https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T11:27:30.664381+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-00511 bdu:2022-00511 2026-10-03T11:27:30.691600+00:00 bdu:2022-00511 https://cve.radiocsirt.org/vuln/euvd-2026-13196 EUVD-2026-13196 2026-10-03T11:27:30.691639+00:00 EUVD-2026-13196 https://cve.radiocsirt.org/vuln/fkie_cve-2022-20617 fkie_cve-2022-20617 2026-10-03T11:27:30.691653+00:00

Jenkins Docker Commons Plugin 1.17 and earlier does not sanitize the name of an image or a tag, resulting in an OS command execution vulnerability exploitable by attackers with Item/Configure permission or able to control the contents of a previously configured job's SCM repository.

 https://cve.radiocsirt.org/vuln/ghsa-jpxj-vgq5-prjc GHSA-jpxj-vgq5-prjc — OS command execution vulnerability in Jenkins Docker Commons Plugin 2026-10-03T11:27:30.691684+00:00

Affected: Maven: org.jenkins-ci.plugins:docker-commons

Jenkins Docker Commons Plugin 1.17 and earlier does not sanitize the name of an image or a tag, resulting in an OS command execution vulnerability exploitable by attackers with Item/Configure permission or able to control the contents of a previously configured job's SCM repository.

 https://cve.radiocsirt.org/vuln/gsd-2022-20617 gsd-2022-20617 2026-10-03T11:27:30.691708+00:00 gsd-2022-20617 https://cve.radiocsirt.org/vuln/rhsa-2022:0055 RHSA-2022:0055 — Red Hat Security Advisory: OpenShift Container Platform 4.10.3 bug fix and security update 2026-10-03T11:27:30.691720+00:00

CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix coreos-installer: incorrect signature verification on gzip-compressed install images jenkins-2-plugins/git: stored XSS vulnerability jenkins: FilePath#mkdirs does not check permission to create parent directories jenkins: File path filters do not canonicalize paths, allowing operations to follow symbolic links to outside allowed directories jenkins: FilePath#untar does not check permission to create symbolic links when unarchiving a symbolic link jenkins: FilePath#reading(FileVisitor) does not reject any operations allowing users to have unrestricted read access jenkins: FilePath#unzip and FilePath#untar were not subject to any access control jenkins: Agent processes are able to completely bypass file path filtering by wrapping the file operation in an agent file path jenkins: Creating symbolic links is possible without the symlink permission jenkins: The operations FilePath#renameTo and FilePath#moveAllChildrenTo only check read permission on the source path jenkins: When creating temporary files, permission to create files is only checked after they’ve been created. jenkins: FilePath#toURI, FilePath#hasSymlink, FilePath#absolutize, FilePath#isDescendant, and FilePath#get*DiskSpace do not check any permissions jenkins: FilePath#listFiles lists files outside directories with agent read access when following symbolic links. jenkins: Agent-to-controller access control allowed writing to sensitive directory use…