1636 RHSA-2019:1636 — Red Hat Security Advisory: OpenShift Container Platform 4.1 jenkins-2-plugins security update 2026-10-02T20:10:56.234052+00:00

jenkins-credentials-plugin: Certificate file read vulnerability in Credentials Plugin (SECURITY-1322) jenkins-plugin-workflow-remote-loader: Unsafe Script Security whitelist entry in Pipeline Remote Loader Plugin (SECURITY-921) jenkins-plugin-token-macro: XML External Entity processing the ${XML} macro