https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T13:56:11.178083+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2020-60101 cnvd-2020-60101 2026-10-16T13:56:11.244155+00:00 cnvd-2020-60101 https://cve.radiocsirt.org/vuln/euvd-2026-35814 EUVD-2026-35814 2026-10-16T13:56:11.244196+00:00 EUVD-2026-35814 https://cve.radiocsirt.org/vuln/fkie_cve-2020-2156 fkie_cve-2020-2156 2026-10-16T13:56:11.244211+00:00

Jenkins DeployHub Plugin 8.0.14 and earlier transmits configured credentials in plain text as part of job configuration forms, potentially resulting in their exposure.

 https://cve.radiocsirt.org/vuln/ghsa-hm57-4qpx-f734 GHSA-hm57-4qpx-f734 — Credentials transmitted in plain text by Jenkins DeployHub Plugin 2026-10-16T13:56:11.244241+00:00

Affected: Maven: com.openmake:deployhub

DeployHub Plugin stores credentials in job `config.xml` files as part of its configuration.

While the credentials are stored encrypted on disk, they are transmitted in plain text as part of the configuration form by DeployHub Plugin 8.0.14 and earlier. These credentials could be viewed by users with Extended Read permission.

 https://cve.radiocsirt.org/vuln/gsd-2020-2156 gsd-2020-2156 2026-10-16T13:56:11.244267+00:00 gsd-2020-2156