https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T19:26:16.919691+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-gitea-2022-46685 BIT-gitea-2022-46685 2026-10-10T19:26:16.987337+00:00

Affected: Bitnami: gitea

In Jenkins Gitea Plugin 1.4.4 and earlier, the implementation of Gitea personal access tokens did not support credentials masking, potentially exposing them through the build log.

 https://cve.radiocsirt.org/vuln/euvd-2026-232985 EUVD-2026-232985 2026-10-10T19:26:16.987390+00:00 EUVD-2026-232985 https://cve.radiocsirt.org/vuln/fkie_cve-2022-46685 fkie_cve-2022-46685 2026-10-10T19:26:16.987406+00:00

In Jenkins Gitea Plugin 1.4.4 and earlier, the implementation of Gitea personal access tokens did not support credentials masking, potentially exposing them through the build log.

 https://cve.radiocsirt.org/vuln/ghsa-x3qh-53qf-jxq9 GHSA-x3qh-53qf-jxq9 — Jenkins Gitea Plugin vulnerable to Cleartext Transmission of Sensitive Information 2026-10-10T19:26:16.987428+00:00

Affected: Maven: org.jenkins-ci.plugins:gitea

In Jenkins Gitea Plugin 1.4.4 and earlier, the implementation of Gitea personal access tokens did not support credentials masking, potentially exposing them through the build log.

Gitea Plugin 1.4.5 adds support for masking of Gitea personal access tokens.

Administrators unable to update are advised to use SSH checkout instead.

 https://cve.radiocsirt.org/vuln/gsd-2022-46685 gsd-2022-46685 2026-10-10T19:26:16.987452+00:00 gsd-2022-46685 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-2262 WID-SEC-W-2022-2262 — Jenkins: Mehrere Schwachstellen 2026-10-10T19:26:16.987464+00:00

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um Sicherheitsvorkehrungen zu umgehen und einen Cross-Site-Scripting-Angriff durchzuführen.