EUVD-2024-2957

Malicious code in bioql PyPI...

CVE-2025-53662

The Jenkins IFTTT Build Notifier Plugin (version 1.2 and earlier ) contains a vulnerability where IFTTT Maker Channel Keys are stored unencrypted in the config.xml files on the Jenkins controller. This allows users with Item/Extended Read permissions or direct access to the controller's file syst...

PT-2025-9860 · Jenkins +1 · Jenkins +1

Name of the Vulnerable Software and Affected Versions: Jenkins versions 2.499 and earlier, LTS versions 2.492.1 and earlier Description: The issue allows attackers with View/Read permission to view encrypted values of secrets when accessing config.xml of views via REST API or CLI. This occurs...