https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T22:36:36.003452+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-14441 EUVD-2026-14441 2026-10-02T22:36:36.344642+00:00 EUVD-2026-14441 https://cve.radiocsirt.org/vuln/fkie_cve-2022-25178 fkie_cve-2022-25178 2026-10-02T22:36:36.344697+00:00

Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier does not restrict the names of resources passed to the libraryResource step, allowing attackers able to configure Pipelines permission to read arbitrary files on the Jenkins controller file system.

 https://cve.radiocsirt.org/vuln/ghsa-5hfv-mg5x-mv32 GHSA-5hfv-mg5x-mv32 — Improper Limitation of a Pathname to a Restricted Directory in Jenkins Pipeline: Shared Groovy Libraries Plugin 2026-10-02T22:36:36.344734+00:00

Affected: Maven: org.jenkins-ci.plugins.workflow:workflow-cps-global-lib

Jenkins Pipeline: Shared Groovy Libraries Plugin does not restrict the names of resources passed to the libraryResource step, allowing attackers able to configure Pipelines permission to read arbitrary files on the Jenkins controller file system.

 https://cve.radiocsirt.org/vuln/gsd-2022-25178 gsd-2022-25178 2026-10-02T22:36:36.344763+00:00 gsd-2022-25178 https://cve.radiocsirt.org/vuln/rhsa-2022:0871 RHSA-2022:0871 — Red Hat Security Advisory: OpenShift Container Platform 4.8.35 security update 2026-10-02T22:36:36.344776+00:00

CRI-O: Arbitrary code execution in cri-o via abusing “kernel.core_pattern” kernel parameter workflow-cps: OS command execution through crafted SCM contents workflow-cps-global-lib: OS command execution through crafted SCM contents workflow-multibranch: OS command execution through crafted SCM contents workflow-cps: Pipeline-related plugins follow symbolic links or do not limit path names workflow-cps-global-lib: Pipeline-related plugins follow symbolic links or do not limit path names workflow-cps-global-lib: Pipeline-related plugins follow symbolic links or do not limit path names workflow-multibranch: Pipeline-related plugins follow symbolic links or do not limit path names workflow-cps: Password parameters are included from the original build in replayed builds workflow-cps-global-lib: Sandbox bypass vulnerability workflow-cps-global-lib: Sandbox bypass vulnerability workflow-cps-global-lib: Sandbox bypass vulnerability pipeline-build-step: Password parameter default values exposed credentials: Stored XSS vulnerabilities in jenkins plugin subversion: Stored XSS vulnerabilities in Jenkins subversion plugin