https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T10:38:42.480522+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2022-16725 cnvd-2022-16725 2026-10-03T10:38:42.565037+00:00 cnvd-2022-16725 https://cve.radiocsirt.org/vuln/euvd-2026-14404 EUVD-2026-14404 2026-10-03T10:38:42.565078+00:00 EUVD-2026-14404 https://cve.radiocsirt.org/vuln/fkie_cve-2022-25181 fkie_cve-2022-25181 2026-10-03T10:38:42.565095+00:00

A sandbox bypass vulnerability in Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier allows attackers with Item/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM through crafted SCM contents, if a global Pipeline library already exists.

 https://cve.radiocsirt.org/vuln/ghsa-7w2w-fwpf-9m4h GHSA-7w2w-fwpf-9m4h — Jenkins Pipeline: Deprecated Groovy Libraries Plugin Protection Mechanism Failure 2026-10-03T10:38:42.565145+00:00

Affected: Maven: org.jenkins-ci.plugins.workflow:workflow-cps-global-lib

Jenkins Pipeline: Deprecated Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier uses the same workspace directory for all checkouts of Pipeline libraries with the same name regardless of the SCM being used and the source of the library configuration.

This allows attackers with Item/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM through crafted SCM contents, if a global Pipeline library already exists.

Pipeline: Deprecated Groovy Libraries Plugin 561.va_ce0de3c2d69 uses distinct checkout directories per SCM for Pipeline libraries.

 https://cve.radiocsirt.org/vuln/gsd-2022-25181 gsd-2022-25181 2026-10-03T10:38:42.565185+00:00 gsd-2022-25181 https://cve.radiocsirt.org/vuln/rhsa-2022:0871 RHSA-2022:0871 — Red Hat Security Advisory: OpenShift Container Platform 4.8.35 security update 2026-10-03T10:38:42.565203+00:00

CRI-O: Arbitrary code execution in cri-o via abusing “kernel.core_pattern” kernel parameter workflow-cps: OS command execution through crafted SCM contents workflow-cps-global-lib: OS command execution through crafted SCM contents workflow-multibranch: OS command execution through crafted SCM contents workflow-cps: Pipeline-related plugins follow symbolic links or do not limit path names workflow-cps-global-lib: Pipeline-related plugins follow symbolic links or do not limit path names workflow-cps-global-lib: Pipeline-related plugins follow symbolic links or do not limit path names workflow-multibranch: Pipeline-related plugins follow symbolic links or do not limit path names workflow-cps: Password parameters are included from the original build in replayed builds workflow-cps-global-lib: Sandbox bypass vulnerability workflow-cps-global-lib: Sandbox bypass vulnerability workflow-cps-global-lib: Sandbox bypass vulnerability pipeline-build-step: Password parameter default values exposed credentials: Stored XSS vulnerabilities in jenkins plugin subversion: Stored XSS vulnerabilities in Jenkins subversion plugin