https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T11:59:49.312388+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-14418 EUVD-2026-14418 2026-10-03T11:59:49.452383+00:00 EUVD-2026-14418 https://cve.radiocsirt.org/vuln/fkie_cve-2022-25183 fkie_cve-2022-25183 2026-10-03T11:59:49.452437+00:00

Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier uses the names of Pipeline libraries to create cache directories without any sanitization, allowing attackers with Item/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM using specially crafted library names if a global Pipeline library configured to use caching already exists.

 https://cve.radiocsirt.org/vuln/ghsa-pfwp-q984-w7wh GHSA-pfwp-q984-w7wh — Jenkins Pipeline: Deprecated Groovy Libraries Plugin Protection Mechanism Failure 2026-10-03T11:59:49.452487+00:00

Affected: Maven: org.jenkins-ci.plugins.workflow:workflow-cps-global-lib

Jenkins Pipeline: Deprecated Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier uses the names of Pipeline libraries to create cache directories without any sanitization.

This allows attackers with Item/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM using specially crafted library names if a global Pipeline library configured to use caching already exists.

Pipeline: Deprecated Groovy Libraries Plugin 561.va_ce0de3c2d69 sanitizes the names of Pipeline libraries when creating library cache directories.

 https://cve.radiocsirt.org/vuln/gsd-2022-25183 gsd-2022-25183 2026-10-03T11:59:49.452534+00:00 gsd-2022-25183 https://cve.radiocsirt.org/vuln/rhsa-2022:0871 RHSA-2022:0871 — Red Hat Security Advisory: OpenShift Container Platform 4.8.35 security update 2026-10-03T11:59:49.452558+00:00

CRI-O: Arbitrary code execution in cri-o via abusing “kernel.core_pattern” kernel parameter workflow-cps: OS command execution through crafted SCM contents workflow-cps-global-lib: OS command execution through crafted SCM contents workflow-multibranch: OS command execution through crafted SCM contents workflow-cps: Pipeline-related plugins follow symbolic links or do not limit path names workflow-cps-global-lib: Pipeline-related plugins follow symbolic links or do not limit path names workflow-cps-global-lib: Pipeline-related plugins follow symbolic links or do not limit path names workflow-multibranch: Pipeline-related plugins follow symbolic links or do not limit path names workflow-cps: Password parameters are included from the original build in replayed builds workflow-cps-global-lib: Sandbox bypass vulnerability workflow-cps-global-lib: Sandbox bypass vulnerability workflow-cps-global-lib: Sandbox bypass vulnerability pipeline-build-step: Password parameter default values exposed credentials: Stored XSS vulnerabilities in jenkins plugin subversion: Stored XSS vulnerabilities in Jenkins subversion plugin