https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T21:46:14.017676+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-jenkins-2021-21639 BIT-jenkins-2021-21639 2026-10-03T21:46:14.115974+00:00

Affected: Bitnami: jenkins

Jenkins 2.286 and earlier, LTS 2.277.1 and earlier does not validate the type of object created after loading the data submitted to the `config.xml` REST API endpoint of a node, allowing attackers with Computer/Configure permission to replace a node with one of a different type.

 https://cve.radiocsirt.org/vuln/cnvd-2021-31175 cnvd-2021-31175 2026-10-03T21:46:14.116036+00:00 cnvd-2021-31175 https://cve.radiocsirt.org/vuln/euvd-2026-22335 EUVD-2026-22335 2026-10-03T21:46:14.116054+00:00 EUVD-2026-22335 https://cve.radiocsirt.org/vuln/fkie_cve-2021-21639 fkie_cve-2021-21639 2026-10-03T21:46:14.116067+00:00

Jenkins 2.286 and earlier, LTS 2.277.1 and earlier does not validate the type of object created after loading the data submitted to the `config.xml` REST API endpoint of a node, allowing attackers with Computer/Configure permission to replace a node with one of a different type.

 https://cve.radiocsirt.org/vuln/ghsa-pvwx-3jx5-24r2 GHSA-pvwx-3jx5-24r2 — Lack of type validation in agent related REST API in Jenkins 2026-10-03T21:46:14.116088+00:00

Affected: Maven: org.jenkins-ci.main:jenkins-core

Jenkins 2.286 and earlier, LTS 2.277.1 and earlier does not validate the type of object created after loading the data submitted to the `config.xml` REST API endpoint of a node.

This allows attackers with Computer/Configure permission to replace a node with one of a different type.

Jenkins 2.287, LTS 2.277.2 validates the type of object created and rejects objects of unexpected types.

 https://cve.radiocsirt.org/vuln/gsd-2021-21639 gsd-2021-21639 2026-10-03T21:46:14.116115+00:00 gsd-2021-21639 https://cve.radiocsirt.org/vuln/rhsa-2021:1551 RHSA-2021:1551 — Red Hat Security Advisory: OpenShift Container Platform 4.7.11 security and bug fix update 2026-10-03T21:46:14.116127+00:00

golang: math/big: panic during recursive division of very large numbers golang: crypto/elliptic: incorrect operations on the P-224 curve jenkins: lack of type validation in agent related REST API jenkins: view name validation bypass jetty: Symlink directory exposes webapp directory contents jetty: Resource exhaustion when receiving an invalid large TLS frame