https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T18:34:32.232992+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2022-53890 cnvd-2022-53890 2026-10-06T18:34:32.236337+00:00 cnvd-2022-53890 https://cve.radiocsirt.org/vuln/euvd-2026-17948 EUVD-2026-17948 2026-10-06T18:34:32.236376+00:00 EUVD-2026-17948 https://cve.radiocsirt.org/vuln/fkie_cve-2022-34800 fkie_cve-2022-34800 2026-10-06T18:34:32.236390+00:00

Jenkins Build Notifications Plugin 1.5.0 and earlier stores tokens unencrypted in its global configuration files on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system.

 https://cve.radiocsirt.org/vuln/ghsa-v3r8-6vfj-pppf GHSA-v3r8-6vfj-pppf — Plaintext Storage of a Password in Jenkins Build Notifications Plugin 2026-10-06T18:34:32.236422+00:00

Affected: Maven: tools.devnull:build-notifications

Build Notifications Plugin 1.5.0 and earlier stores multiple tokens unencrypted in its global configuration files on the Jenkins controller as part of its configuration:- Pushover Application Token in `tools.devnull.jenkins.plugins.buildnotifications.PushoverNotifier.xml`\n- Slack Bot Token in `tools.devnull.jenkins.plugins.buildnotifications.SlackNotifier.xml`\n- Telegram Bot Token in `tools.devnull.jenkins.plugins.buildnotifications.TelegramNotifier.xml`

 https://cve.radiocsirt.org/vuln/gsd-2022-34800 gsd-2022-34800 2026-10-06T18:34:32.236447+00:00 gsd-2022-34800