https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T07:46:56.950787+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-201494 EUVD-2026-201494 2026-10-05T07:46:56.954323+00:00 EUVD-2026-201494 https://cve.radiocsirt.org/vuln/fkie_cve-2024-52554 fkie_cve-2024-52554 2026-10-05T07:46:56.954385+00:00

Jenkins Shared Library Version Override Plugin 17.v786074c9fce7 and earlier declares folder-scoped library overrides as trusted, so that they're not executed in the Script Security sandbox, allowing attackers with Item/Configure permission on a folder to configure a folder-scoped library override that runs without sandbox protection.

 https://cve.radiocsirt.org/vuln/ghsa-7845-crfj-phc4 GHSA-7845-crfj-phc4 — Script security bypass vulnerability in Jenkins Shared Library Version Override Plugin 2026-10-05T07:46:56.954436+00:00

Affected: Maven: io.jenkins.plugins:shared-library-version-override

Jenkins Shared Library Version Override Plugin 17.v786074c9fce7 and earlier declares folder-scoped library overrides as trusted, so that they're not executed in the Script Security sandbox, allowing attackers with Item/Configure permission on a folder to configure a folder-scoped library override that runs without sandbox protection. This allows attackers with Item/Configure permission on a folder to configure a folder-scoped library override that runs without sandbox protection. Shared Library Version Override Plugin 19.v3a_c975738d4a_ declares folder-scoped library overrides as untrusted, so that they’re executed in the Script Security sandbox.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3456 WID-SEC-W-2024-3456 — Jenkins Plugins: Mehrere Schwachstellen 2026-10-05T07:46:56.954487+00:00

Ein entfernter authentisierter Angreifer oder ein anonymer Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um Dateien zu manipulieren, vertrauliche Informationen preiszugeben, beliebigen Code auszuführen, sich erhöhte Rechte zu verschaffen und einen Cross-Site-Scripting-Angriff durchzuführen.