https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T19:58:57.999986+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-193932 EUVD-2026-193932 2026-10-04T19:58:58.003774+00:00 EUVD-2026-193932 https://cve.radiocsirt.org/vuln/fkie_cve-2023-40343 fkie_cve-2023-40343 2026-10-04T19:58:58.003805+00:00

Jenkins Tuleap Authentication Plugin 1.1.20 and earlier uses a non-constant time comparison function when validating an authentication token allowing attackers to use statistical methods to obtain a valid authentication token.

 https://cve.radiocsirt.org/vuln/ghsa-5r33-mgjf-6656 GHSA-5r33-mgjf-6656 — Jenkins Tuleap Authentication Plugin non-constant time token comparison 2026-10-04T19:58:58.003835+00:00

Affected: Maven: io.jenkins.plugins:tuleap-oauth

Jenkins Tuleap Authentication Plugin 1.1.20 and earlier does not use a constant-time comparison when checking whether two authentication tokens are equal.

This could potentially allow attackers to use statistical methods to obtain a valid authentication token.

Tuleap Authentication Plugin 1.1.21 uses a constant-time comparison when validating authentication tokens.

 https://cve.radiocsirt.org/vuln/gsd-2023-40343 gsd-2023-40343 2026-10-04T19:58:58.003862+00:00 gsd-2023-40343 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2088 WID-SEC-W-2023-2088 — Jenkins: Mehrere Schwachstellen 2026-10-04T19:58:58.003875+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen offenzulegen oder Sicherheitsmaßnahmen zu umgehen.