https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T14:13:16.489553+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2022-16726 cnvd-2022-16726 2026-10-03T14:13:16.631976+00:00 cnvd-2022-16726 https://cve.radiocsirt.org/vuln/euvd-2026-14422 EUVD-2026-14422 2026-10-03T14:13:16.632019+00:00 EUVD-2026-14422 https://cve.radiocsirt.org/vuln/fkie_cve-2022-25180 fkie_cve-2022-25180 2026-10-03T14:13:16.632034+00:00

Jenkins Pipeline: Groovy Plugin 2648.va9433432b33c and earlier includes password parameters from the original build in replayed builds, allowing attackers with Run/Replay permission to obtain the values of password parameters passed to previous builds of a Pipeline.

 https://cve.radiocsirt.org/vuln/ghsa-qv6q-x9vr-w7j3 GHSA-qv6q-x9vr-w7j3 — Jenkins Pipeline: Groovy Plugin has Insufficiently Protected Credentials 2026-10-03T14:13:16.632064+00:00

Affected: Maven: org.jenkins-ci.plugins.workflow:workflow-cps

Jenkins Pipeline: Groovy Plugin 2648.va9433432b33c and earlier includes password parameters from the original build in replayed builds.

This allows attackers with Run/Replay permission to obtain the values of password parameters passed to previous builds of a Pipeline.

Pipeline: Groovy Plugin 2656.vf7a_e7b_75a_457 does not allow builds containing password parameters to be replayed.

 https://cve.radiocsirt.org/vuln/gsd-2022-25180 gsd-2022-25180 2026-10-03T14:13:16.632090+00:00 gsd-2022-25180 https://cve.radiocsirt.org/vuln/rhsa-2022:0871 RHSA-2022:0871 — Red Hat Security Advisory: OpenShift Container Platform 4.8.35 security update 2026-10-03T14:13:16.632102+00:00

CRI-O: Arbitrary code execution in cri-o via abusing “kernel.core_pattern” kernel parameter workflow-cps: OS command execution through crafted SCM contents workflow-cps-global-lib: OS command execution through crafted SCM contents workflow-multibranch: OS command execution through crafted SCM contents workflow-cps: Pipeline-related plugins follow symbolic links or do not limit path names workflow-cps-global-lib: Pipeline-related plugins follow symbolic links or do not limit path names workflow-cps-global-lib: Pipeline-related plugins follow symbolic links or do not limit path names workflow-multibranch: Pipeline-related plugins follow symbolic links or do not limit path names workflow-cps: Password parameters are included from the original build in replayed builds workflow-cps-global-lib: Sandbox bypass vulnerability workflow-cps-global-lib: Sandbox bypass vulnerability workflow-cps-global-lib: Sandbox bypass vulnerability pipeline-build-step: Password parameter default values exposed credentials: Stored XSS vulnerabilities in jenkins plugin subversion: Stored XSS vulnerabilities in Jenkins subversion plugin