https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T05:48:39.283330+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2022-79873 cnvd-2022-79873 2026-10-04T05:48:39.288480+00:00 cnvd-2022-79873 https://cve.radiocsirt.org/vuln/euvd-2026-15224 EUVD-2026-15224 2026-10-04T05:48:39.288568+00:00 EUVD-2026-15224 https://cve.radiocsirt.org/vuln/fkie_cve-2022-27206 fkie_cve-2022-27206 2026-10-04T05:48:39.288593+00:00

Jenkins GitLab Authentication Plugin 1.13 and earlier stores the GitLab client secret unencrypted in the global config.xml file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system.

 https://cve.radiocsirt.org/vuln/ghsa-hx3r-qwxv-5jw9 GHSA-hx3r-qwxv-5jw9 — Client Secret stored in plain text by Jenkins GitLab Authentication Plugin 2026-10-04T05:48:39.288638+00:00

Affected: Maven: org.jenkins-ci.plugins:gitlab-oauth

Jenkins GitLab Authentication Plugin 1.13 and earlier stores the GitLab client secret unencrypted in the global `config.xml` file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system.

This client secret can be viewed by users with access to the Jenkins controller file system.

 https://cve.radiocsirt.org/vuln/gsd-2022-27206 gsd-2022-27206 2026-10-04T05:48:39.288678+00:00 gsd-2022-27206