CVE-2026-84655

A flaw was found in Jenkins. When serializing objects as JSON and Python through its REST API, Jenkins does not properly escape map keys. This allows an attacker who can control map property names to inject arbitrary fields into JSON and Python API responses, potentially leading to information...