https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T00:25:39.447848+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2020-52596 cnvd-2020-52596 2026-10-17T00:25:39.531368+00:00 cnvd-2020-52596 https://cve.radiocsirt.org/vuln/euvd-2026-35961 EUVD-2026-35961 2026-10-17T00:25:39.531409+00:00 EUVD-2026-35961 https://cve.radiocsirt.org/vuln/fkie_cve-2020-2256 fkie_cve-2020-2256 2026-10-17T00:25:39.531423+00:00

Jenkins Pipeline Maven Integration Plugin 3.9.2 and earlier does not escape the upstream job's display name shown as part of a build cause, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.

 https://cve.radiocsirt.org/vuln/ghsa-hq2h-9mc3-h6w2 GHSA-hq2h-9mc3-h6w2 — Stored XSS vulnerability in Pipeline Maven Integration Plugin via unescaped display name 2026-10-17T00:25:39.531453+00:00

Affected: Maven: org.jenkins-ci.plugins:pipeline-maven

Pipeline Maven Integration Plugin 3.9.2 and earlier does not escape the upstream job’s display name shown as part of a build cause.

This results in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.

Pipeline Maven Integration Plugin 3.9.3 escapes upstream job names in build causes.

 https://cve.radiocsirt.org/vuln/gsd-2020-2256 gsd-2020-2256 2026-10-17T00:25:39.531490+00:00 gsd-2020-2256