https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 15:23:29 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-241430 EUVD-2026-241430 https://cve.radiocsirt.org/vuln/euvd-2026-241430 https://cve.radiocsirt.org/vuln/fkie_cve-2022-41248 <p>Jenkins BigPanda Notifier Plugin 1.4.0 and earlier does not mask the BigPanda API key on the global configuration form, increasing the potential for attackers to observe and capture it.</p> <p>Jenkins BigPanda Notifier Plugin 1.4.0 and earlier does not mask the BigPanda API key on the global configuration form, increasing the potential for attackers to observe and capture it.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-41248 https://cve.radiocsirt.org/vuln/ghsa-cpm5-cqr9-7p79 <p><strong>Affected:</strong> Maven: org.jenkins-ci.plugins:bigpanda-jenkins</p> <p>BigPanda Notifier Plugin 1.4.0 and earlier stores the BigPanda API key unencrypted in its global configuration file `BigpandaGlobalNotifier.xml` on the Jenkins controller as part of its configuration.</p> <p>This API key can be viewed by users with access to the Jenkins controller file system.</p> <p>Additionally, the global configuration form does not mask the API key, increasing the potential for attackers to observe and capture it.</p> <p><strong>Affected:</strong> Maven: org.jenkins-ci.plugins:bigpanda-jenkins</p> <p>BigPanda Notifier Plugin 1.4.0 and earlier stores the BigPanda API key unencrypted in its global configuration file `BigpandaGlobalNotifier.xml` on the Jenkins controller as part of its configuration.</p> <p>This API key can be viewed by users with access to the Jenkins controller file system.</p> <p>Additionally, the global configuration form does not mask the API key, increasing the potential for attackers to observe and capture it.</p> https://cve.radiocsirt.org/vuln/ghsa-cpm5-cqr9-7p79 https://cve.radiocsirt.org/vuln/gsd-2022-41248 gsd-2022-41248 https://cve.radiocsirt.org/vuln/gsd-2022-41248