CVE-2025-59474: Missing Authorization

Jenkins 2.527 and earlier, LTS 2.516.2 and earlier does not perform a permission check in the sidepanel of a page intentionally accessible to users lacking Overall/Read permission, allowing attackers without Overall/Read permission to list agent names through its sidepanel executors widget...

MAL-2025-41305 Malicious code in list-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a276cf4b05366ccbd6833fab14810e95cdcb847d5c8edea81d505e0f39f4ca7c The OpenSSF Package Analysis project identified 'list-agent' @ 99.0.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in list-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a276cf4b05366ccbd6833fab14810e95cdcb847d5c8edea81d505e0f39f4ca7c The OpenSSF Package Analysis project identified 'list-agent' @ 99.0.9 npm as malicious. It is considered malicious because: - The package...