https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T03:29:36.570224+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-171449 EUVD-2026-171449 2026-10-08T03:29:36.572760+00:00 EUVD-2026-171449 https://cve.radiocsirt.org/vuln/fkie_cve-2018-1000142 fkie_cve-2018-1000142 2026-10-08T03:29:36.572803+00:00

An exposure of sensitive information vulnerability exists in Jenkins GitHub Pull Request Builder Plugin version 1.39.0 and older in GhprbCause.java that allows an attacker with local file system access to obtain GitHub credentials.

 https://cve.radiocsirt.org/vuln/ghsa-hr74-2j5v-ghfv GHSA-hr74-2j5v-ghfv — Jenkins GitHub Pull Request Builder Plugin allows attacker with local file system access to obtain GitHub credentials 2026-10-08T03:29:36.572833+00:00

Affected: Maven: org.jenkins-ci.plugins:ghprb

An exposure of sensitive information vulnerability exists in Jenkins GitHub Pull Request Builder Plugin version 1.39.0 and older in GhprbCause.java that allows an attacker with local file system access to obtain GitHub credentials. Since 1.40.0, the plugin no longer stores serialized objects containing the credential on disk. Builds started before the plugin was updated to 1.40.0 will retain the encoded credentials on disk. We strongly recommend revoking old GitHub credentials used in Jenkins. We’re providing a script for use in the Script Console that will attempt to remove old stored credentials from build.xml files.

 https://cve.radiocsirt.org/vuln/gsd-2018-1000142 gsd-2018-1000142 2026-10-08T03:29:36.572864+00:00 gsd-2018-1000142