https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T03:40:36.987390+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-207918 EUVD-2026-207918 2026-10-04T03:40:36.991094+00:00 EUVD-2026-207918 https://cve.radiocsirt.org/vuln/fkie_cve-2023-35146 fkie_cve-2023-35146 2026-10-04T03:40:36.991131+00:00

Jenkins Template Workflows Plugin 41.v32d86a_313b_4a and earlier does not escape names of jobs used as buildings blocks for Template Workflow Job, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to create jobs.

 https://cve.radiocsirt.org/vuln/ghsa-62v2-xwh3-5gvx GHSA-62v2-xwh3-5gvx — Jenkins Template Workflows Plugin vulnerable to Stored Cross-site Scripting 2026-10-04T03:40:36.991174+00:00

Affected: Maven: org.jenkins.plugin.templateWorkflows:template-workflows

Jenkins Template Workflows Plugin 41.v32d86a_313b_4a and earlier does not escape names of jobs used as buildings blocks for Template Workflow Job.

This results in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to create jobs.

 https://cve.radiocsirt.org/vuln/gsd-2023-35146 gsd-2023-35146 2026-10-04T03:40:36.991227+00:00 gsd-2023-35146 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1471 WID-SEC-W-2023-1471 — Jenkins Core und Jenkins Plugins: Mehrere Schwachstellen 2026-10-04T03:40:36.991251+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Cross-Site-Scripting-Angriff durchzuführen.