Vanguard-Map

VANGUARD1 — Multi-Domain Tactical Intelligence Map A real-time 3D map of the world's moving things: live ship traffic AIS, aircraft, satellites, submarine cables, ports, chokepoints, and space weather — rendered as a 1.5M-point terrain cloud with day/night, ocean simulation, and cinematic camera...

Malicious code in multichain-rpc (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5765482ebcff5ac393edb3ce06164e7c697a00aa7e32c92b1272dc20184b424 The gem's extconf.rb, executed automatically by gem install as a native-extension build step, base64-decodes a Ruby payload and runs it via eval insi...

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization via cancellation of downstream builds in Pipeline: Build Step Plugin. An attacker can cancel downstream Jenkins builds without the required Item/Cancel permission because the plugin fails to verify that the build's...

CVE-2026-84660

A missing permission check in Jenkins Pipeline: Build Step Plugin 599.v4b67ea11b152 and earlier causes downstream builds triggered by the build step to be canceled even when the build's authentication lacks Item/Cancel permission on the downstream job...

CVE-2026-84661

A missing permission check in Jenkins Pipeline: Build Step Plugin 599.v4b67ea11b152 and earlier causes downstream builds awaited by the waitForBuild step when the propagateAbort parameter is used to be canceled even when the build's authentication lacks Item/Cancel permission on the downstream jo...

CVE-2026-84661

A missing permission check in Jenkins Pipeline: Build Step Plugin 599.v4b67ea11b152 and earlier causes downstream builds awaited by the "waitForBuild" step when the "propagateAbort" parameter is used to be canceled even when the build's authentication lacks Item/Cancel permission on the downstrea...

CVE-2026-84661

The Jenkins Pipeline: Build Step Plugin (version 599.v4b_67ea_11b_152 and earlier) is vulnerable to a missing permission check that allows unauthorized cancellation of downstream builds. When using the waitForBuild step with the propagateAbort parameter set to true, the plugin fails to verify tha...

EUVD-2026-70127

A missing permission check in Jenkins Pipeline: Build Step Plugin 599.v4b67ea11b152 and earlier causes downstream builds awaited by the waitForBuild step when the propagateAbort parameter is used to be canceled even when the build's authentication lacks Item/Cancel permission on the downstream jo...

CVE-2026-84661

A missing permission check in Jenkins Pipeline: Build Step Plugin 599.v4b67ea11b152 and earlier causes downstream builds awaited by the waitForBuild step when the propagateAbort parameter is used to be canceled even when the build's authentication lacks Item/Cancel permission on the downstream jo...

com.testinium.jenkins:testinium (1.0), io.jenkins.blueocean:blueocean (>=1.2.0-beta-1, <=1.27.26) +22 more potentially affected by CVE-2026-84661 via org.jenkins-ci.plugins:pipeline-build-step (>=2.0, <=599.v4b_67ea_11b_152)

org.jenkins-ci.plugins:pipeline-build-step MAVEN version =2.0, =1.2.0-beta-1, =1.27.17, =1.27.17, =1.27.17, =1.27.17, =1.27.17, =1.27.17, =1.83.v5bff0e55cd2d, =3.1391.vcbaab9779d75, =877.v578e46d8e5b3, =2.2.0, =2.0, =2.0.5, =2.0.8 - org.jenkins-ci.plugins:convert-to-pipeline 1.0 and more Source...

CVE-2026-84660

A missing permission check in Jenkins Pipeline: Build Step Plugin 599.v4b67ea11b152 and earlier causes downstream builds triggered by the "build" step to be canceled even when the build's authentication lacks Item/Cancel permission on the downstream job...

EUVD-2026-70126

A missing permission check in Jenkins Pipeline: Build Step Plugin 599.v4b67ea11b152 and earlier causes downstream builds triggered by the build step to be canceled even when the build's authentication lacks Item/Cancel permission on the downstream job...

CVE-2026-84660

The Jenkins Pipeline: Build Step Plugin (version 599.v4b_67ea_11b_152 and earlier) is vulnerable to a missing authorization check. When a pipeline uses the build step to trigger a downstream build, the plugin fails to verify if the build's authentication possesses the Item/Cancel permission for t...

CVE-2026-84660

A missing permission check in Jenkins Pipeline: Build Step Plugin 599.v4b67ea11b152 and earlier causes downstream builds triggered by the build step to be canceled even when the build's authentication lacks Item/Cancel permission on the downstream job...

CVE-2026-84660

A missing permission check in Jenkins Pipeline: Build Step Plugin 599.v4b67ea11b152 and earlier causes downstream builds triggered by the build step to be canceled even when the build's authentication lacks Item/Cancel permission on the downstream job...

com.testinium.jenkins:testinium (1.0), io.jenkins.blueocean:blueocean (>=1.2.0-beta-1, <=1.27.26) +22 more potentially affected by CVE-2026-84660 via org.jenkins-ci.plugins:pipeline-build-step (>=2.0, <=599.v4b_67ea_11b_152)

org.jenkins-ci.plugins:pipeline-build-step MAVEN version =2.0, =1.2.0-beta-1, =1.27.17, =1.27.17, =1.27.17, =1.27.17, =1.27.17, =1.27.17, =1.83.v5bff0e55cd2d, =3.1391.vcbaab9779d75, =877.v578e46d8e5b3, =2.2.0, =2.0, =2.0.5, =2.0.8 - org.jenkins-ci.plugins:convert-to-pipeline 1.0 and more Source...

PT-2026-84783

A missing permission check in Jenkins Pipeline: Build Step Plugin 599.v4b 67ea 11b 152 and earlier causes downstream builds triggered by the build step to be canceled even when the build's authentication lacks Item/Cancel permission on the downstream job...

Missing permission check in pipeline-build-step allows canceling downstream builds

Builds in Jenkins are associated with an authentication that controls the permissions that the build has to interact with other elements in Jenkins. By default, builds run as SYSTEM and are unconstrained unless plugins implement specific additional permission checks. Plugins like Authorize Projec...

CVE-2026-84661: Missing Authorization

A missing permission check in Jenkins Pipeline: Build Step Plugin 599.v4b67ea11b152 and earlier causes downstream builds awaited by the waitForBuild step when the propagateAbort parameter is used to be canceled even when the build's authentication lacks Item/Cancel permission on the downstream jo...

CVE-2026-84660: Missing Authorization

A missing permission check in Jenkins Pipeline: Build Step Plugin 599.v4b67ea11b152 and earlier causes downstream builds triggered by the build step to be canceled even when the build's authentication lacks Item/Cancel permission on the downstream job...