https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T20:26:21.909158+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2022-16727 cnvd-2022-16727 2026-10-03T20:26:22.062450+00:00 cnvd-2022-16727 https://cve.radiocsirt.org/vuln/euvd-2026-14400 EUVD-2026-14400 2026-10-03T20:26:22.062496+00:00 EUVD-2026-14400 https://cve.radiocsirt.org/vuln/fkie_cve-2022-25179 fkie_cve-2022-25179 2026-10-03T20:26:22.062510+00:00

Jenkins Pipeline: Multibranch Plugin 706.vd43c65dec013 and earlier follows symbolic links to locations outside of the checkout directory for the configured SCM when reading files using the readTrusted step, allowing attackers able to configure Pipelines permission to read arbitrary files on the Jenkins controller file system.

 https://cve.radiocsirt.org/vuln/ghsa-2m9w-9xh2-wxc3 GHSA-2m9w-9xh2-wxc3 — Link Following in Jenkins Pipeline Multibranch Plugin 2026-10-03T20:26:22.062543+00:00

Affected: Maven: org.jenkins-ci.plugins.workflow:workflow-multibranch

Jenkins Pipeline: Multibranch Plugin prior to 2.23.1, 2.26.1, 696.698.v9b4218eea50f, and 707.v71c3f0a_6ccdb_ follows symbolic links to locations outside of the checkout directory for the configured SCM when reading files using the readTrusted step, allowing attackers able to configure Pipelines permission to read arbitrary files on the Jenkins controller file system.

 https://cve.radiocsirt.org/vuln/gsd-2022-25179 gsd-2022-25179 2026-10-03T20:26:22.062571+00:00 gsd-2022-25179 https://cve.radiocsirt.org/vuln/rhsa-2022:0871 RHSA-2022:0871 — Red Hat Security Advisory: OpenShift Container Platform 4.8.35 security update 2026-10-03T20:26:22.062583+00:00

CRI-O: Arbitrary code execution in cri-o via abusing “kernel.core_pattern” kernel parameter workflow-cps: OS command execution through crafted SCM contents workflow-cps-global-lib: OS command execution through crafted SCM contents workflow-multibranch: OS command execution through crafted SCM contents workflow-cps: Pipeline-related plugins follow symbolic links or do not limit path names workflow-cps-global-lib: Pipeline-related plugins follow symbolic links or do not limit path names workflow-cps-global-lib: Pipeline-related plugins follow symbolic links or do not limit path names workflow-multibranch: Pipeline-related plugins follow symbolic links or do not limit path names workflow-cps: Password parameters are included from the original build in replayed builds workflow-cps-global-lib: Sandbox bypass vulnerability workflow-cps-global-lib: Sandbox bypass vulnerability workflow-cps-global-lib: Sandbox bypass vulnerability pipeline-build-step: Password parameter default values exposed credentials: Stored XSS vulnerabilities in jenkins plugin subversion: Stored XSS vulnerabilities in Jenkins subversion plugin