Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 05:54:04 +0000 cnvd-2021-39162 https://cve.radiocsirt.org/vuln/cnvd-2021-39162 cnvd-2021-39162 https://cve.radiocsirt.org/vuln/cnvd-2021-39162 EUVD-2026-22349 https://cve.radiocsirt.org/vuln/euvd-2026-22349 EUVD-2026-22349 https://cve.radiocsirt.org/vuln/euvd-2026-22349 fkie_cve-2021-21658 https://cve.radiocsirt.org/vuln/fkie_cve-2021-21658 <p>Jenkins Nuget Plugin 1.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.</p> <p>Jenkins Nuget Plugin 1.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-21658 GHSA-p674-hh8x-rv5h — XML external entity vulnerability in Jenkins Nuget Plugin https://cve.radiocsirt.org/vuln/ghsa-p674-hh8x-rv5h <p><strong>Affected:</strong> Maven: org.jenkins-ci.plugins:nuget</p> <p>Jenkins Nuget Plugin 1.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks. This XML parser is used for the \&#34;Build on NuGet updates\&#34; feature.</p> <p>This allows attackers with the ability to control the contents of the `packages.config` file in a workspace to have Jenkins parse a crafted XML document that uses external entities for extraction of secrets from the Jenkins controller or server-side request forgery.</p> <p>Jenkins Nuget Plugin 1.1 disables external entity resolution for its XML parser.</p> <p><strong>Affected:</strong> Maven: org.jenkins-ci.plugins:nuget</p> <p>Jenkins Nuget Plugin 1.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks. This XML parser is used for the \&#34;Build on NuGet updates\&#34; feature.</p> <p>This allows attackers with the ability to control the contents of the `packages.config` file in a workspace to have Jenkins parse a crafted XML document that uses external entities for extraction of secrets from the Jenkins controller or server-side request forgery.</p> <p>Jenkins Nuget Plugin 1.1 disables external entity resolution for its XML parser.</p> https://cve.radiocsirt.org/vuln/ghsa-p674-hh8x-rv5h gsd-2021-21658 https://cve.radiocsirt.org/vuln/gsd-2021-21658 gsd-2021-21658 https://cve.radiocsirt.org/vuln/gsd-2021-21658