https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T11:41:01.703919+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-235870 EUVD-2026-235870 2026-10-02T11:41:01.816718+00:00 EUVD-2026-235870 https://cve.radiocsirt.org/vuln/fkie_cve-2022-45380 fkie_cve-2022-45380 2026-10-02T11:41:01.816757+00:00

Jenkins JUnit Plugin 1159.v0b_396e1e07dd and earlier converts HTTP(S) URLs in test report output to clickable links in an unsafe manner, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.

 https://cve.radiocsirt.org/vuln/ghsa-298r-5c48-7q2r GHSA-298r-5c48-7q2r — Jenkins JUnit Plugin subject to Cross-site Scripting via URL conversion 2026-10-02T11:41:01.816790+00:00

Affected: Maven: org.jenkins-ci.plugins:junit

JUnit Plugin 1159.v0b_396e1e07dd and earlier converts HTTP(S) URLs in test report output to clickable links.

This is done in an unsafe manner, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.

JUnit Plugin 1160.vf1f01a_a_ea_b_7f no longer converts URLs to clickable links.

 https://cve.radiocsirt.org/vuln/gsd-2022-45380 gsd-2022-45380 2026-10-02T11:41:01.816817+00:00 gsd-2022-45380 https://cve.radiocsirt.org/vuln/msrc_cve-2022-45380 msrc_CVE-2022-45380 — Jenkins JUnit Plugin 1159.v0b_396e1e07dd and earlier converts HTTP(S) URLs in test report output to clickable links in… 2026-10-02T11:41:01.816831+00:00 msrc_CVE-2022-45380 https://cve.radiocsirt.org/vuln/rhsa-2023:0560 RHSA-2023:0560 — Red Hat Security Advisory: OpenShift Container Platform 4.10.51 security update 2026-10-02T11:41:01.816851+00:00

google-oauth-client: missing PKCE support in accordance with the RFC for OAuth 2.0 for Native Apps can lead to improper authorization snakeyaml: Denial of Service due to missing nested depth limitation for collections plugin: CSRF vulnerability in Script Security Plugin plugin: User-scoped credentials exposed to other users by Pipeline SCM API for Blue Ocean Plugin plugin: CSRF vulnerability in Blue Ocean Plugin plugin: missing permission checks in Blue Ocean Plugin jenkins-plugin: Cross-site Request Forgery (CSRF) in org.jenkins-ci.plugins:git plugin: Lack of authentication mechanism in Git Plugin webhook plugin: Lack of authentication mechanism in Git Plugin webhook plugin: Non-constant time webhook signature comparison in GitHub Plugin jenkins-plugin/script-security: Sandbox bypass vulnerabilities in Jenkins Script Security Plugin jenkins-plugin/workflow-cps: Sandbox bypass vulnerabilities in Pipeline: Groovy Plugin jenkins-plugin/script-security: Sandbox bypass vulnerabilities in Jenkins Script Security Plugin jenkins-plugin/script-security: Sandbox bypass vulnerabilities in Jenkins Script Security Plugin jenkins-plugin/pipeline-groovy-lib: Sandbox bypass vulnerability in Pipeline: Groovy Libraries Plugin jenkins-plugin/workflow-cps-global-lib: Sandbox bypass vulnerability in Pipeline: Deprecated Groovy Libraries Plugin jenkins-plugin/pipeline-input-step: CSRF protection for any URL can be bypassed in Pipeline: Input Step Plugin jenkins-plugin/pipeline-stage-view: CSRF p…

 https://cve.radiocsirt.org/vuln/tssa-2025-00001 tssa-2025-00001 — Project CSAF document 2026-10-02T11:41:01.816988+00:00

Detailed list of project vulnerabilities

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-2056 WID-SEC-W-2022-2056 — Jenkins: Mehrere Schwachstellen 2026-10-02T11:41:01.817024+00:00

Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in verschiedenen Jenkins Plugins ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Cross-Site-Scripting-Angriff durchzuführen.