https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T03:30:31.627050+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2019-23797 cnvd-2019-23797 2026-10-15T03:30:31.640888+00:00 cnvd-2019-23797 https://cve.radiocsirt.org/vuln/euvd-2026-53587 EUVD-2026-53587 2026-10-15T03:30:31.640925+00:00 EUVD-2026-53587 https://cve.radiocsirt.org/vuln/fkie_cve-2019-10348 fkie_cve-2019-10348 2026-10-15T03:30:31.640939+00:00

Jenkins Gogs Plugin stored credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.

 https://cve.radiocsirt.org/vuln/ghsa-q736-rgcp-q443 GHSA-q736-rgcp-q443 — Jenkins Gogs Plugin stored credentials in plain text 2026-10-15T03:30:31.640968+00:00

Affected: Maven: org.jenkins-ci.plugins:gogs-webhook

Jenkins Gogs Plugin stored credentials unencrypted in job `config.xml` files on the Jenkins controller. These credentials could be viewed by users with Extended Read permission, or access to the Jenkins controller file system.

Gogs Plugin now stores credentials encrypted.

 https://cve.radiocsirt.org/vuln/gsd-2019-10348 gsd-2019-10348 2026-10-15T03:30:31.640992+00:00 gsd-2019-10348