https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T12:43:31.931678+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2020-61625 cnvd-2020-61625 2026-10-03T12:43:32.053530+00:00 cnvd-2020-61625 https://cve.radiocsirt.org/vuln/euvd-2026-36007 EUVD-2026-36007 2026-10-03T12:43:32.053585+00:00 EUVD-2026-36007 https://cve.radiocsirt.org/vuln/fkie_cve-2020-2308 fkie_cve-2020-2308 2026-10-03T12:43:32.053621+00:00

A missing permission check in Jenkins Kubernetes Plugin 1.27.3 and earlier allows attackers with Overall/Read permission to list global pod template names.

 https://cve.radiocsirt.org/vuln/ghsa-rr6j-37cv-c7x7 GHSA-rr6j-37cv-c7x7 — Missing Authorization in Jenkins Kubernetes Plugin 2026-10-03T12:43:32.053679+00:00

Affected: Maven: org.csanchez.jenkins.plugins:kubernetes

Jenkins Kubernetes Plugin prior to 1.27.4, 1.26.5, 1.25.4.1, and 1.21.6 does not perform a permission check in an HTTP endpoint.

This allows attackers with Overall/Read permission to list global pod template names.

Kubernetes Plugin 1.27.4, 1.26.5, 1.25.4.1, and 1.21.6 requires Overall/Administer permission to list global pod template names.

 https://cve.radiocsirt.org/vuln/gsd-2020-2308 gsd-2020-2308 2026-10-03T12:43:32.053728+00:00 gsd-2020-2308 https://cve.radiocsirt.org/vuln/rhsa-2021:0034 RHSA-2021:0034 — Red Hat Security Advisory: OpenShift Container Platform 4.5.27 packages and security update 2026-10-03T12:43:32.053747+00:00

jenkins-2-plugins/subversion: XML parser is not preventing XML external entity (XXE) attacks jenkins-2-plugins/mercurial: XML parser is not preventing XML external entity (XXE) attacks jenkins-2-plugins/mercurial: Missing permission check in an HTTP endpoint could result in information disclosure jenkins-2-plugins/kubernetes: Jenkins controller environment variables are accessible in Kubernetes Plugin jenkins-2-plugins/kubernetes: Missing permission check in Kubernetes Plugin allows listing pod templates jenkins-2-plugins/kubernetes: Missing permission check in Kubernetes Plugin allows enumerating credentials IDs python-urllib3: CRLF injection via HTTP request method