com.nirima.jenkins.repository:jenkins-maven-plugin (>=0.6, <=0.9), com.nirima.jenkins.repository:pom (>=0.6, <=0.9) +12 more potentially affected by CVE-2025-67635 via org.jenkins-ci.main:jenkins-core (1.417)

org.jenkins-ci.main:jenkins-core MAVEN version 1.417 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.nirima.jenkins.repository:jenkins-maven-plugin =0.6, =0.6, =0.6, =1.0, =0.1, =1.1, =0.1.0,...

org.jenkins-ci.main:jenkins-test-harness (1.537), org.jenkins-ci.main:jenkins-war (1.537) +2 more potentially affected by CVE-2025-67637 via org.jenkins-ci.main:jenkins-core (1.537)

org.jenkins-ci.main:jenkins-core MAVEN version 1.537 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.537 - org.jenkins-ci.main:jenkins-war 1.537 -...

org.jenkins-ci.main:jenkins-test-harness (1.634), org.jenkins-ci.main:jenkins-war (1.634) +1 more potentially affected by CVE-2025-67637 via org.jenkins-ci.main:jenkins-core (1.634)

org.jenkins-ci.main:jenkins-core MAVEN version 1.634 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.634 - org.jenkins-ci.main:jenkins-war 1.634 -...

com.antelink.reporter.jenkins.plugin:antepediareporter-ci-plugin (>=1.7, <=1.8), org.jenkins-ci.main:jenkins-test-harness (1.536) +3 more potentially affected by CVE-2025-67635 via org.jenkins-ci.main:jenkins-core (1.536)

org.jenkins-ci.main:jenkins-core MAVEN version 1.536 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.antelink.reporter.jenkins.plugin:antepediareporter-ci-plugin =1.7, =1.1, =1.2 Source cves:...

com.groupon.jenkins-ci.plugins:dotci (>=1.1.1, <=2.5.4), org.jenkins-ci.main:jenkins-test-harness (1.567) +4 more potentially affected by CVE-2025-67636 via org.jenkins-ci.main:jenkins-core (1.567)

org.jenkins-ci.main:jenkins-core MAVEN version 1.567 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.groupon.jenkins-ci.plugins:dotci =1.1.1, =1.3, =1.8, =1.8.1 Source cves: CVE-2025-67636...

Wordfence Bug Bounty Program Monthly Report – November 2025

Last month in November 2025, the Wordfence Bug Bounty Program received 746 vulnerability submissions from our growing community of security researchers working to improve the overall security posture of the WordPress ecosystem. These submissions are reviewed, triaged, and processed by the Wordfen...

io.jenkins.plugins:autograding (4.2.0), io.jenkins.plugins:code-coverage-api (4.99.0) +3 more potentially affected by CVE-2025-67641 via io.jenkins.plugins:coverage (>=1.1.0, <=2.2941.v08df75b_767f1)

io.jenkins.plugins:coverage MAVEN version =1.1.0, =-rc6.886d29ff0f4d, =67.v35d155a1ffdf, =1554.v292f3d3479e6, =1556.vd9051bd6ef5d Source cves: CVE-2025-67641 Source advisory: MEND:CVE-2025-67641...

com.github.vzakharchenko:chillispot-radius-plugin (1.4.4), com.github.vzakharchenko:cisco-radius-plugin (1.4.4) +34 more potentially affected by CVE-2025-14082 via org.keycloak:keycloak-services (18.0.0)

org.keycloak:keycloak-services MAVEN version 18.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.4.4 -...

com.github.vzakharchenko:chillispot-radius-plugin (1.4.6), com.github.vzakharchenko:cisco-radius-plugin (1.4.6) +31 more potentially affected by CVE-2025-14082 via org.keycloak:keycloak-services (18.0.2)

org.keycloak:keycloak-services MAVEN version 18.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.4.6 -...

