https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T13:58:36.515570+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2020-02162 bdu:2020-02162 2026-10-17T13:58:36.519863+00:00 bdu:2020-02162 https://cve.radiocsirt.org/vuln/cnvd-2020-20421 cnvd-2020-20421 2026-10-17T13:58:36.519906+00:00 cnvd-2020-20421 https://cve.radiocsirt.org/vuln/euvd-2026-53616 EUVD-2026-53616 2026-10-17T13:58:36.519922+00:00 EUVD-2026-53616 https://cve.radiocsirt.org/vuln/fkie_cve-2019-10384 fkie_cve-2019-10384 2026-10-17T13:58:36.519933+00:00

Jenkins 2.191 and earlier, LTS 2.176.2 and earlier allowed users to obtain CSRF tokens without an associated web session ID, resulting in CSRF tokens that did not expire and could be used to bypass CSRF protection for the anonymous user.

 https://cve.radiocsirt.org/vuln/ghsa-vcr8-h8qp-qj8h GHSA-vcr8-h8qp-qj8h — Cross-Site Request Forgery in Jenkins 2026-10-17T13:58:36.519972+00:00

Affected: Maven: org.jenkins-ci.main:jenkins-core

Jenkins 2.191 and earlier, LTS 2.176.2 and earlier allowed users to obtain CSRF tokens without an associated web session ID, resulting in CSRF tokens that did not expire and could be used to bypass CSRF protection for the anonymous user.

 https://cve.radiocsirt.org/vuln/gsd-2019-10384 gsd-2019-10384 2026-10-17T13:58:36.519997+00:00 gsd-2019-10384 https://cve.radiocsirt.org/vuln/rhsa-2019:2789 RHSA-2019:2789 — Red Hat Security Advisory: OpenShift Container Platform 4.1.16 jenkins security update 2026-10-17T13:58:36.520008+00:00

jenkins: stored cross-site scripting in update center web pages (SECURITY-1453) jenkins: CSRF protection tokens for anonymous users did not expire in some circumstances (SECURITY-1491)