https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T07:29:11.325900+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-25262 cnvd-2021-25262 2026-10-16T07:29:11.329047+00:00 cnvd-2021-25262 https://cve.radiocsirt.org/vuln/euvd-2026-22318 EUVD-2026-22318 2026-10-16T07:29:11.329078+00:00 EUVD-2026-22318 https://cve.radiocsirt.org/vuln/fkie_cve-2021-21634 fkie_cve-2021-21634 2026-10-16T07:29:11.329093+00:00

Jenkins Jabber (XMPP) notifier and control Plugin 1.41 and earlier stores passwords unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system.

 https://cve.radiocsirt.org/vuln/ghsa-79r5-rhrw-7pvh GHSA-79r5-rhrw-7pvh — Passwords stored in plain text by Jenkins Jabber (XMPP) notifier and control Plugin 2026-10-16T07:29:11.329121+00:00

Affected: Maven: org.jvnet.hudson.plugins:jabber

Jenkins Jabber (XMPP) notifier and control Plugin 1.41 and earlier stores passwords unencrypted in its global configuration file `hudson.plugins.jabber.im.transport.JabberPublisher.xml` on the Jenkins controller as part of its configuration.

These passwords can be viewed by users with access to the Jenkins controller file system.

Jenkins Jabber (XMPP) notifier and control Plugin 1.42 stores passwords encrypted once its configuration is saved again.

 https://cve.radiocsirt.org/vuln/gsd-2021-21634 gsd-2021-21634 2026-10-16T07:29:11.329147+00:00 gsd-2021-21634