https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T17:09:45.368900+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-195603 EUVD-2026-195603 2026-10-03T17:09:45.502558+00:00 EUVD-2026-195603 https://cve.radiocsirt.org/vuln/fkie_cve-2022-25176 fkie_cve-2022-25176 2026-10-03T17:09:45.502601+00:00

Jenkins Pipeline: Groovy Plugin 2648.va9433432b33c and earlier follows symbolic links to locations outside of the checkout directory for the configured SCM when reading the script file (typically Jenkinsfile) for Pipelines, allowing attackers able to configure Pipelines to read arbitrary files on the Jenkins controller file system.

 https://cve.radiocsirt.org/vuln/ghsa-6473-gqrj-4p65 GHSA-6473-gqrj-4p65 — Improper Link Resolution Before File Access in Jenkins Pipeline: Groovy Plugin 2026-10-03T17:09:45.502634+00:00

Affected: Maven: org.jenkins-ci.plugins.workflow:workflow-cps

Jenkins Pipeline: Groovy Plugin 2648.va9433432b33c and earlier follows symbolic links to locations outside of the checkout directory for the configured SCM when reading the script file (typically Jenkinsfile) for Pipelines, allowing attackers able to configure Pipelines to read arbitrary files on the Jenkins controller file system.

 https://cve.radiocsirt.org/vuln/gsd-2022-25176 gsd-2022-25176 2026-10-03T17:09:45.502671+00:00 gsd-2022-25176 https://cve.radiocsirt.org/vuln/rhsa-2022:0871 RHSA-2022:0871 — Red Hat Security Advisory: OpenShift Container Platform 4.8.35 security update 2026-10-03T17:09:45.502693+00:00

CRI-O: Arbitrary code execution in cri-o via abusing “kernel.core_pattern” kernel parameter workflow-cps: OS command execution through crafted SCM contents workflow-cps-global-lib: OS command execution through crafted SCM contents workflow-multibranch: OS command execution through crafted SCM contents workflow-cps: Pipeline-related plugins follow symbolic links or do not limit path names workflow-cps-global-lib: Pipeline-related plugins follow symbolic links or do not limit path names workflow-cps-global-lib: Pipeline-related plugins follow symbolic links or do not limit path names workflow-multibranch: Pipeline-related plugins follow symbolic links or do not limit path names workflow-cps: Password parameters are included from the original build in replayed builds workflow-cps-global-lib: Sandbox bypass vulnerability workflow-cps-global-lib: Sandbox bypass vulnerability workflow-cps-global-lib: Sandbox bypass vulnerability pipeline-build-step: Password parameter default values exposed credentials: Stored XSS vulnerabilities in jenkins plugin subversion: Stored XSS vulnerabilities in Jenkins subversion plugin