CVE-2026-31987

Apache Airflow is vulnerable to the exposure of JWT Tokens used by tasks within the application logs. This information leakage could potentially allow UI users to impersonate Dag Authors . To remediate this issue, users are recommended to upgrade to Airflow version 3.2.0 , which contains the fix....

EUVD-2026-3161

In Secure Access 12.70 and prior to 14.20, the logging subsystem may write an unredacted authentication token to logs under certain configurations. Any party with access to those logs could read the token and reuse it to access an integrated system...

BIT-JENKINS-2024-9453 Jenkins-image: sensitive data disclosure when using openshift jenkins image

A vulnerability was found in Red Hat OpenShift Jenkins. The bearer token is not obfuscated in the logs and potentially carries a high risk if those logs are centralized when collected. The token is typically valid for one year. This flaw allows a malicious user to jeopardize the environment if th...