https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T23:38:09.702176+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-jenkins-2021-21607 BIT-jenkins-2021-21607 2026-10-03T23:38:09.819617+00:00

Affected: Bitnami: jenkins

Jenkins 2.274 and earlier, LTS 2.263.1 and earlier does not limit sizes provided as query parameters to graph-rendering URLs, allowing attackers to request crafted URLs that use all available memory in Jenkins, potentially leading to out of memory errors.

 https://cve.radiocsirt.org/vuln/cnvd-2021-04647 cnvd-2021-04647 2026-10-03T23:38:09.819686+00:00 cnvd-2021-04647 https://cve.radiocsirt.org/vuln/euvd-2026-22316 EUVD-2026-22316 2026-10-03T23:38:09.819704+00:00 EUVD-2026-22316 https://cve.radiocsirt.org/vuln/fkie_cve-2021-21607 fkie_cve-2021-21607 2026-10-03T23:38:09.819717+00:00

Jenkins 2.274 and earlier, LTS 2.263.1 and earlier does not limit sizes provided as query parameters to graph-rendering URLs, allowing attackers to request crafted URLs that use all available memory in Jenkins, potentially leading to out of memory errors.

 https://cve.radiocsirt.org/vuln/ghsa-cxqw-vjcr-gp5g GHSA-cxqw-vjcr-gp5g — Excessive memory allocation in graph URLs leads to denial of service in Jenkins 2026-10-03T23:38:09.819739+00:00

Affected: Maven: org.jenkins-ci.main:jenkins-core

Jenkins renders several different graphs for features like agent and label usage statistics, memory usage, or various plugin-provided statistics.

Jenkins 2.274 and earlier, LTS 2.263.1 and earlier does not limit the graph size provided as query parameters.

This allows attackers to request or to have legitimate Jenkins users request crafted URLs that rapidly use all available memory in Jenkins, potentially leading to out of memory errors.

Jenkins 2.275, LTS 2.263.2 limits the maximum size of graphs to an area of 10 million pixels. If a larger size is requested, the default size for the graph will be rendered instead.

This threshold can be configured by setting the [Java system property](https://www.jenkins.io/doc/book/managing/system-properties/) `hudson.util.Graph.maxArea` to a different number on startup.

 https://cve.radiocsirt.org/vuln/gsd-2021-21607 gsd-2021-21607 2026-10-03T23:38:09.819769+00:00 gsd-2021-21607 https://cve.radiocsirt.org/vuln/rhsa-2021:0423 RHSA-2021:0423 — Red Hat Security Advisory: OpenShift Container Platform 4.6.17 security and packages update 2026-10-03T23:38:09.819781+00:00

ant: insecure temporary file vulnerability ant: insecure temporary file jenkins: Arbitrary file read vulnerability in workspace browsers jenkins: XSS vulnerability in notification bar jenkins: Improper handling of REST API XML deserialization errors jenkins: Path traversal vulnerability in agent names jenkins: Arbitrary file existence check in file fingerprints jenkins: Excessive memory allocation in graph URLs leads to denial of service jenkins: Stored XSS vulnerability in button labels jenkins: Missing permission check for paths with specific prefix jenkins: Reflected XSS vulnerability in markup formatter preview jenkins: Stored XSS vulnerability on new item page jenkins: Filesystem traversal by privileged users