https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T04:07:20.520619+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-19625 EUVD-2026-19625 2026-10-03T04:07:20.592259+00:00 EUVD-2026-19625 https://cve.radiocsirt.org/vuln/fkie_cve-2022-43402 fkie_cve-2022-43402 2026-10-03T04:07:20.592310+00:00

A sandbox bypass vulnerability involving various casts performed implicitly by the Groovy language runtime in Jenkins Pipeline: Groovy Plugin 2802.v5ea_628154b_c2 and earlier allows attackers with permission to define and run sandboxed scripts, including Pipelines, to bypass the sandbox protection and execute arbitrary code in the context of the Jenkins controller JVM.

 https://cve.radiocsirt.org/vuln/ghsa-mqc2-w9r8-mmxm GHSA-mqc2-w9r8-mmxm — Jenkins Pipeline: Groovy Plugin allows sandbox protection bypass and arbitrary code execution 2026-10-03T04:07:20.592361+00:00

Affected: Maven: org.jenkins-ci.plugins.workflow:workflow-cps

A sandbox bypass vulnerability involving various casts performed implicitly by the Groovy language runtime in Jenkins Pipeline: Groovy Plugin 2802.v5ea_628154b_c2 and earlier allows attackers with permission to define and run sandboxed scripts, including Pipelines, to bypass the sandbox protection and execute arbitrary code in the context of the Jenkins controller JVM. Pipeline: Groovy Plugin 2803.v1a_f77ffcc773 intercepts Groovy casts performed implicitly by the Groovy language runtime

 https://cve.radiocsirt.org/vuln/gsd-2022-43402 gsd-2022-43402 2026-10-03T04:07:20.592403+00:00 gsd-2022-43402 https://cve.radiocsirt.org/vuln/rhsa-2023:0560 RHSA-2023:0560 — Red Hat Security Advisory: OpenShift Container Platform 4.10.51 security update 2026-10-03T04:07:20.592416+00:00

google-oauth-client: missing PKCE support in accordance with the RFC for OAuth 2.0 for Native Apps can lead to improper authorization snakeyaml: Denial of Service due to missing nested depth limitation for collections plugin: CSRF vulnerability in Script Security Plugin plugin: User-scoped credentials exposed to other users by Pipeline SCM API for Blue Ocean Plugin plugin: CSRF vulnerability in Blue Ocean Plugin plugin: missing permission checks in Blue Ocean Plugin jenkins-plugin: Cross-site Request Forgery (CSRF) in org.jenkins-ci.plugins:git plugin: Lack of authentication mechanism in Git Plugin webhook plugin: Lack of authentication mechanism in Git Plugin webhook plugin: Non-constant time webhook signature comparison in GitHub Plugin jenkins-plugin/script-security: Sandbox bypass vulnerabilities in Jenkins Script Security Plugin jenkins-plugin/workflow-cps: Sandbox bypass vulnerabilities in Pipeline: Groovy Plugin jenkins-plugin/script-security: Sandbox bypass vulnerabilities in Jenkins Script Security Plugin jenkins-plugin/script-security: Sandbox bypass vulnerabilities in Jenkins Script Security Plugin jenkins-plugin/pipeline-groovy-lib: Sandbox bypass vulnerability in Pipeline: Groovy Libraries Plugin jenkins-plugin/workflow-cps-global-lib: Sandbox bypass vulnerability in Pipeline: Deprecated Groovy Libraries Plugin jenkins-plugin/pipeline-input-step: CSRF protection for any URL can be bypassed in Pipeline: Input Step Plugin jenkins-plugin/pipeline-stage-view: CSRF p…

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1804 WID-SEC-W-2022-1804 — Jenkins Plugins: Mehrere Schwachstellen 2026-10-03T04:07:20.592466+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in verschiedenen Jenkins Plugins ausnutzen, um beliebigen Programmcode auszuführen, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuführen oder Sicherheitsvorkehrungen zu umgehen.