https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T21:28:15.987800+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-06413 bdu:2023-06413 2026-10-04T21:28:15.991576+00:00 bdu:2023-06413 https://cve.radiocsirt.org/vuln/euvd-2026-193908 EUVD-2026-193908 2026-10-04T21:28:15.991621+00:00 EUVD-2026-193908 https://cve.radiocsirt.org/vuln/fkie_cve-2023-40340 fkie_cve-2023-40340 2026-10-04T21:28:15.991636+00:00

Jenkins NodeJS Plugin 1.6.0 and earlier does not properly mask (i.e., replace with asterisks) credentials specified in the Npm config file in Pipeline build logs.

 https://cve.radiocsirt.org/vuln/ghsa-36fg-whr2-g999 GHSA-36fg-whr2-g999 — Jenkins NodeJS Plugin improper credential masking vulnerability 2026-10-04T21:28:15.991664+00:00

Affected: Maven: org.jenkins-ci.plugins:nodejs

Jenkins NodeJS Plugin integrates with Config File Provider Plugin to specify custom NPM settings, including credentials for authentication, in a Npm config file.

NodeJS Plugin 1.6.0 and earlier does not properly mask (i.e., replace with asterisks) credentials specified in the Npm config file in Pipeline build logs.

NodeJS Plugin 1.6.1 masks credentials specified in the Npm config file in Pipeline build logs.

 https://cve.radiocsirt.org/vuln/gsd-2023-40340 gsd-2023-40340 2026-10-04T21:28:15.991690+00:00 gsd-2023-40340 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2088 WID-SEC-W-2023-2088 — Jenkins: Mehrere Schwachstellen 2026-10-04T21:28:15.991701+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen offenzulegen oder Sicherheitsmaßnahmen zu umgehen.