https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T07:52:05.362951+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-19619 EUVD-2026-19619 2026-10-03T07:52:05.485219+00:00 EUVD-2026-19619 https://cve.radiocsirt.org/vuln/fkie_cve-2022-43403 fkie_cve-2022-43403 2026-10-03T07:52:05.485256+00:00

A sandbox bypass vulnerability involving casting an array-like value to an array type in Jenkins Script Security Plugin 1183.v774b_0b_0a_a_451 and earlier allows attackers with permission to define and run sandboxed scripts, including Pipelines, to bypass the sandbox protection and execute arbitrary code in the context of the Jenkins controller JVM.

 https://cve.radiocsirt.org/vuln/ghsa-f6mq-6fx5-w2ch GHSA-f6mq-6fx5-w2ch — Jenkins Script Security Plugin sandbox bypass vulnerability 2026-10-03T07:52:05.485289+00:00

Affected: Maven: org.jenkins-ci.plugins:script-security

A sandbox bypass vulnerability involving casting an array-like value to an array type in Jenkins Script Security Plugin 1183.v774b_0b_0a_a_451 and earlier allows attackers with permission to define and run sandboxed scripts, including Pipelines, to bypass the sandbox protection and execute arbitrary code in the context of the Jenkins controller JVM. Script Security Plugin 1184.v85d16b_d851b_3 intercepts per-element casts when casting array-like values to array types.

 https://cve.radiocsirt.org/vuln/gsd-2022-43403 gsd-2022-43403 2026-10-03T07:52:05.485315+00:00 gsd-2022-43403 https://cve.radiocsirt.org/vuln/rhsa-2023:0560 RHSA-2023:0560 — Red Hat Security Advisory: OpenShift Container Platform 4.10.51 security update 2026-10-03T07:52:05.485327+00:00

google-oauth-client: missing PKCE support in accordance with the RFC for OAuth 2.0 for Native Apps can lead to improper authorization snakeyaml: Denial of Service due to missing nested depth limitation for collections plugin: CSRF vulnerability in Script Security Plugin plugin: User-scoped credentials exposed to other users by Pipeline SCM API for Blue Ocean Plugin plugin: CSRF vulnerability in Blue Ocean Plugin plugin: missing permission checks in Blue Ocean Plugin jenkins-plugin: Cross-site Request Forgery (CSRF) in org.jenkins-ci.plugins:git plugin: Lack of authentication mechanism in Git Plugin webhook plugin: Lack of authentication mechanism in Git Plugin webhook plugin: Non-constant time webhook signature comparison in GitHub Plugin jenkins-plugin/script-security: Sandbox bypass vulnerabilities in Jenkins Script Security Plugin jenkins-plugin/workflow-cps: Sandbox bypass vulnerabilities in Pipeline: Groovy Plugin jenkins-plugin/script-security: Sandbox bypass vulnerabilities in Jenkins Script Security Plugin jenkins-plugin/script-security: Sandbox bypass vulnerabilities in Jenkins Script Security Plugin jenkins-plugin/pipeline-groovy-lib: Sandbox bypass vulnerability in Pipeline: Groovy Libraries Plugin jenkins-plugin/workflow-cps-global-lib: Sandbox bypass vulnerability in Pipeline: Deprecated Groovy Libraries Plugin jenkins-plugin/pipeline-input-step: CSRF protection for any URL can be bypassed in Pipeline: Input Step Plugin jenkins-plugin/pipeline-stage-view: CSRF p…

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1804 WID-SEC-W-2022-1804 — Jenkins Plugins: Mehrere Schwachstellen 2026-10-03T07:52:05.485386+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in verschiedenen Jenkins Plugins ausnutzen, um beliebigen Programmcode auszuführen, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuführen oder Sicherheitsvorkehrungen zu umgehen.