com.github.vzakharchenko:chillispot-radius-plugin (1.3.10), com.github.vzakharchenko:cisco-radius-plugin (1.3.10) +22 more potentially affected by CVE-2025-14082 via org.keycloak:keycloak-services (15.0.0)

org.keycloak:keycloak-services MAVEN version 15.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.3.10 -...

com.github.vzakharchenko:keycloak-plugins (1.2.4), com.github.vzakharchenko:mikrotik-radius-plugin (1.2.4) +12 more potentially affected by CVE-2025-14082 via org.keycloak:keycloak-services (10.0.1)

org.keycloak:keycloak-services MAVEN version 10.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:keycloak-plugins 1.2.4 - com.github.vzakharchenko:mikrotik-radius-plugin...

com.github.vzakharchenko:chillispot-radius-plugin (1.3.3), com.github.vzakharchenko:cisco-radius-plugin (1.3.3) +23 more potentially affected by CVE-2025-14082 via org.keycloak:keycloak-services (12.0.2)

org.keycloak:keycloak-services MAVEN version 12.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.3.3 -...

com.github.vzakharchenko:chillispot-radius-plugin (>=1.3.1, <=1.3.2), com.github.vzakharchenko:cisco-radius-plugin (>=1.3.1, <=1.3.2) +21 more potentially affected by CVE-2025-14082 via org.keycloak:keycloak-services (12.0.1)

org.keycloak:keycloak-services MAVEN version 12.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin =1.3.1, =1.3.1, =1.3.1, =1.3.1, =1.3.1, =1.3.1,...

com.github.vzakharchenko:chillispot-radius-plugin (1.3.6), com.github.vzakharchenko:cisco-radius-plugin (1.3.6) +27 more potentially affected by CVE-2025-14082 via org.keycloak:keycloak-services (13.0.0)

org.keycloak:keycloak-services MAVEN version 13.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.3.6 -...

com.github.vzakharchenko:keycloak-plugins (>=1.1.0, <=1.2.0), com.github.vzakharchenko:mikrotik-radius-plugin (>=1.1.0, <=1.2.0) +12 more potentially affected by CVE-2025-14082 via org.keycloak:keycloak-services (9.0.0)

org.keycloak:keycloak-services MAVEN version 9.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:keycloak-plugins =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.2.0 -...

com.github.vzakharchenko:chillispot-radius-plugin (1.3.19), com.github.vzakharchenko:cisco-radius-plugin (1.3.19) +28 more potentially affected by CVE-2025-14082 via org.keycloak:keycloak-services (16.1.1)

org.keycloak:keycloak-services MAVEN version 16.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.3.19 -...

com.github.vzakharchenko:chillispot-radius-plugin (>=1.3.8, <=1.3.9), com.github.vzakharchenko:cisco-radius-plugin (>=1.3.8, <=1.3.9) +23 more potentially affected by CVE-2025-14082 via org.keycloak:keycloak-services (14.0.0)

org.keycloak:keycloak-services MAVEN version 14.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin =1.3.8, =1.3.8, =1.3.8, =1.3.8, =1.3.8, =1.3.8,...

com.github.vzakharchenko:keycloak-plugins (1.2.2), com.github.vzakharchenko:mikrotik-radius-plugin (1.2.2) +13 more potentially affected by CVE-2025-14082 via org.keycloak:keycloak-services (9.0.2)

org.keycloak:keycloak-services MAVEN version 9.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:keycloak-plugins 1.2.2 - com.github.vzakharchenko:mikrotik-radius-plugin...

grafana security update

10.2.6-21 - Resolves RHEL-125631: CVE-2025-58183 - Resolves RHEL-132760: Grafana-selinux prevents plugins from searching cgroups...

Plugins information leakage vulnerability

Plugins are a number of CNI open source reference and example network plugins. An information disclosure vulnerability exists in Plugins versions 1.6.0 through 1.8.0, which stems from a misconfiguration of the nftables backend that could lead to traffic interception...