https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T08:48:59.731561+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-39163 cnvd-2021-39163 2026-10-18T08:48:59.734719+00:00 cnvd-2021-39163 https://cve.radiocsirt.org/vuln/euvd-2026-22365 EUVD-2026-22365 2026-10-18T08:48:59.734753+00:00 EUVD-2026-22365 https://cve.radiocsirt.org/vuln/fkie_cve-2021-21657 fkie_cve-2021-21657 2026-10-18T08:48:59.734767+00:00

Jenkins Filesystem Trigger Plugin 0.40 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

 https://cve.radiocsirt.org/vuln/ghsa-cphv-7cxw-5hcc GHSA-cphv-7cxw-5hcc — XXE vulnerability in Jenkins Filesystem Trigger Plugin 2026-10-18T08:48:59.734844+00:00

Affected: Maven: org.jenkins-ci.plugins:fstrigger

Jenkins Filesystem Trigger Plugin 0.40 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

This allows attackers with Job/Configure permission or otherwise able to control the contents of an XML file being polled for changes to have Jenkins parse a crafted XML document that uses external entities for extraction of secrets from the polling Jenkins controller or agent, server-side request forgery, or denial-of-service attacks.

Jenkins Filesystem Trigger Plugin 0.41 disables external entity resolution for its XML parser.

 https://cve.radiocsirt.org/vuln/gsd-2021-21657 gsd-2021-21657 2026-10-18T08:48:59.734872+00:00 gsd-2021-21657