https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T18:47:18.203441+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-22379 EUVD-2026-22379 2026-10-03T18:47:18.305247+00:00 EUVD-2026-22379 https://cve.radiocsirt.org/vuln/fkie_cve-2021-21684 fkie_cve-2021-21684 2026-10-03T18:47:18.305281+00:00

Jenkins Git Plugin 4.8.2 and earlier does not escape the Git SHA-1 checksum parameters provided to commit notifications when displaying them in a build cause, resulting in a stored cross-site scripting (XSS) vulnerability.

 https://cve.radiocsirt.org/vuln/ghsa-gghc-g8cj-4vfv GHSA-gghc-g8cj-4vfv — Stored XSS vulnerability in Jenkins Git Plugin 2026-10-03T18:47:18.305320+00:00

Affected: Maven: org.jenkins-ci.plugins:git

Jenkins Git Plugin 4.8.2 and earlier does not escape the Git SHA-1 checksum parameters provided to commit notifications when displaying them in a build cause.

This results in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to submit crafted commit notifications to the `/git/notifyCommit` endpoint.

Jenkins Git Plugin 4.8.3 rejects Git SHA-1 checksum parameters that do not match the expected format. Existing values are sanitized when displayed on the UI.

This vulnerability is only exploitable in Jenkins 2.314 and earlier, LTS 2.303.1 and earlier. See the [LTS upgrade guide](https://www.jenkins.io/doc/upgrade-guide/2.303/#SECURITY-2452).

 https://cve.radiocsirt.org/vuln/gsd-2021-21684 gsd-2021-21684 2026-10-03T18:47:18.305351+00:00 gsd-2021-21684 https://cve.radiocsirt.org/vuln/rhsa-2022:0055 RHSA-2022:0055 — Red Hat Security Advisory: OpenShift Container Platform 4.10.3 bug fix and security update 2026-10-03T18:47:18.305364+00:00

CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix coreos-installer: incorrect signature verification on gzip-compressed install images jenkins-2-plugins/git: stored XSS vulnerability jenkins: FilePath#mkdirs does not check permission to create parent directories jenkins: File path filters do not canonicalize paths, allowing operations to follow symbolic links to outside allowed directories jenkins: FilePath#untar does not check permission to create symbolic links when unarchiving a symbolic link jenkins: FilePath#reading(FileVisitor) does not reject any operations allowing users to have unrestricted read access jenkins: FilePath#unzip and FilePath#untar were not subject to any access control jenkins: Agent processes are able to completely bypass file path filtering by wrapping the file operation in an agent file path jenkins: Creating symbolic links is possible without the symlink permission jenkins: The operations FilePath#renameTo and FilePath#moveAllChildrenTo only check read permission on the source path jenkins: When creating temporary files, permission to create files is only checked after they’ve been created. jenkins: FilePath#toURI, FilePath#hasSymlink, FilePath#absolutize, FilePath#isDescendant, and FilePath#get*DiskSpace do not check any permissions jenkins: FilePath#listFiles lists files outside directories with agent read access when following symbolic links. jenkins: Agent-to-controller access control allowed writing to sensitive directory use…

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0432 WID-SEC-W-2023-0432 — Jenkins: Mehrere Schwachstellen 2026-10-03T18:47:18.305435+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Dateien zu manipulieren oder einen Cross-Site-Scripting-Angriff durchzuführen.