https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T06:37:16.053130+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-201547 EUVD-2026-201547 2026-10-05T06:37:16.104297+00:00 EUVD-2026-201547 https://cve.radiocsirt.org/vuln/fkie_cve-2024-52551 fkie_cve-2024-52551 2026-10-05T06:37:16.104335+00:00

Jenkins Pipeline: Declarative Plugin 2.2214.vb_b_34b_2ea_9b_83 and earlier does not check whether the main (Jenkinsfile) script used to restart a build from a specific stage is approved, allowing attackers with Item/Build permission to restart a previous build whose (Jenkinsfile) script is no longer approved.

 https://cve.radiocsirt.org/vuln/ghsa-p2qq-c693-q53w GHSA-p2qq-c693-q53w — Restarting a run with revoked script approval allowed by Jenkins Pipeline: Declarative Plugin 2026-10-05T06:37:16.104368+00:00

Affected: Maven: org.jenkinsci.plugins:pipeline-model-parent

Jenkins Pipeline: Declarative Plugin 2.2214.vb_b_34b_2ea_9b_83 and earlier does not check whether the main (Jenkinsfile) script used to restart a build from a specific stage is approved, allowing attackers with Item/Build permission to restart a previous build whose (Jenkinsfile) script is no longer approved. This allows attackers with Item/Build permission to restart a previous build whose (Jenkinsfile) script is no longer approved. Pipeline: Declarative Plugin 2.2218.v56d0cda_37c72 refuses to restart a build whose main (Jenkinsfile) script is unapproved.

 https://cve.radiocsirt.org/vuln/rhsa-2025:2218 RHSA-2025:2218 — Red Hat Security Advisory: Red Hat Product OCP Tools 4.17 Openshift Jenkins security update 2026-10-05T06:37:16.104395+00:00

com.thoughtworks.xstream: XStream is vulnerable to a Denial of Service attack due to stack overflow from a manipulated binary input stream json-lib: Mishandling of an unbalanced comment string in json-lib jenkins-plugin/script-security: Jenkins Script Security Plugin File Disclosure Vulnerability jenkins-plugin/workflow-cps: Lack of Approval Check for Rebuilt Jenkins Pipelines jenkins-plugin/pipeline-model-definition: Jenkins Pipeline Declarative Plugin Allows Restart of Builds with Unapproved Jenkinsfile

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3456 WID-SEC-W-2024-3456 — Jenkins Plugins: Mehrere Schwachstellen 2026-10-05T06:37:16.104425+00:00

Ein entfernter authentisierter Angreifer oder ein anonymer Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um Dateien zu manipulieren, vertrauliche Informationen preiszugeben, beliebigen Code auszuführen, sich erhöhte Rechte zu verschaffen und einen Cross-Site-Scripting-Angriff durchzuführen.