https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T10:32:59.548918+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2020-62246 cnvd-2020-62246 2026-10-03T10:32:59.674413+00:00 cnvd-2020-62246 https://cve.radiocsirt.org/vuln/euvd-2026-35993 EUVD-2026-35993 2026-10-03T10:32:59.674463+00:00 EUVD-2026-35993 https://cve.radiocsirt.org/vuln/fkie_cve-2020-2304 fkie_cve-2020-2304 2026-10-03T10:32:59.674478+00:00

Jenkins Subversion Plugin 2.13.1 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

 https://cve.radiocsirt.org/vuln/ghsa-vp5f-8jgw-j53c GHSA-vp5f-8jgw-j53c — XXE vulnerability in Jenkins Subversion Plugin 2026-10-03T10:32:59.674509+00:00

Affected: Maven: org.jenkins-ci.plugins:subversion

Jenkins Subversion Plugin 2.13.1 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

This allows attackers able to control an agent process to have Jenkins parse a crafted changelog file that uses external entities for extraction of secrets from the Jenkins controller or server-side request forgery.

Jenkins Subversion Plugin 2.13.2 disables external entity resolution for its XML parser.

 https://cve.radiocsirt.org/vuln/gsd-2020-2304 gsd-2020-2304 2026-10-03T10:32:59.674537+00:00 gsd-2020-2304 https://cve.radiocsirt.org/vuln/rhsa-2021:0034 RHSA-2021:0034 — Red Hat Security Advisory: OpenShift Container Platform 4.5.27 packages and security update 2026-10-03T10:32:59.674550+00:00

jenkins-2-plugins/subversion: XML parser is not preventing XML external entity (XXE) attacks jenkins-2-plugins/mercurial: XML parser is not preventing XML external entity (XXE) attacks jenkins-2-plugins/mercurial: Missing permission check in an HTTP endpoint could result in information disclosure jenkins-2-plugins/kubernetes: Jenkins controller environment variables are accessible in Kubernetes Plugin jenkins-2-plugins/kubernetes: Missing permission check in Kubernetes Plugin allows listing pod templates jenkins-2-plugins/kubernetes: Missing permission check in Kubernetes Plugin allows enumerating credentials IDs python-urllib3: CRLF injection via HTTP request method