https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T20:30:38.161969+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-00900 bdu:2024-00900 2026-10-02T20:30:38.166536+00:00 bdu:2024-00900 https://cve.radiocsirt.org/vuln/euvd-2026-217215 EUVD-2026-217215 2026-10-02T20:30:38.166595+00:00 EUVD-2026-217215 https://cve.radiocsirt.org/vuln/fkie_cve-2024-23903 fkie_cve-2024-23903 2026-10-02T20:30:38.166620+00:00

Jenkins GitLab Branch Source Plugin 684.vea_fa_7c1e2fe3 and earlier uses a non-constant time comparison function when checking whether the provided and expected webhook token are equal, potentially allowing attackers to use statistical methods to obtain a valid webhook token.

 https://cve.radiocsirt.org/vuln/ghsa-f67f-2j6r-m4c9 GHSA-f67f-2j6r-m4c9 — Non-constant time webhook token comparison in Jenkins GitLab Branch Source Plugin 2026-10-02T20:30:38.166667+00:00

Affected: Maven: io.jenkins.plugins:gitlab-branch-source

Jenkins GitLab Branch Source Plugin 684.vea_fa_7c1e2fe3 and earlier does not use a constant-time comparison function when checking whether the provided and expected webhook token are equal.

This could potentially allow attackers to use statistical methods to obtain a valid webhook token.

GitLab Branch Source Plugin 688.v5fa_356ee8520 uses a constant-time comparison function when validating the webhook token.

 https://cve.radiocsirt.org/vuln/gsd-2024-23903 gsd-2024-23903 2026-10-02T20:30:38.166710+00:00 gsd-2024-23903 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0199 WID-SEC-W-2024-0199 — Jenkins: Mehrere Schwachstellen 2026-10-02T20:30:38.166729+00:00

Ein entfernter Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, Dateien zu manipulieren oder Cross-Site Scripting (XSS)-Angriffe durchzuführen.