https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T16:23:59.969626+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-241430 EUVD-2026-241430 2026-10-07T16:24:00.032480+00:00 EUVD-2026-241430 https://cve.radiocsirt.org/vuln/fkie_cve-2022-41248 fkie_cve-2022-41248 2026-10-07T16:24:00.032518+00:00

Jenkins BigPanda Notifier Plugin 1.4.0 and earlier does not mask the BigPanda API key on the global configuration form, increasing the potential for attackers to observe and capture it.

 https://cve.radiocsirt.org/vuln/ghsa-cpm5-cqr9-7p79 GHSA-cpm5-cqr9-7p79 — Jenkins BigPanda Notifier Plugin Missing Password Field Masking 2026-10-07T16:24:00.032551+00:00

Affected: Maven: org.jenkins-ci.plugins:bigpanda-jenkins

BigPanda Notifier Plugin 1.4.0 and earlier stores the BigPanda API key unencrypted in its global configuration file `BigpandaGlobalNotifier.xml` on the Jenkins controller as part of its configuration.

This API key can be viewed by users with access to the Jenkins controller file system.

Additionally, the global configuration form does not mask the API key, increasing the potential for attackers to observe and capture it.

 https://cve.radiocsirt.org/vuln/gsd-2022-41248 gsd-2022-41248 2026-10-07T16:24:00.032580+00:00 gsd-2022-41248