https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T04:02:14.290169+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-193910 EUVD-2026-193910 2026-10-03T04:02:14.364403+00:00 EUVD-2026-193910 https://cve.radiocsirt.org/vuln/fkie_cve-2023-40339 fkie_cve-2023-40339 2026-10-03T04:02:14.364446+00:00

Jenkins Config File Provider Plugin 952.va_544a_6234b_46 and earlier does not mask (i.e., replace with asterisks) credentials specified in configuration files when they're written to the build log.

 https://cve.radiocsirt.org/vuln/ghsa-pv2g-vm98-vjxf GHSA-pv2g-vm98-vjxf — Jenkins Config File Provider Plugin improper credential masking vulnerability 2026-10-03T04:02:14.364481+00:00

Affected: Maven: org.jenkins-ci.plugins:config-file-provider

Jenkins Config File Provider Plugin 952.va_544a_6234b_46 and earlier does not mask (i.e., replace with asterisks) credentials specified in configuration files when they’re written to the build log.

Config File Provider Plugin 953.v0432a_802e4d2 masks credentials configured in configuration files if they appear in the build log.

 https://cve.radiocsirt.org/vuln/gsd-2023-40339 gsd-2023-40339 2026-10-03T04:02:14.364510+00:00 gsd-2023-40339 https://cve.radiocsirt.org/vuln/rhsa-2024:0777 RHSA-2024:0777 — Red Hat Security Advisory: jenkins and jenkins-2-plugins security update 2026-10-03T04:02:14.364523+00:00

snakeyaml: Denial of Service due to missing nested depth limitation for collections maven-shared-utils: Command injection via Commandline class apache-commons-text: variable interpolation RCE guava: insecure temporary directory creation jenkins-2-plugins/script-security: Sandbox bypass vulnerability in Script Security Plugin jenkins-2-plugins/JUnit: Stored XSS vulnerability in JUnit Plugin jenkins-2-plugins/pipeline-build-step: Stored XSS vulnerability in Pipeline: Build Step Plugin jackson-databind: denial of service via cylic dependencies Jenkins: Session fixation vulnerability in OpenShift Login Plugin Jenkins: Open redirect vulnerability in OpenShift Login Plugin golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487) jenkins-plugins: cloudbees-folder: CSRF vulnerability in Folders Plugin may approve unsandboxed scripts jenkins-plugins: cloudbees-folder: CSRF vulnerability in Folders Plugin jenkins-plugins: cloudbees-folder: Information disclosure in Folders Plugin jenkins-plugins: config-file-provider: Improper masking of credentials in Config File Provider Plugin jenkins-plugins: blueocean: CSRF vulnerability in Blue Ocean Plugin allows capturing credentials HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack)

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2088 WID-SEC-W-2023-2088 — Jenkins: Mehrere Schwachstellen 2026-10-03T04:02:14.364569+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen offenzulegen oder Sicherheitsmaßnahmen zu umgehen.