https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T14:33:19.362265+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-68704 CVE-2025-68704 — Jervis has a Weak Random for Timing Attack Mitigation 2026-10-07T14:33:19.380075+00:00

Affected: samrocketman jervis

Jervis is a library for Job DSL plugin scripts and shared Jenkins pipeline libraries. Prior to 2.2, Jervis uses java.util.Random() which is not cryptographically secure for timing attack mitigation. This vulnerability is fixed in 2.2.