https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T04:00:56.649462+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-216907 EUVD-2026-216907 2026-10-06T04:00:56.653690+00:00 EUVD-2026-216907 https://cve.radiocsirt.org/vuln/fkie_cve-2023-46650 fkie_cve-2023-46650 2026-10-06T04:00:56.653723+00:00

Jenkins GitHub Plugin 1.37.3 and earlier does not escape the GitHub project URL on the build page when showing changes, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.

 https://cve.radiocsirt.org/vuln/ghsa-mv77-fj63-q5w8 GHSA-mv77-fj63-q5w8 — Stored XSS vulnerability in Jenkins GitHub Plugin 2026-10-06T04:00:56.653753+00:00

Affected: Maven: com.coravy.hudson.plugins.github:github

Jenkins GitHub Plugin 1.37.3 and earlier does not escape the GitHub project URL on the build page when showing changes.

This results in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.

GitHub Plugin 1.37.3.1 escapes GitHub project URL on the build page when showing changes.

 https://cve.radiocsirt.org/vuln/gsd-2023-46650 gsd-2023-46650 2026-10-06T04:00:56.653780+00:00 gsd-2023-46650 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2750 WID-SEC-W-2023-2750 — Jenkins: Mehrere Schwachstellen 2026-10-06T04:00:56.653793+00:00

Ein Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um einen Cross-Site-Scripting-Angriff durchzuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen oder Dateien zu manipulieren.