https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T09:57:24.742262+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2017-32554 cnvd-2017-32554 2026-10-07T09:57:24.753007+00:00 cnvd-2017-32554 https://cve.radiocsirt.org/vuln/euvd-2026-80775 EUVD-2026-80775 2026-10-07T09:57:24.753052+00:00 EUVD-2026-80775 https://cve.radiocsirt.org/vuln/fkie_cve-2017-1000095 fkie_cve-2017-1000095 2026-10-07T09:57:24.753067+00:00

The default whitelist included the following unsafe entries: DefaultGroovyMethods.putAt(Object, String, Object); DefaultGroovyMethods.getAt(Object, String). These allowed circumventing many of the access restrictions implemented in the script sandbox by using e.g. currentBuild['rawBuild'] rather than currentBuild.rawBuild. Additionally, the following entries allowed accessing private data that would not be accessible otherwise due to script security: groovy.json.JsonOutput.toJson(Closure); groovy.json.JsonOutput.toJson(Object).

 https://cve.radiocsirt.org/vuln/ghsa-m68x-cc2f-gr5h GHSA-m68x-cc2f-gr5h — Unsafe methods in the default list of approved signatures in Jenkins Script Security Plugin 2026-10-07T09:57:24.753102+00:00

Affected: Maven: org.jenkins-ci.plugins:script-security

The default whitelist included the following unsafe entries: DefaultGroovyMethods.putAt(Object, String, Object); DefaultGroovyMethods.getAt(Object, String). These allowed circumventing many of the access restrictions implemented in the script sandbox by using e.g. currentBuild['rawBuild'] rather than currentBuild.rawBuild. Additionally, the following entries allowed accessing private data that would not be accessible otherwise due to script security: groovy.json.JsonOutput.toJson(Closure); groovy.json.JsonOutput.toJson(Object).

 https://cve.radiocsirt.org/vuln/gsd-2017-1000095 gsd-2017-1000095 2026-10-07T09:57:24.753129+00:00 gsd-2017-1000095 https://cve.radiocsirt.org/vuln/rhea-2017:1716 RHEA-2017:1716 — Red Hat Enhancement Advisory: Red Hat OpenShift Container Platform 3.6 RPM Release Advisory 2026-10-07T09:57:24.753141+00:00

jenkins-plugin-script-security: Unsafe methods in the default whitelist (SECURITY-538)