jenkins -- multiple vulnerabilities

Jenkins Security Advisory: Description High SECURITY-3669 / CVE-2026-27099 Stored XSS vulnerability in node offline cause description Medium SECURITY-3658 / CVE-2026-27100 Build information disclosure vulnerability through Run Parameter...

Stored XSS vulnerability in node offline cause description

Since Jenkins 2.483, the description of the reason why a node is offline the "offline cause" is defined as containing HTML and rendered as such. Jenkins 2.550 and earlier, LTS 2.541.1 and earlier does not escape the user-provided description of the "Mark temporarily offline" offline cause. This...

Product release: Virtuozzo Hybrid Infrastructure 3.5 Update 4 (3.5.4-24)

This update provides a new feature as well as bug fixes and improvements. Vulnerability id: VSTOR-33730 Nodes may be shown as offline in admin panel after releasing a failed CS disk. Vulnerability id: VSTOR-33712 False positive "Node is offline" alerts may appear. Vulnerability id: VSTOR-33672 Th...

CVE-2018-12557

An issue was discovered in Zuul 3.x before 3.1.0. If nodes become offline during the build, the nolog attribute of a task is ignored. If the unreachable error occurred in a task used with a loop variable e.g., withitems, the contents of the loop items would be printed in the console. This could...